# ops-infrastructure

Infrastructure operations, SSH, tunnel, firewall, and offensive IaC attack-surface workflows.

- **Kind:** plugin (installs as one bundle)
- **Owner:** SpecterOps
- **Source:** https://github.com/SpecterOps/skills (`plugins/ops-infrastructure`)
- **Pinned commit:** `e655f93ab694c446b76672efe6e71e62aac0b7b8`
- **Page:** https://forefy.com/plugins/cabfd0cb-e699-5218-8960-4c07466a5e90
- **API (JSON):** https://forefy.com/api/asr/plugins/cabfd0cb-e699-5218-8960-4c07466a5e90

## Install

Ask your agent: `Install the ops-infrastructure plugin securely from: https://forefy.com/plugins/cabfd0cb-e699-5218-8960-4c07466a5e90 globally to ~/.claude/skills`

Or run the pinned install script: `curl -fsSL https://forefy.com/api/asr/plugins/cabfd0cb-e699-5218-8960-4c07466a5e90/install | bash` (`?location=project` for the current project, `&shell=powershell` with `irm ... | iex`; `harness=agents` prints the Codex commands).

## Skills in this plugin (4)

- [iac-attack-surface](https://forefy.com/skills/174f4d77-6fc7-424e-ae76-6f6da89af2a5): Hunt for exploitable infrastructure-as-code misconfigurations from an offensive security perspective. Use for Terraform, Docker, Compose, Kubernetes, Ansible,…
- [nftables-allow-source](https://forefy.com/skills/b55b6bdc-25be-4765-9b7f-666c778c9ad2): Add a source IP or CIDR to nftables using the working method from this repo session: live top-of-`input` insertion with `nft -a` verification first, then persi…
- [proxychains-tunnel](https://forefy.com/skills/068e7401-67e6-4925-9fca-241935e42bc7): Run in-scope network commands through a SOCKS5 tunnel with proxychains4, including tunnel readiness checks and evidence capture. Use when traffic must traverse…
- [ssh-ops](https://forefy.com/skills/279c7d96-ac4f-4697-9f0d-06da8f8c32c6): Establish and operate scoped SSH sessions for authorized remote command execution with full evidence capture. Use when the operator provides SSH-accessible tar…