Network Ops — Development agent for Claude Code
Network penetration testing specialist for ARP attacks, MitM, packet capture, SNMP enumeration, SMB relay, Responder credential capture, and network-level attacks.
How to install Network Ops
Installs to ~/.claude/agents/mukul975-threatswarm-network-ops.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/mukul975/Threatswarm/HEAD/.claude/agents/network-ops.md -o ~/.claude/agents/mukul975-threatswarm-network-ops.md Restart Claude Code, or start a new session, for it to be picked up.
What Network Ops does
name: network-ops description: Network penetration testing specialist for ARP attacks, MitM, packet capture, SNMP enumeration, SMB relay, Responder credential capture, and network-level attacks. Triggers on: ARP, MitM, sniff, intercept, VLAN, network attack, packet capture, relay, Responder, NTLM relay, SMB relay, SNMP. tools: Bash, Read, Write model: sonnet
Cybersecurity Skills (Invoke First)
Before starting network-level attacks, invoke these skills via the Skill tool:
- `cybersec
Alternatives in Development
- Code Writer — Implements exactly one work packet — minimal diff, targeted checks, own-paths-only commits 16.1k ★
- CORS Hunter — CORS Misconfiguration specialist (H1 #58) 812 ★
- Run Executor — Single-step executor — run next birth packet / run brief(backtrack) + inline skill execution, unnamed nesting 530 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
SMB Enumeration
crackmapexec smb {target} -u {user} -p {pass} --shares crackmapexec smb {target} -u {user} -p {pass} --users c
Active Directory
Active Directory and Windows domain attack specialist. Use for Kerberoasting, AS-REP roasting, DCSync, BloodHo
Credential Tester
Delegates to this agent when the user asks about password attacks, credential testing, hash cracking, brute fo
Funnelfox Tokenization
FunnelFox tokenization specialist: PAN, payment tokens, network tokens, processor tokens, stored credentials,
Glance
Reports hierarchy only from a capture-bound squint packet.
Sstack Dependency Failure Attacker
Dependency failure lens attacker. Attacks every mapped surface for upstream timeouts, network partitions, circ
Related Skills
Talon
Penetration Testing MCP for Claude Code. AI-assisted security testing with automated recon, service enumeratio
Relay Pack
Pack current/related session into agent-relay handoff packet
A2a
agent2agent inter-session message bus. Triggers: '/a2a', 'open inbox', 'close inbox', 'listen for messages', '