CuriousLearnerDev/Online_Tools-AI
Skill Claude CodeCodex
A PHP source-code data-flow tracer that follows a chosen web route from its handler to a final sensitive operation, called a sink. It tracks parameters and variables and reports whether user input can control them, without declaring a vulnerability.
CuriousLearnerDev/Online_Tools-AI
Skill Claude CodeCodex
A PHP source-code checker for session and cookie security. It reviews session fixation, unsafe cookie settings, JWT validation flaws, and risks in “remember me” login features.
CuriousLearnerDev/Online_Tools-AI
Skill Claude CodeCodex
A PHP source-code checker for SQL injection, a flaw that can let untrusted input alter database queries. It finds SQL execution points and assesses whether they can be exploited.
CuriousLearnerDev/Online_Tools-AI
Skill Claude CodeCodex
A PHP source-code checker for SSRF, a flaw where user-controlled addresses make the server send unwanted network requests. It follows URLs or addresses into network-request code and checks internal-network, protocol, port, and response restrictions.
CuriousLearnerDev/Online_Tools-AI
Skill Claude CodeCodex
A security review tool for Symfony applications, a PHP web framework. It checks security.yaml settings, CSRF protection, Twig template output, expressions, and access-control rules.
CuriousLearnerDev/Online_Tools-AI
Skill Claude CodeCodex
A security review tool for ThinkPHP applications, a PHP web framework. It checks framework-specific access control, request protection, template escaping, database writes, debugging, and configuration exposure.
CuriousLearnerDev/Online_Tools-AI
Skill Claude CodeCodex
A PHP source-code review tool for template injection, where attacker-controlled template text or expressions may be executed by the server.
CuriousLearnerDev/Online_Tools-AI
Skill Claude CodeCodex
A PHP dependency checker that examines Composer dependency files and package metadata for known vulnerabilities.
CuriousLearnerDev/Online_Tools-AI
Skill Claude CodeCodex
A security review tool for WordPress applications, a widely used PHP website platform. It checks nonces, permission checks, AJAX handlers, escaping, sanitising, redirects, uploads, and remote requests.
CuriousLearnerDev/Online_Tools-AI
Skill Claude CodeCodex
A PHP source-code review tool for XSS, a vulnerability where untrusted input is returned to a browser as active content.
CuriousLearnerDev/Online_Tools-AI
Skill Claude CodeCodex
A PHP source-code review tool for XXE, a vulnerability where unsafe XML processing can expose files or trigger unwanted requests.
CuriousLearnerDev/Online_Tools-AI
Skill Claude CodeCodex
A security review tool for Yii applications, usually Yii2, a PHP web framework. It checks access-control rules, CSRF protection, input filters, output encoding, URLs, and redirects.
CuriousLearnerDev/Online_Tools-AI
Skill Claude CodeCodex
Professional code security audit skill covering 55+ vulnerability types. Enhanced with WooYun 88,636 real-world vulnerability cases (2010-2016). This skill should be used when performing security audits, vulnerability scanning, penetration testing preparation, or code review for security issues. Supports 9 languages…
CuriousLearnerDev/Online_Tools-AI
Skill Claude CodeCodex
Provides AI and machine learning techniques for CTF challenges. Use when attacking ML models, crafting adversarial examples, performing model extraction, prompt injection, membership inference, training data poisoning, fine-tuning manipulation, neural network analysis, LoRA adapter exploitation, LLM jailbreaking, or…
CuriousLearnerDev/Online_Tools-AI
Skill Claude CodeCodex
Provides cryptography attack techniques for CTF challenges. Use when attacking encryption, hashing, signatures, ZKP, PRNG, or mathematical crypto problems involving RSA, AES, ECC, lattices, LWE, CVP, number theory, Coppersmith, Pollard, Wiener, padding oracle, GCM, key derivation, or stream/block cipher weaknesses.
CuriousLearnerDev/Online_Tools-AI
Skill Claude CodeCodex
Provides digital forensics and signal analysis techniques for CTF challenges. Use when analyzing disk images, memory dumps, event logs, network captures, cryptocurrency transactions, steganography, PDF analysis, Windows registry, Volatility, PCAP, Docker images, coredumps, side-channel power traces, DTMF audio…
CuriousLearnerDev/Online_Tools-AI
Skill Claude CodeCodex
Provides malware analysis and network traffic techniques for CTF challenges. Use when analyzing obfuscated scripts, malicious packages, custom crypto protocols, C2 traffic, PE/.NET binaries, RC4/AES encrypted communications, YARA rules, shellcode analysis, memory forensics for malware (Volatility malfind, process…
CuriousLearnerDev/Online_Tools-AI
Skill Claude CodeCodex
Provides miscellaneous CTF challenge techniques for problems that do not cleanly fit the main categories. Use for encoding puzzles, pyjails, bash jails, RF/SDR, DNS oddities, unicode tricks, esoteric languages, QR or audio puzzles, constraint solving, game theory, unusual sandbox escapes, and hybrid logic puzzles.…
CuriousLearnerDev/Online_Tools-AI
Skill Claude CodeCodex
Provides open source intelligence techniques for CTF challenges. Use when gathering information from public sources, social media, geolocation, DNS records, username enumeration, reverse image search, Google dorking, Wayback Machine, Tor relays, FEC filings, or identifying unknown data like hashes and coordinates.
CuriousLearnerDev/Online_Tools-AI
Skill Claude CodeCodex
Provides binary exploitation techniques for CTF challenges. Use when you already have a vulnerable native target or service and need to turn memory corruption or low-level primitives into code execution or privilege escalation, such as buffer overflows, format strings, heap bugs, ROP, ret2libc, shellcode, kernel…
CuriousLearnerDev/Online_Tools-AI
Skill Claude CodeCodex
Provides reverse engineering techniques for CTF challenges. Use when the main job is to understand how a compiled, obfuscated, packed, or virtualized target works before exploiting or solving it, including binaries, APKs, WASM, firmware, custom VMs, bytecode, game clients, malware-like loaders, and anti-debug or…
CuriousLearnerDev/Online_Tools-AI
Skill Claude CodeCodex
Provides web exploitation techniques for CTF challenges. Use when the target is primarily an HTTP application, API, browser client, template engine, identity flow, or smart-contract frontend/backend surface, including XSS, SQLi, SSTI, SSRF, XXE, JWT, auth bypass, file upload, request smuggling, OAuth/OIDC, SAML…
CuriousLearnerDev/Online_Tools-AI
Skill Claude CodeCodex
Generates a single standardized submission-style CTF writeup for competition handoff and organizer review. Use after solving a CTF challenge to document the solution steps, tools used, and lessons learned in a structured format.
CuriousLearnerDev/Online_Tools-AI
Skill Claude CodeCodex
Solves CTF challenges by performing first-pass triage, identifying the dominant category, and routing execution to the right specialized ctf- skill. Use when the user gives you a challenge bundle, a remote service, a suspicious file, or only a vague challenge description and you must determine where to start. Do not…