Skill Claude CodeCodex
OS command injection detection, exploitation, and filter bypass.
not rated 146
+3 2mo ago B 14 tokens
cors-testing
26Skill Claude CodeCodex
CORS misconfiguration testing for data theft and access control bypass.
not rated 146
+3 2mo ago A 15 tokens
csrf-testing
27Skill Claude CodeCodex
Cross-site request forgery testing for state-changing operations.
not rated 146
+3 2mo ago A 13 tokens
Skill Claude CodeCodex
Insecure deserialization detection and gadget chain exploitation.
not rated 146
+3 2mo ago A 13 tokens
Skill Claude CodeCodex
Discover hidden directories, files, and endpoints on a web server.
not rated 146
+3 2mo ago A 17 tokens
Skill Claude CodeCodex
Detect and exploit local and remote file inclusion vulnerabilities for sensitive data access and code execution.
not rated 146
+3 2mo ago B 20 tokens
Skill Claude CodeCodex
File upload vulnerability testing — webshells, bypass, path traversal.
not rated 146
+3 2mo ago A 17 tokens
Skill Claude CodeCodex
GraphQL security testing — introspection, injection, auth bypass, DoS.
not rated 146
+3 2mo ago A 18 tokens
idor-testing
33Skill Claude CodeCodex
Insecure direct object reference testing for broken access control.
not rated 146
+3 2mo ago A 13 tokens
Skill Claude CodeCodex
Information disclosure detection — error messages, files, headers, debug endpoints.
not rated 146
+3 2mo ago A 18 tokens
jwt-testing
35Skill Claude CodeCodex
JWT token attack techniques — alg bypass, key confusion, claim tampering.
not rated 146
+3 2mo ago A 17 tokens
Skill Claude CodeCodex
Test for unvalidated redirects — URL parameters, login flows, OAuth callbacks that redirect to attacker-controlled domains.
not rated 146
+3 2mo ago A 25 tokens
osint-recon
37Skill Claude CodeCodex
Open-source intelligence gathering — CVE lookup, breach search, DNS history, social profiling.
not rated 146
+3 2mo ago A 22 tokens
Skill Claude CodeCodex
Discover hidden parameters, test values, and identify input handling anomalies.
not rated 146
+3 2mo ago A 17 tokens
Skill Claude CodeCodex
Discover open ports, running services, and their versions on a target.
not rated 146
+3 2mo ago A 17 tokens
Skill Claude CodeCodex
Race condition and TOCTOU exploitation — parallel request attacks.
not rated 146
+3 2mo ago A 15 tokens
Skill Claude CodeCodex
Engagement report structure and formatting guidelines.
not rated 146
+3 2mo ago A 10 tokens
Skill Claude CodeCodex
HTTP request smuggling via CL.TE/TE.CL desync and cache poisoning.
not rated 146
+3 2mo ago A 20 tokens
Skill Claude CodeCodex
Detect PII, credentials, and corporate sensitive data in API responses, source code, files, headers, and database extracts.
not rated 146
+3 2mo ago A 30 tokens
Skill Claude CodeCodex
Frontend source code analysis for hidden routes, API endpoints, and secrets.
not rated 146
+3 2mo ago A 16 tokens
sqli-testing
45Skill Claude CodeCodex
Detect and exploit SQL injection vulnerabilities in web application parameters.
not rated 146
+3 2mo ago A 14 tokens
ssrf-testing
46Skill Claude CodeCodex
Detect and exploit server-side request forgery to access internal resources and cloud metadata.
not rated 146
+3 2mo ago B 19 tokens
ssti-testing
47Skill Claude CodeCodex
Server-side template injection detection, engine identification, and RCE.
not rated 146
+3 2mo ago A 16 tokens
Skill Claude CodeCodex
Subdomain discovery via subfinder, DNS brute-force, and passive sources.
not rated 146
+3 2mo ago C 20 tokens
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: