Skill Claude CodeCodex
This skill should be used when the user asks about "API security", "OWASP API Top 10", "BOLA", "broken object level authorization", "API authentication", "mass assignment", "GraphQL security", "gRPC security", "rate limiting", "API abuse", "REST API vulnerabilities", or needs to identify API-specific security issues…
Skill Claude CodeCodex
Detect postMessage handlers that trust unvalidated origins or write attacker-controlled data to dangerous DOM sinks.
Skill Claude CodeCodex
This skill should be used when the user asks about "sandbox escape", "vm escape", "template injection to RCE", "SSTI exploitation", "vm2 bypass", "restricted execution bypass", "sandbox breakout", or needs to identify sandbox escape and template engine exploitation techniques during whitebox security review.
Skill Claude CodeCodex
This skill should be used when the user asks about "secret scanning", "find secrets", "hardcoded credentials", "leaked API keys", "git history secrets", "credential scanning", "detect passwords in code", or needs to identify secrets and credentials in source code or git history during whitebox security review.
Skill Claude CodeCodex
This skill should be used when the user asks about "security misconfiguration", "default credentials", "debug mode", "security headers", "exposed endpoints", "TLS configuration", or needs to find configuration-related vulnerabilities during whitebox security review.
Skill Claude CodeCodex
Detect ANY credential/secret flowing to ANY output sink. Use when asked about "credential leakage", "secret logging", "sensitive data exposure", "CWE-532", "password in logs", "token exposure", or security logging issues.
Skill Claude CodeCodex
Bundle findings, reports, audit plan, and ledger into one evidence zip.
Skill Claude CodeCodex
Diff-aware PR security review with verified findings and PR comment payload.
Skill Claude CodeCodex
Decide audit boundaries for large or monorepo targets and write audit-plan.md.
Skill Claude CodeCodex
Guided first-run security audit: doctor, scope, threats, scan, verify, report.
Skill Claude CodeCodex
Drive a single finding through CPG verification and false-positive triage.
Skill Claude CodeCodex
This skill should be used when the user asks about "threat model", "STRIDE", "data flow diagram", "attack surface", "threat analysis", "security architecture", "component threats", "trust boundaries", "technology decomposition", or needs systematic threat identification during whitebox security review.
allsmog/blackbox-claude-plugin
Plugin Claude Code
Black-box and grey-box penetration testing plugin for HackTheBox machine challenges. Provides automated reconnaissance, enumeration, exploitation guidance, and privilege escalation for Linux, Windows, and Active Directory environments.
allsmog/blackbox-claude-plugin
Agent
Use this agent when inside a container and needing to find escape vectors. Triggers on: "escape container", "docker escape", "container breakout", "am I in a container", "container privesc", "check for docker socket". Context: Got shell inside Docker container user: "How do I escape this container?" assistant: Runs…
allsmog/blackbox-claude-plugin
Agent
Use this agent when finding credentials, discovering .env files, or needing systematic credential extraction. Triggers on: "find credentials", "extract passwords", "check for passwords", ".env file", "database credentials", "credential hunting". Context: Found access to web application files user: "Look for…
allsmog/blackbox-claude-plugin
Agent
Use this agent when a specific CVE is identified and you need to find and run a working exploit. This agent will search GitHub for PoC exploits, clone them, and provide execution guidance. Examples: Context: CVE-2025-32433 identified on Erlang SSH user: "Exploit the Erlang SSH" assistant: Clones…
allsmog/blackbox-claude-plugin
Agent
Use this agent when the user asks "what exploits exist", "how do I exploit this", "suggest attack vectors", "find vulnerabilities", "searchsploit", "what's vulnerable", "how can I get a shell", or needs exploitation guidance. Examples: Context: After discovering Apache 2.4.49 user: "What exploits are there for this?"…
allsmog/blackbox-claude-plugin
Agent
Use this agent when the user asks to "scan a target", "run nmap", "find open ports", "discover services", "run reconnaissance", "scan the network", or needs automated network discovery. Examples: Context: User starting a new HTB machine user: "Scan 10.10.10.5" assistant: Runs comprehensive nmap scans and presents…
allsmog/blackbox-claude-plugin
Agent
Use this agent when the user asks to "escalate privileges", "get root", "become admin", "run linpeas", "run winpeas", "find privesc vectors", "sudo -l", "check SUID", or needs privilege escalation after getting initial shell. Examples: Context: User has shell as www-data user: "How can I get root?" assistant: Runs…
allsmog/blackbox-claude-plugin
Agent
Use this agent when the user asks to "enumerate services", "check SMB shares", "enumerate users", "find directories", "run gobuster", "enumerate LDAP", "check for anonymous access", or needs detailed service enumeration. Examples: Context: After nmap shows port 445 open user: "Enumerate the SMB shares" assistant: Runs…
allsmog/blackbox-claude-plugin
Agent
Use this agent when the user asks to "start a listener", "catch a shell", "manage shells", "send command to shell", "check shell output", "set up reverse shell", or needs to maintain persistent shell access during exploitation. Examples: Context: User has RCE and needs to catch reverse shell user: "Start a listener on…
allsmog/blackbox-claude-plugin
Agent
Use this agent when you discover source code, backup files, or need to analyze application code for vulnerabilities. Triggers on: "analyze source", "found code", "check for vulnerabilities", "review application", "found backup", "downloaded zip/tar", "requirements.txt", "package.json".
allsmog/blackbox-claude-plugin
Command
Active Directory enumeration and attack techniques. Includes LDAP enumeration, Kerberos attacks (Kerberoasting, AS-REP Roasting), SMB attacks, and domain privilege escalation. Use this when targeting Windows domain environments.
allsmog/blackbox-claude-plugin
Command
Container escape analysis and exploitation workflow.