allsmog

allsmog/blackbox-claude-plugin

Command

Crack password hashes with automatic type detection and wordlist discovery. Supports MD5, SHA, NTLM, bcrypt, and more.

allsmog/blackbox-claude-plugin

Command

Service-specific enumeration based on discovered ports. Automatically selects appropriate enumeration techniques for each service. Use after /bb-recon to deeply enumerate discovered services.

allsmog/blackbox-claude-plugin

Command

Privilege escalation enumeration and exploitation for Linux and Windows systems. Automatically detects OS and runs appropriate enumeration tools (linpeas/winpeas). Use this after obtaining initial shell access.

allsmog/blackbox-claude-plugin

Command

Automated network reconnaissance against a target. Runs comprehensive port scanning with nmap, identifies services, and discovers attack surface. Use this as the first step when attacking an HTB machine.

allsmog/blackbox-claude-plugin

Command

Verify penetration testing environment and tool installation. Use this before starting an HTB machine to ensure all required tools are available.

allsmog/blackbox-claude-plugin

Command

Manage reverse shell listeners using tmux sessions. Start listeners, receive shells, send commands, and persist across sessions. Essential for maintaining access during exploitation.

allsmog/blackbox-claude-plugin

Command

Credential spraying across discovered services.

allsmog/blackbox-claude-plugin

Command

Comprehensive web application testing for HTTP/HTTPS services. Includes directory fuzzing, vulnerability scanning, technology fingerprinting, and common exploit checks. Use this when a web service is discovered.

allsmog/blackbox-claude-plugin

Command

Full automated black-box penetration testing methodology for HTB machines. Runs all phases: setup verification, reconnaissance, enumeration, vulnerability identification, and exploitation guidance. Use this command when starting a new HTB machine challenge.

allsmog/blackbox-claude-plugin

Skill Claude CodeCodex

This skill should be used when the user asks about "Active Directory", "Kerberoasting", "AS-REP roasting", "LDAP enumeration", "BloodHound", "DCSync", "Pass-the-Hash", "Golden Ticket", or needs guidance on attacking Windows domain environments.

allsmog/blackbox-claude-plugin

Skill Claude CodeCodex

This skill covers Cacti network monitoring tool exploitation including authenticated RCE via graph templates (CVE-2025-24367), unauthenticated command injection (CVE-2022-46169), and authentication bypass techniques.

allsmog/blackbox-claude-plugin

Skill Claude CodeCodex

This skill should be used when the user asks about "searchsploit", "CVE exploits", "exploit database", "common vulnerabilities", "reverse shells", "webshells", or needs guidance on exploiting common vulnerabilities and services.

allsmog/blackbox-claude-plugin

Skill Claude CodeCodex

This skill covers container escape techniques for Docker, LXC/LXD, and Kubernetes environments. Includes Docker socket escape, Docker Desktop API escape (192.168.65.7:2375), privileged container breakout, and capability-based escapes.

allsmog/blackbox-claude-plugin

Skill Claude CodeCodex

This skill should be used when the user asks about "password cracking", "brute force", "hydra", "hashcat", "john", "credential stuffing", "password spraying", or needs guidance on credential-based attacks.

allsmog/blackbox-claude-plugin

Skill Claude CodeCodex

This skill should be used when stuck on a CTF challenge or when the user asks to look up a writeup. Use EARLY when brute forcing or guessing seems like the only option - writeups often reveal the intended path. Trigger on: "look up writeup", "how do others solve", "stuck", "what's the intended path", machine names…

allsmog/blackbox-claude-plugin

Skill Claude CodeCodex

This skill should be used when the user asks about "dump database", "extract credentials", "sqlite", "mysql credentials", "database passwords", or needs to extract user data from common database systems.

allsmog/blackbox-claude-plugin

Skill Claude CodeCodex

This skill should be used when Erlang/OTP services are detected: Port 4369 (EPMD - Erlang Port Mapper Daemon) Erlang SSH (usually port 2222) RabbitMQ, CouchDB, or other Erlang-based services Covers CVE-2025-32433 pre-auth RCE and other Erlang attack vectors.

allsmog/blackbox-claude-plugin

Skill Claude CodeCodex

This skill should be used when FTP services are detected including: CrushFTP (CVE-2025-31161 auth bypass) vsftpd (backdoor) ProFTPD (modcopy) Pure-FTPd, FileZilla Server Covers authentication bypass, file access, and privilege escalation.

allsmog/blackbox-claude-plugin

Skill Claude CodeCodex

This skill should be used when the user asks about "crack hash", "identify hash", "hashcat", "john", "found hash", or needs to crack password hashes. Provides complete workflow from hash identification to cracking.

allsmog/blackbox-claude-plugin

Skill Claude CodeCodex

This skill should be used when the user asks about "Linux privilege escalation", "linpeas", "SUID", "sudo abuse", "GTFOBins", "kernel exploits", "cron jobs", "capabilities", or needs guidance on escalating privileges on Linux systems.

allsmog/blackbox-claude-plugin

Skill Claude CodeCodex

This skill should be used when you have shell access and need to find credentials for lateral movement or privilege escalation. Covers: Grepping for passwords in config files Common credential locations Database extraction History files and environment variables.

allsmog/blackbox-claude-plugin

Skill Claude CodeCodex

This skill covers PHP type juggling vulnerabilities including magic hashes, loose comparison bypass, and authentication circumvention. Use when encountering PHP applications with password reset, token validation, or strcmp-based auth.

allsmog/blackbox-claude-plugin

Skill Claude CodeCodex

This skill should be used when the user asks about "nmap", "port scanning", "network reconnaissance", "service discovery", "masscan", "host discovery", "banner grabbing", or needs guidance on network enumeration techniques.

allsmog/blackbox-claude-plugin

Skill Claude CodeCodex

This skill should be used when analyzing discovered source code for security issues. Helps identify dangerous functions, hardcoded secrets, and vulnerable packages.