attack-surface-planner

Plugin attack-surface-planner from marketplace cops-security-marketplace in sodejm/copilot-operation-plugin-for-security. Commands read from the repo's manifest — 10 days ago.

Skills (9)

• authorized-attack-surface-planning

  Help map exposed systems or plan an attack surface review; draft scope first, then build a validated offline plan from approved scope and local exports.

• network-active-discovery

  Use for requests to plan an authorized network service scan. Execute bounded active port, protocol, and TLS assessment with explicit scan vantage, rate limits, resumable checkpoints, and visible fingerprint uncertainty.

• network-data-services

  Use for requests to review database services for security weaknesses. Assess databases (MySQL, Postgres, MSSQL, Oracle), NoSQL/document stores (MongoDB, CouchDB, Cassandra), caches (Redis, Memcached), and search/analytics engines (Elasticsearch, InfluxDB, Kibana, Splunk) with bounded query budgets,

• network-developer-interfaces

  Use for requests to review exposed developer tools and runtime services. Assess developer and runtime interfaces (Docker, Docker Registry, RMI, JDWP, Erlang EPMD, ADB, distcc, SVN, AJP, FastCGI) with execution effect classification, canary verification, cleanup receipts, and developer privilege cand

• network-infrastructure-services

  Use for requests to review DNS and other network infrastructure services. Assess DNS/mDNS, SNMP, NTP, discovery utilities, RPC, LDAP, and Kerberos service exposure with protocol-specific collectors, explicit authentication prerequisites, canary verification, and Active Directory attack-path handoff.

• network-legacy-and-proxy-services

  Use for requests to review legacy network and proxy services. Interpret the nine legacy and proxy service fixture models and bounded socket observations without treating reachability or simulated conditions as verified protocol findings.

• network-messaging-services

  Use for requests to review our mail services for security weaknesses. Assess email services (SMTP, POP3, IMAP), chat (IRC), and message brokers/queues (AMQP/RabbitMQ, NATS, IBM MQ, Kafka, MQTT) with bounded message budgets, synthetic canary verification, cleanup receipts, and messaging privilege can

• network-passive-discovery

  Use for requests to build an asset inventory from existing network records. Normalize passive asset telemetry, preserve multi-source evidence provenance, and reconcile scope quarantine.

• network-remote-and-file-services

  Use for requests to review remote access and file sharing services. Assess remote administration (SSH, Telnet, RDP, VNC, WinRM, X11), file sharing (SMB, NFS, FTP/TFTP, rsync, AFP), and printing services (LPD, IPP, Raw/JetDirect) with canary verification, cleanup receipts, legacy version tracking, an

Similar plugins