Cyber Attack Simulation

SKILL.md

---
name: Cyber Attack Simulation Platform
description: Professional security testing and vulnerability assessment tool for simulating cyber attacks and generating comprehensive security reports.
---

# Overview

The Cyber Attack Simulation Platform is a professional-grade security testing solution designed to help organizations identify vulnerabilities and assess their defensive posture through controlled cyber attack simulations. Built for security teams, penetration testers, and risk management professionals, this platform enables realistic attack scenario modeling without exposing production systems to actual threats.

The platform supports multiple attack types with configurable intensity levels, allowing security professionals to simulate various threat vectors and measure organizational resilience. It integrates a comprehensive vulnerability database and provides detailed security reports that inform remediation strategies and security improvements.

Ideal users include enterprise security teams, managed security service providers (MSSPs), penetration testing firms, and compliance-focused organizations that need evidence-based security assessments to validate defensive controls and meet regulatory requirements.

## Usage

### Example Request

Run a simulated phishing and SQL injection attack against a test environment with medium intensity:

```json
{
  "simulationData": {
    "target": {
      "hostname": "test-app.internal.company.com",
      "port": 443,
      "protocol": "https",
      "environment": "staging"
    },
    "attackTypes": [
      "phishing",
      "sql_injection"
    ],
    "intensity": 5,
    "sessionId": "sess-a1b2c3d4e5f6g7h8",
    "timestamp": "2025-01-15T14:30:00Z"
  },
  "sessionId": "sess-a1b2c3d4e5f6g7h8",
  "userId": 12847,
  "timestamp": "2025-01-15T14:30:00Z"
}
```

### Example Response

```json
{
  "success": true,
  "simulationId": "sim-9x8y7z6w5v4u3t2s",
  "status": "completed",
  "duration_seconds": 287,
  "timestamp": "2025-01-15T14:35:27Z",
  "findings": {
    "critical": 2,
    "high": 5,
    "medium": 12,
    "low": 18
  },
  "vulnerabilities_discovered": [
    {
      "id": "CVE-2024-1234",
      "type": "sql_injection",
      "severity": "critical",
      "endpoint": "/api/users/search",
      "parameter": "q",
      "remediation": "Use parameterized queries and input validation"
    },
    {
      "id": "vuln-auth-001",
      "type": "weak_authentication",
      "severity": "high",
      "description": "Password policy does not enforce complexity requirements",
      "remediation": "Implement NIST SP 800-63B compliant password policies"
    }
  ],
  "attack_summary": {
    "phishing": {
      "attempts": 50,
      "successful": 8,
      "success_rate": 0.16
    },
    "sql_injection": {
      "attempts": 120,
      "successful": 2,
      "success_rate": 0.017
    }
  },
  "security_score": 62,
  "recommendation": "Address critical vulnerabilities immediately. Implement security awareness training for phishing resistance."
}
```

## Endpoints

### GET /
**Health Check**

Verifies that the Cyber Attack Simulation Platform API is operational.

**Parameters:** None

**Response:** 
- Status 200: Service health confirmation with operational status

---

### POST /api/cyber/simulation
**Run Cyber Simulation**

Initiates and executes a cyber attack simulation against a specified target with configured attack types and intensity level. Generates a comprehensive security report with vulnerability findings and remediation guidance.

**Parameters:**

| Name | Type | Required | Description |
|------|------|----------|-------------|
| simulationData | object | Yes | Container for simulation configuration including target details, attack types, and intensity |
| simulationData.target | object | No | Target system details (hostname, port, protocol, environment) |
| simulationData.attackTypes | array[string] | No | List of attack types to simulate (e.g., phishing, sql_injection, ddos, brute_force) |
| simulationData.intensity | integer | No | Intensity level of simulation from 1-10 (default: 3). Higher values increase attack aggressiveness |
| simulationData.sessionId | string | Yes | Unique identifier for this simulation session |
| simulationData.timestamp | string | Yes | ISO 8601 timestamp when simulation was initiated |
| sessionId | string | Yes | Top-level session identifier for request tracking |
| userId | integer or null | No | ID of the user initiating the simulation (optional) |
| timestamp | string | Yes | ISO 8601 timestamp of request submission |

**Response:**
- Status 200: Simulation execution results including vulnerabilities discovered, attack summary, security score, and remediation recommendations
- Status 422: Validation error if required parameters are missing or malformed

---

### GET /api/cyber/vulnerabilities
**Get Vulnerability Database**

Retrieves comprehensive vulnerability database information including known CVEs, vulnerability classifications, and threat intelligence data used for simulation and assessment.

**Parameters:** None

**Response:**
- Status 200: Vulnerability database metadata, counts by severity, CVE listings, and last update timestamp

---

### GET /api/cyber/attack-types
**Get Attack Types**

Retrieves the complete list of available attack types supported by the simulation platform, including descriptions and recommended intensity ranges for each attack vector.

**Parameters:** None

**Response:**
- Status 200: Array of available attack types with descriptions, difficulty levels, and use cases (e.g., phishing, sql_injection, ddos, brute_force, cross_site_scripting, privilege_escalation)

## Pricing

| Plan | Calls/Day | Calls/Month | Price |
|------|-----------|-------------|-------|
| Free | 5 | 50 | Free |
| Developer | 20 | 500 | $39/mo |
| Professional | 200 | 5,000 | $99/mo |
| Enterprise | 100,000 | 1,000,000 | $299/mo |

## About

ToolWeb.in - 200+ security APIs, CISSP & CISM, platforms: Pay-per-run, API Gateway, MCP Server, OpenClaw, RapidAPI, YouTube.

- [toolweb.in](https://toolweb.in)
- [portal.toolweb.in](https://portal.toolweb.in)
- [hub.toolweb.in](https://hub.toolweb.in)
- [toolweb.in/openclaw/](https://toolweb.in/openclaw/)
- [rapidapi.com/user/mkrishna477](https://rapidapi.com/user/mkrishna477)
- [youtube.com/@toolweb-009](https://youtube.com/@toolweb-009)

## References

- **Kong Route:** https://api.mkkpro.com/security/cyber-attack-simulation
- **API Documentation:** https://api.mkkpro.com:8120/docs