Agent Claude Code
Deep-dive OAuth/OIDC, WebAuthn/FIDO2/passkeys, Apple/Google/Samsung Pay, IAP receipt validation, 3DS 2.x bypass, SCA exemption abuse, recovery downgrades. $5k-$50k bug class.
Agent Claude Code
Test authorization and access control across endpoints with ≥2 auth states. Returns IDOR / BFLA / auth-bypass findings.
Agent Claude Code
Browser-based crawling and JavaScript interaction for SPA/JS-heavy targets. Populates Burp Proxy history with dynamic routes and XHR/API calls.
Agent Claude Code
Worker agent for desktop application security testing — Electron / Tauri / WebView2 binary inspection + IPC fuzzing + auto-update MITM. 1-per-binary, no recursion.
Agent Claude Code
Re-verify suspected/confirmed findings and investigate anomalies. Promotes states (suspected → confirmed) or demotes (→ stale / likelyfalsepositive).
Agent Claude Code
Discover hidden directories and files using tech-aware SecLists slicing. Replaces spray fuzzing with surgical wordlists.
Agent Claude Code
Session orchestrator for one domain. Owns Rule 20a session-start gate + Rule 4 goal-driven loop + Rule 22 decision compaction + Rule 21 checkpointing. Promotes confirmed cross-target patterns into KB/skill proposals. On-demand only.
Agent Claude Code
Deep JavaScript analysis — secrets, DOM sinks, hidden API endpoints. Returns enriched JS intel for the orchestrator.
Agent Claude Code
Drive Frida (iOS+Android) and adb (Android) on operator's host. Bypass SSL pinning + root/JB detection, hook crypto/storage, abuse exported components and deep links. Dynamic-only; no static decompile.
Agent Claude Code
Craft bypass payloads when standard attacks are blocked by WAF/filters. Returns working bypass or "filter too strong" with evidence.
Agent Claude Code
Pentest engagement lead. Owns research, planning, multi-domain grow-agent dispatch, cross-target synthesis, and the findings report. Coverage-driven — success is full WSTG/OWASP coverage with every finding verified and reported. On-demand only; sits above grow-agent.
Agent Claude Code
Map a target's attack surface — endpoints, tech stack, sensitive files, hidden parameters. Returns enriched intel for the orchestrator.
Agent Claude Code
Red team engagement lead. Owns research, planning, multi-domain grow-agent dispatch, cross-target synthesis, and the attack-narrative report. Objective-driven — success is the stated objective reached via a documented kill chain, with a stealth/noise budget. On-demand only; sits above grow-agent.
Agent Claude Code
Test ONE vulnerability category on assigned non-overlapping endpoints. Returns findings + anomalies for orchestrator review.
Agent Claude Code
Test the LLM/AI layer of a captured endpoint (OWASP LLM Top 10) — prompt injection, jailbreak/encoding bypass, system-prompt leakage, improper output handling into a sink, sensitive-data disclosure, excessive agency / tool-SSRF. Returns confirmed LLM findings + anomalies for orchestrator review. Dispatch only when an…
Cursor rule Cursor
Praetor — authorized pentest/red-team MCP harness. Tool discovery, skill loading, and the HARD safety rules that always apply.
Agent Claude Code
Read ONE saved screenshot and return a compact list of leads (forms, endpoints, error strings, auth markers) — cheap OCR-first triage, keeps vision tokens out of the main agent's context.
Agent Claude Code
Own the cloud lane — AWS/Azure/GCP posture + active exploitation, IaC scanning, container/K8s escape, and SSRF→metadata credential pivots. Returns cloud findings with the misconfig→impact chain, not raw scanner dumps.
Agent Claude Code
Own the network / Active Directory lane — discovery, service enum, credential capture→crack→reuse, lateral movement leads. Returns network-lane findings (ATT&CK operator-log ids, not Burp indices) + a web-lane bridge for any HTTP service found.
Command Claude Code
Run a coverage-driven pentest and produce the full scoped checklist markdown (WSTG + Top 10 + API/Mobile/LLM + KB edge cases).
Command Claude Code
Run an objective-driven red-team — hunt quick wins / low-hanging high-impact, exploit to prove impact, produce the attack-path map markdown.
Agent Claude Code
Rewrite text into ASD-STE100 Simplified Technical English — short, unambiguous, controlled English for reports, tool descriptions, agent-to-agent messages, and error messages. Returns the rewritten text only.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: