Skill Claude CodeCodex
Skill "ios-pentesting-tricks" from miru-zero/zero-brain, covering skill: ios pentesting tricks — expert attack playbook, 0. related routing, advanced reference, 1. jailbreak vs non-jailbreak testing and non-jailbreak testing setup.
Skill Claude CodeCodex
JNDI injection playbook. Use when Java applications perform JNDI lookups with attacker-controlled names, especially via Log4j2, Spring, or any code path reaching InitialContext.lookup().
Skill Claude CodeCodex
JWT and OAuth token attack playbook. Use when validating token trust, signing algorithms, key handling, claim abuse, bearer flows, and OAuth account-binding weaknesses.
Skill Claude CodeCodex
Linux kernel exploitation playbook. Use when exploiting kernel vulnerabilities (UAF, OOB, race condition, type confusion) for privilege escalation via commitcreds, modprobepath overwrite, or kernel ROP chains in CTF and real-world scenarios.
Skill Claude CodeCodex
Kubernetes penetration testing playbook. Use when targeting Kubernetes clusters via API server, RBAC enumeration, service account abuse, etcd access, Kubelet API, pod escape, cloud-specific metadata, admission webhook bypass, and registry secrets.
Skill Claude CodeCodex
Lattice-based cryptanalysis playbook. Use when attacking RSA via Coppersmith small roots, recovering DSA/ECDSA nonces from bias, solving knapsack problems, or applying LLL/BKZ reduction to cryptographic constructions.
Skill Claude CodeCodex
Linux lateral movement playbook. Use after gaining initial access to pivot across Linux hosts via SSH hijacking, credential harvesting, internal pivoting, D-Bus exploitation, sudo token reuse, and shared filesystem abuse.
Skill Claude CodeCodex
Linux privilege escalation playbook. Use when you have low-privilege shell access and need to escalate to root via SUID/SGID binaries, capabilities, cron abuse, kernel exploits, misconfigurations, or credential harvesting on Linux systems.
Skill Claude CodeCodex
Linux security mechanism bypass playbook. Use when facing restricted bash/rbash, read-only or noexec filesystems, AppArmor, SELinux, seccomp filters, or audit logging that must be evaded during post-exploitation.
Skill Claude CodeCodex
LLM prompt injection playbook. Use when testing AI/LLM applications for direct injection, indirect injection via RAG/browsing, tool abuse, data exfiltration, MCP security risks, and defense bypass techniques.
Skill Claude CodeCodex
Skill "macos-process-injection" from miru-zero/zero-brain, covering skill: macos process injection — expert attack playbook, 0. related routing, advanced reference, 1. dyldinsertlibraries injection and 1.1 requirements and restrictions.
Skill Claude CodeCodex
Skill "macos-security-bypass" from miru-zero/zero-brain, covering skill: macos security bypass — expert attack playbook, 0. related routing, advanced reference, 1. tcc (transparency, consent, control) overview and 1.1 tcc database locations.
MCP server Claude CodeCodexCursor
MCP server "zero-brain-mcp-server" as configured in miru-zero/zero-brain. Runs locally from the zero-brain-mcp-server npm package.