Rejected on review of intent — do not install this skill
A review judged that this skill is written to make an agent act against its user. It stays readable here so you can see why, and it cannot be installed, forked, or loaded into an agent.
Securityby mukul975
Conducting Spearphishing Simulation Campaign
conducting-spearphishing-simulation-campaign
Spearphishing simulation is a targeted social engineering attack vector used by red teams to gain initial access. Unlike broad phishing campaigns, spearphishing uses OSINT-derived intelligence to craf
What it changes
No verified benchmark yet. This imported skill is awaiting measurement.
What's inside
SKILL.md108 linessingle fileincludes scripts
The instructions your model reads when the skill loads.
Conducting Spearphishing Simulation Campaign
Legal Notice: This skill is for authorized security testing and educational purposes only. Unauthorized use against systems you do not own or have written permission to test is illegal and may violate computer fraud laws.
Overview
Spearphishing simulation is a targeted social engineering attack vector used by red teams to gain initial access. Unlike broad phishing campaigns, spearphishing uses OSINT-derived intelligence to craft highly personalized messages targeting specific individuals. This skill covers developing pretexts, building payloads, setting up email infrastructure, executing the campaign, and tracking results.
When to Use
When conducting security assessments that involve conducting spearphishing simulation campaign
When following incident response procedures for related security events
When performing scheduled security testing or auditing activities
When validating security controls through hands-on testing
Prerequisites
Familiarity with red teaming concepts and tools
Access to a test or lab environment for safe execution
Python 3.8+ with required dependencies installed
Appropriate authorization for any testing activities
Objectives
Develop convincing pretexts tailored to specific target personnel
Create weaponized payloads that bypass email security controls
Set up email delivery infrastructure with proper SPF/DKIM/DMARC configuration
Execute phishing campaigns with real-time tracking and metrics
Document results for engagement reporting and security awareness improvement
MITRE ATT&CK Mapping
T1566.001 - Phishing: Spearphishing Attachment
T1566.002 - Phishing: Spearphishing Link
T1566.003 - Phishing: Spearphishing via Service
T1598.003 - Phishing for Information: Spearphishing Link