Skill Claude CodeCodex
A tool for finding and using OS command-injection vulnerabilities in web parameters, cookies, or HTTP headers. Command injection lets an attacker make a server run operating-system commands through an input field.
Skill Claude CodeCodex
A Chinese-language security skill for checking CORS configuration. CORS is a browser rule that controls whether one website can request data from another website.
Skill Claude CodeCodex
A collaborative .NET command-and-control framework for authorized red-team exercises and post-compromise work. It includes a web interface, implants that communicate over HTTP/S or SMB, a task library, and support for multiple operators.
Skill Claude CodeCodex
A coding skill for creating C++ Beacon Object Files (BOFs), small modules used by Cobalt Strike and similar command-and-control frameworks.
Skill Claude CodeCodex
A coding skill for writing and reviewing modern C++20 or newer code. It covers ways to manage resources, ownership, errors, APIs, basic concurrency, builds, and toolchains.
Skill Claude CodeCodex
A C++ testing workflow covering unit tests, which check small pieces of code, and integration tests, which check components working together.
Skill Claude CodeCodex
A security-testing tool for mapping Windows Active Directory environments, a network system that manages users, computers, and permissions. It works through SMB, WinRM, and LDAP.
Skill Claude CodeCodex
A tool that creates a custom word list from publicly available information about a specific person. Such lists can be used to guess passwords, so this is security-sensitive work.
Skill Claude CodeCodex
A research skill for investigating a topic using information from multiple sources. It includes citations, comparison of conflicting findings, and a confidence assessment.
Skill Claude CodeCodex
A security-research workflow for studying CVEs, publicly documented software vulnerabilities, and their proof-of-concept exploits. It also covers red-team reconnaissance and threat-intelligence research.
Skill Claude CodeCodex
A web-path scanner that looks for directories, files, endpoints, and backup files on a web server, including paths with different file extensions.
Skill Claude CodeCodex
A tool that transfers files through DNS queries, using TXT or A records and a custom DNS server. DNS is normally used to find network addresses for domain names.
Skill Claude CodeCodex
A DNS tool for looking up many domain names or subdomains. DNS is the system that maps names such as example.com to network addresses and other records.
Skill Claude CodeCodex
A generator that converts .NET assemblies, Windows EXE or DLL files, and COM objects into position-independent shellcode, which is machine code designed to run from different memory locations.
Skill Claude CodeCodex
A skill for using DotDotPwn, a fuzzing tool that tests web, FTP, and TFTP services for path-traversal vulnerabilities. Path traversal is an attack that reaches files outside an intended directory.
Skill Claude CodeCodex
A tool for gathering information from Windows computers and Samba file servers over SMB. SMB is the network protocol commonly used for Windows file sharing.
Skill Claude CodeCodex
An interactive tool for opening a remote PowerShell shell on a Windows computer through WinRM, Microsoft's remote-management service. It also supports connecting with hashes or tickets instead of plain passwords.
Skill Claude CodeCodex
A skill for using Evilginx2, a reverse-proxy phishing framework that imitates real login pages to capture session cookies and bypass multi-factor authentication.
Skill Claude CodeCodex
A tool that takes screenshots of web services and creates an HTML report. Web service enumeration means making a list of reachable websites or interfaces.
Skill Claude CodeCodex
A Rust-based tool for finding hidden directories, files, and endpoints in web applications. It can scan recursively, meaning it continues into directories it discovers.
Skill Claude CodeCodex
A web fuzzing tool that sends dictionary-based variations to HTTP requests. Fuzzing means trying many possible paths, parameters, hostnames, or values to find how a web service responds.
Skill Claude CodeCodex
A skill for using Ghidra, an open-source program from the NSA for examining compiled software without its source code. It includes tools for disassembling, decompiling, and scripting analysis.
Skill Claude CodeCodex
A skill for using Gitleaks, a tool that searches files and Git history for exposed secrets such as API keys, tokens, and passwords.
Skill Claude CodeCodex
A Go-based command-line tool for finding website paths, DNS subdomains, and virtual hosts by trying many possible names.