redteam-chisel-tunnel
chisel 隧道:HTTP/WebSocket 封装的多路复用隧道,最易穿透出网限制与反向代理(适用:suo5 不适用(非 WebShell 入口)、目标只能出 HTTP、需要端口转发或稳定 SOCKS 时)
Skill by xiyan520
Chalk Labs
Need help deploying redteam-chisel-tunnel?
Chalk Labs sets up agents like this inside real teams: connected to your tools, tested on your data, with a human in the loop where it matters.
Install
Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.
npx agentmarket install skill/xiyan520-redteam-chisel-tunnel
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this skill can do and what it asks for, from its SKILL.md. Checked Oct 25, 2026.
- Tools
- No tools found
- Secrets
- None asked for
- Install scripts
- None found
Network hosts it talks to 1
codeload.github.com· found in install command
Files it touches
~/.claude/skills/redteam-chisel-tunnel
What's inside
- Skill name
redteam-chisel-tunnel- Description
- chisel 隧道:HTTP/WebSocket 封装的多路复用隧道,最易穿透出网限制与反向代理(适用:suo5 不适用(非 WebShell 入口)、目标只能出 HTTP、需要端口转发或稳定 SOCKS 时)
- License
- unknown
- Metadata
- role: internal · ported-from: dsh-purge/skills/redteam/chisel-tunnel.md · when-to-use: suo5 不适用(非 WebShell 入口)、目标只能出 HTTP、需要端口转发或稳定 SOCKS 时
- Instructions
- 110 lines in SKILL.md · view on GitHub
Before installing
- Instructions call the network
Files (1)
- SKILL.md
The license isn't open source, so the instructions aren't shown here. Read SKILL.md on GitHub
More from xiyan520/pi-purge
- 0.556score
redteam-browser-automation
xiyan520
无依赖驱动 Chrome/Chromium 抓取 JS 渲染页面、截图、执行 JS、抓接口清单(headless 兜底 + playwright-cli)(适用:需要渲染 SPA / 取 JS 生成的内容 / 截图留证 / 批量抓页面时(Kimi 扩展不可用时首选))
SkillAFreshness: AClaude Code +9 - 0.556score
redteam-credential-attack
xiyan520
凭据攻击:在线弱口令爆破(hydra)与离线哈希破解(hashcat/john),覆盖 SSH/FTP/RDP/SMB/数据库/Web 后台(适用:发现登录入口(Web 后台/SSH/FTP/RDP/SMB/MySQL/MSSQL/Redis)需要试口令;或已拿到哈希/密文需要还原明文)
SkillAFreshness: AClaude Code +9 - 0.556score
redteam-dir-bruteforce
xiyan520
目录与文件爆破:后台入口、备份文件、配置泄露、源码与版本库暴露(ffuf/feroxbuster/dirsearch/gobuster)(适用:已确认 Web 存活但指纹无直接 Nday 线索;需要找后台入口、备份、配置、源码、上传点等隐藏路径)
SkillAFreshness: AClaude Code +9 - 0.556score
redteam-fscan-intranet
xiyan520
fscan v2.2.1 内网综合扫描:存活探测、端口/服务识别、28 类弱口令爆破、未授权访问与高危漏洞(MS17-010/SMBGhost)、Redis 利用与 SOCKS5 隧道(适用:进入内网(跳板机/WebShell/socks5 隧道)后快速铺开资产面、找弱口令与未授权、把可达性变成可打点)
SkillAFreshness: AClaude Code +9 - 0.556score
redteam-gogo-intranet
xiyan520
gogo v2.15.0 高性能内网扫描引擎:智能/超智能模式、主动+被动指纹、关键信息提取(title/cert/JWT/邮箱/身份证)、nuclei 模板 POC、发包可控低噪声(适用:进入内网后对大网段(/16 /12)快速测绘、要指纹与关键信息、需要尽量少发包不被发现)
SkillAFreshness: AClaude Code +9 - 0.556score
redteam-lateral-movement
xiyan520
内网横向与提权:Impacket 套件(PtH/PsExec/WMI/DCOM/Kerberos/凭据转储)+ enum4linux/smbclient 信息枚举(适用:已进内网,需要用已有凭据或哈希横向到其它主机、枚举域环境、dump 凭据、找域控路径)
SkillAFreshness: AClaude Code +9 - 0.556score
redteam-nuclei-scan
xiyan520
nuclei 模板化漏洞扫描:13,000+ 模板覆盖 CVE/暴露面/配置缺陷/默认口令,Nday 与 1day 的主力检测手段(适用:漏洞发现阶段拿到存活资产清单后,做 Nday/1day 批量检测;或已知组件版本想快速确认是否有现成模板)
SkillAFreshness: AClaude Code +9 - 0.556score
redteam-router
xiyan520
红队技能路由:按当前阶段(信息收集 / 资产测绘 / 指纹 / 目录爆破 / 漏洞扫描 / 未授权利用 / 凭据 / 隧道 / 横向 / WebShell / 浏览器自动化)指到具体 redteam-* 技能,并给出该阶段的落库动作。拿不准该用哪个技能时先读本条。
SkillAFreshness: AClaude Code +9 - 0.556score
redteam-setup
xiyan520
首次使用引导:引导提供 FOFA_KEY 与 VPS 登录方式、验证通道可用、给出降级口径(工具链由工具箱附件按需获取)(适用:用户第一次使用红队模式时;或 redteam_preflight 报出 onboarding.incomplete / 有技能 broken 时;或用户说"环境没配好""工具装一下")
SkillAFreshness: AClaude Code +9 - 0.553score
redteam-frp-tunnel
xiyan520
frp 内网穿透:在自有 VPS 上跑 frps,在目标上跑 frpc,得到稳定 socks5 与端口映射(适用:已有命令执行/RCE 且目标可出网;需要长期稳定隧道、把内网端口映射给用户直接访问时)
SkillAFreshness: AClaude Code +9 - 0.553score
redteam-recon-pipeline
xiyan520
ProjectDiscovery 信息收集流水线:subfinder→dnsx→naabu→httpx→katana 一键铺开域名资产面(适用:信息收集阶段拿到域名/单位名后,系统化铺开子域→解析→端口→存活→页面与接口)
SkillAFreshness: AClaude Code +9 - 0.553score
redteam-fofa-recon
xiyan520
用 FOFA API 批量测绘靶标资产(域名/IP/端口/标题/指纹);内置限速客户端,严格单线程 + 最小间隔 + 退避重试,避免触发 45012(适用:信息收集阶段需要快速铺开某单位/域名的互联网资产面时)
SkillAFreshness: AClaude Code +9
Signals
- Stars
- 0
- Forks
- 0
- Open issues
- 0
- Last commit (this folder)
- Oct 22, 2026 (8 days ago)
From GitHub (fetched Oct 24, 2026).
Details
- License
- License unknown
- Repository
- github.com/xiyan520/pi-purge
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
- Source
- GitHubgithub-graphql
More from xiyan520
- 0.556score
redteam-gogo-intranet
xiyan520
gogo v2.15.0 高性能内网扫描引擎:智能/超智能模式、主动+被动指纹、关键信息提取(title/cert/JWT/邮箱/身份证)、nuclei 模板 POC、发包可控低噪声(适用:进入内网后对大网段(/16 /12)快速测绘、要指纹与关键信息、需要尽量少发包不被发现)
SkillAFreshness: AClaude Code +9 - 0.556score
redteam-dir-bruteforce
xiyan520
目录与文件爆破:后台入口、备份文件、配置泄露、源码与版本库暴露(ffuf/feroxbuster/dirsearch/gobuster)(适用:已确认 Web 存活但指纹无直接 Nday 线索;需要找后台入口、备份、配置、源码、上传点等隐藏路径)
SkillAFreshness: AClaude Code +9 - 0.556score
redteam-browser-automation
xiyan520
无依赖驱动 Chrome/Chromium 抓取 JS 渲染页面、截图、执行 JS、抓接口清单(headless 兜底 + playwright-cli)(适用:需要渲染 SPA / 取 JS 生成的内容 / 截图留证 / 批量抓页面时(Kimi 扩展不可用时首选))
SkillAFreshness: AClaude Code +9 - 0.556score
redteam-fscan-intranet
xiyan520
fscan v2.2.1 内网综合扫描:存活探测、端口/服务识别、28 类弱口令爆破、未授权访问与高危漏洞(MS17-010/SMBGhost)、Redis 利用与 SOCKS5 隧道(适用:进入内网(跳板机/WebShell/socks5 隧道)后快速铺开资产面、找弱口令与未授权、把可达性变成可打点)
SkillAFreshness: AClaude Code +9 - 0.556score
redteam-credential-attack
xiyan520
凭据攻击:在线弱口令爆破(hydra)与离线哈希破解(hashcat/john),覆盖 SSH/FTP/RDP/SMB/数据库/Web 后台(适用:发现登录入口(Web 后台/SSH/FTP/RDP/SMB/MySQL/MSSQL/Redis)需要试口令;或已拿到哈希/密文需要还原明文)
SkillAFreshness: AClaude Code +9 - 0.556score
redteam-lateral-movement
xiyan520
内网横向与提权:Impacket 套件(PtH/PsExec/WMI/DCOM/Kerberos/凭据转储)+ enum4linux/smbclient 信息枚举(适用:已进内网,需要用已有凭据或哈希横向到其它主机、枚举域环境、dump 凭据、找域控路径)
SkillAFreshness: AClaude Code +9
Done for you
Rather not set it up yourself?
Chalk Labs scopes, builds and runs agents for your team: the task audit, the eval harness, the integrations and the weekly ops report. Fixed scope, priced before we start.
See how we build AI agents →Read the case studies
Chalk Labs is a two-founder AI and growth studio. We build AI agents, CRMs and MVPs for Web3 and AI companies, and have shipped 50+ product and token launches.
- launches shipped
- 50+
- launches shipped
- media placements
- 500+
- media placements
- founders on every account
- 2
- founders on every account
Press we've placed: Forbes · CoinDesk · Decrypt · Cointelegraph · The Block
Rahil Jain, Co-founder, Chalk Labs. Ex-Goldman Sachs engineer. You talk to the person who builds it.
Get redteam-chisel-tunnel running in your business
Tell us what you want to automate. A founder replies within one working day with a plan, not a pitch deck.
Cite this page
redteam-chisel-tunnel skill. Agent Mart. https://agentmart.dev/skills/xiyan520-redteam-chisel-tunnel (last updated 2026-10-24)