Detect and respond to Adversary-in-the-Middle (AiTM) phishing attacks that use reverse proxy kits like EvilProxy, Evilginx, and Tycoon 2FA to bypass MFA and steal session tokens, correlating Azure AD/Entra sign-in logs, SIEM alerts, and EDR telemetry.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-adversary-in-the-middle-phishing-detectionnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-adversary-in-the-middle-phishing-detection -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-adversary-in-the-middle-phishing-detection -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/performing-adversary-in-the-middle-phishing-detectiongh skill install mukul975/Anthropic-Cybersecurity-Skills performing-adversary-in-the-middle-phishing-detectiongit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/performing-adversary-in-the-middle-phishing-detection ~/.claude/skills/performing-adversary-in-the-middle-phishing-detection # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/performing-adversary-in-the-middle-phishing-detection ~/.agents/skills/performing-adversary-in-the-middle-phishing-detection # Codex, Cursor, Gemini CLI, Copilot, OpenCode