Skill Claude CodeCodex
A PHP source-code review tool for unsafe archive extraction. It focuses on Zip Slip, where file names inside an archive can escape the intended destination directory.
400 5mo ago A 72 tokens
Skill Claude CodeCodex
A multi-file workflow for auditing PHP web applications for security issues. The description does not specify enough detail about its exact checks beyond coordinating other PHP audit tools.
400 5mo ago A 71 tokens
Skill Claude CodeCodex
A PHP source-code security review tool for authentication and authorization. Authentication checks who a user is; authorization checks what that user is allowed to access.
400 5mo ago A 51 tokens
Skill Claude CodeCodex
A PHP source-code review tool for command injection. It follows user-controlled data into functions that execute operating-system commands, such as exec or system.
400 5mo ago A 61 tokens
Skill Claude CodeCodex
A source-code security review tool for CodeIgniter, a PHP web framework. It checks how the application handles request forgery, browser-injected content, database queries, routes, validation, sessions, and cookies.
400 5mo ago A 84 tokens
Skill Claude CodeCodex
A PHP web-application security review tool focused on configuration. It checks items such as cross-origin access rules, exposed errors, debug settings, security headers, and risky runtime options.
400 5mo ago A 58 tokens
Skill Claude CodeCodex
A PHP code-review tool for finding CRLF injection and HTTP response splitting. These attacks insert carriage-return and line-feed characters into response headers to alter the response.
400 5mo ago A 57 tokens
Skill Claude CodeCodex
A PHP code-review tool for auditing cryptography and key handling. It checks weak hashes or encryption, hard-coded keys, and defects in signature verification.
400 5mo ago A 58 tokens
Skill Claude CodeCodex
A PHP code-review tool for checking cross-site request forgery, or CSRF. CSRF tricks a logged-in user's browser into sending an unwanted state-changing request.
400 5mo ago A 63 tokens
Skill Claude CodeCodex
A PHP code-review tool for finding unsafe deserialization and object injection. Deserialization turns stored or received data back into PHP objects, which can trigger magic methods during processing.
400 5mo ago A 61 tokens
Skill Claude CodeCodex
A PHP security-analysis tool that connects confirmed or suspected vulnerabilities into multi-step attack chains. It uses required conditions for each step and describes how the chain could be observed.
400 5mo ago A 55 tokens
Skill Claude CodeCodex
A PHP code-review tool for finding user-controlled text that gets evaluated as an expression, rather than used only as a template. It reports exploitability, proof-of-concept examples, and fixes.
400 5mo ago A 69 tokens
Skill Claude CodeCodex
A PHP code-review tool for finding arbitrary file reads and path traversal. Path traversal uses crafted path values to access files outside the intended directory.
400 5mo ago A 57 tokens
Skill Claude CodeCodex
A PHP code-review tool for auditing file-upload features. It checks upload entry points, storage paths, filename handling, validation, path traversal, and the risk of uploaded files being executed.
400 5mo ago A 67 tokens
Skill Claude CodeCodex
A PHP source-code auditing tool for finding arbitrary file-write vulnerabilities. It traces user-controlled data into file-writing operations and checks path traversal and whether the written result could be executed.
400 5mo ago A 62 tokens
Skill Claude CodeCodex
A PHP source-code auditing tool for finding security risks in file-system operations such as creating, changing, deleting, linking, or reading files. TOCTOU means a file can change between checking it and using it.
400 5mo ago A 78 tokens
Skill Claude CodeCodex
A white-box PHP security-auditing tool for Laravel applications. White-box auditing examines the source code, including Laravel features for access control, CSRF protection, sessions, model filling, and Blade templates.
400 5mo ago A 78 tokens
Skill Claude CodeCodex
A PHP code-auditing tool for finding LDAP injection, where user-controlled input changes directory-service searches or names. It checks data reaching LDAP operations such as ldapsearch and ldapread.
400 5mo ago A 61 tokens
Skill Claude CodeCodex
A PHP security-auditing tool for reviewing logs, monitoring, and alerts. It checks for missing security events, sensitive data in logs, forged or injected log entries, and broken alerting paths.
400 5mo ago A 71 tokens
Skill Claude CodeCodex
A PHP code-auditing tool for finding business-logic flaws outside basic login and permission checks. These include mass assignment, skipped workflow steps, race conditions, broken state transitions, and payment or permission timing errors.
400 5mo ago A 73 tokens
Skill Claude CodeCodex
A PHP source-code audit for NoSQL injection, where attacker-controlled input changes a document-database query. It checks input passed into MongoDB or DocumentDB queries, including operators such as $gt, $ne, and $where.
400 5mo ago A 63 tokens
Skill Claude CodeCodex
A PHP source-code audit for open redirects, where a user can influence the destination of a redirect. It checks values passed to the Location response header or redirect functions and reviews validation and allowlists.
400 5mo ago A 60 tokens
Skill Claude CodeCodex
A PHP source-code analyzer that extracts application routes, the request entry points, and their parameters. It outputs request templates and a complete parameter list.
400 5mo ago A 44 tokens
Skill Claude CodeCodex
A PHP source-code data-flow tracer that follows a selected web route from its handler to a final sensitive operation, called a sink. It tracks parameters and variables through multiple code layers without deciding whether a vulnerability exists.
400 5mo ago A 60 tokens