scm-exposure
49mohdhaji87/payloadsallthethings-skills
Skill Claude CodeCodex
Source code management exposure - .git, .svn, .hg directory exploitation. Use for repository discovery.
mohdhaji87/payloadsallthethings-skills
Skill Claude CodeCodex
Source code management exposure - .git, .svn, .hg directory exploitation. Use for repository discovery.
mohdhaji87/payloadsallthethings-skills
Skill Claude CodeCodex
SQL injection - Union, Error, Blind, Time-based for all major databases. Use for database security testing.
mohdhaji87/payloadsallthethings-skills
Skill Claude CodeCodex
Server-Side Include injection and Edge Side Include attacks. Use when testing SSI-enabled servers.
mohdhaji87/payloadsallthethings-skills
Skill Claude CodeCodex
Server-Side Request Forgery with cloud metadata, protocol smuggling, bypass techniques. Use for SSRF testing.
mohdhaji87/payloadsallthethings-skills
Skill Claude CodeCodex
Server-Side Template Injection for Jinja2, Twig, Freemarker, Velocity RCE. Use for template engine testing.
mohdhaji87/payloadsallthethings-skills
Skill Claude CodeCodex
Reverse tabnabbing exploitation via target=blank links. Use when testing external link handling.
mohdhaji87/payloadsallthethings-skills
Skill Claude CodeCodex
PHP type juggling and loose comparison bypass with magic hashes. Use for PHP security testing.
mohdhaji87/payloadsallthethings-skills
Skill Claude CodeCodex
Virtual host enumeration and Host header attacks. Use when testing virtual host configurations.
mohdhaji87/payloadsallthethings-skills
Skill Claude CodeCodex
Web cache deception and poisoning attacks. Use when testing CDN/cache behavior.
mohdhaji87/payloadsallthethings-skills
Skill Claude CodeCodex
WebSocket security testing and cross-site WebSocket hijacking. Use for WebSocket testing.
mohdhaji87/payloadsallthethings-skills
Skill Claude CodeCodex
XPath injection for authentication bypass and data extraction. Use when testing XML/XPath queries.
mohdhaji87/payloadsallthethings-skills
Skill Claude CodeCodex
XSLT injection for file read, SSRF, and RCE. Use when testing XSLT transformations.
MCP server Claude CodeCodexCursor
MCP server "jwtauditor-mcp" as configured in mohdhaji87/JWTAuditorMCP. Runs locally from the jwtauditor-mcp Python package.