Home / Skills / enterprise-vpn-attack

enterprise-vpn-attack

External SSL VPN / remote-access appliance attack matrix — Cisco ASA/AnyConnect, Fortinet FortiGate/FortiOS, Citrix NetScaler/ADC, Palo Alto GlobalProtect, Pulse Secure / Ivanti Connect Secure, SonicWall, F5 Big-IP. Covers version fingerprinting, CVE matrix (2018-2026), AAA backend identification, default credentials, configuration-disclosure paths, pre-auth RCE/SSRF/path-traversal exploits where applicable. Built from authorized-engagement Cisco ASA testing plus 2024-2026 enterprise VPN CVE landscape. Use whenever the target's perimeter exposes any SSL VPN appliance or remote-access gateway —

Scanned · 2 to knowSkillSource: GitHub

5,176 stars +113 this week Updated 16d ago License MIT Context ≈156 tokens always loaded

77popular

Why this score

Stars

19/35

Usage (forks)

8/15

Upkeep

25/25

License

15/15

Owner history

10/10

This repo hosts 10 skills, so its 5,176 stars are split between them (about 518 each) for scoring.

Popularity score: 77/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank

Security

Scanned Oct 20, 2026 at commit dce681c32a7e, with Cisco's open-source skill-scanner.

What its code does:

Reads environment variables and sends network requests with them API clients do this to send your key to the service. Check which service it talks to.SKILL.md:186 and 1 more
Runs shell commands Common for dev tools. Read the commands it runs.SKILL.md:146 and 1 more

A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan

Alternatives

Other makers' add-ons that do the same job, next to this one.

Name	Score	Stars	Context	Updated
This oneenterprise-vpn-attack elementalsouls/Claude-BugHunter · Skill	77	★ 5.2k	≈156 always	16d ago
shiro-attack-cli SummerSec/ShiroAttack2 · Skill Both about attack and cve	71	★ 2.6k	≈61 always	5mo ago
enterprise-architecture gauravs19/enterprise-architecture-skill · Skill Both about enterprise	61	★ 17	≈28 always	23d ago
enterprise-expert ww-w-ai/bkit-claude-code · Subagent Both about enterprise	53	★ 603	≈16 in chat	1mo ago
enterprise-clone-builder zjp1997720/zhijian-skills · Skill Both about enterprise	67	★ 784	≈26 always	21d ago
patterns-of-enterprise-application-architecture ciembor/agent-rules-books · Skill Both about enterprise	69	★ 3.1k	≈53 always	2mo ago

Install

mkdir -p .claude/skills/enterprise-vpn-attack

curl -sL https://codeload.github.com/elementalsouls/Claude-BugHunter/tar.gz/dce681c32a7ee1d938f84bdbdaf367aa3d12ccd9 | tar -xz -C .claude/skills/enterprise-vpn-attack --strip-components=3 "Claude-BugHunter-dce681c32a7ee1d938f84bdbdaf367aa3d12ccd9/skills/enterprise-vpn-attack"

To remove it later:

rm -rf .claude/skills/enterprise-vpn-attack

npx skills add elementalsouls/Claude-BugHunter --skill enterprise-vpn-attack

Pinned to commit dce681c32a7e as listed by GitHub.

Context cost: ≈156 tokens loaded every session (name and description), plus ≈4.3k tokens when the skill is used.

The Claude Code command downloads this skill folder at the pinned commit into .claude/skills/. The Skills CLI (npx skills) works with many agents but can't pin a version, so it installs whatever is current.

Used for

Engineering › Testing & QA Engineering › Backend & APIs Security › Security review

Facts

Repo: elementalsouls/Claude-BugHunter
Stars: 5,176
Forks: 788
Last push: 2026-10-19 (16d ago)
License: MIT
Owner: elementalsouls · since 2019
Language: Python
Works with: Claude Code, Skills CLI