uphiago

60 mods across 1 repository, 1.2k stars between them.

uphiago/recon-skills

Instructions file CodexOpenCode

Instructions for uphiago/recon-skills, covering skill library contributor guide, scope, repository layout, skill contract and portability.

1.2k 8d ago A 900 tokens original MIT

cross-attack-chains

03

uphiago/recon-skills

Skill Claude CodeCodex

Use when two or more verified findings may combine into a higher-impact authorized attack path.

1.2k 8d ago A 23 tokens original MIT

uphiago/recon-skills

Skill Claude CodeCodex

Use when verified WordPress findings may combine into an authorized path to administrative or server control.

1.2k 8d ago A 23 tokens original MIT

uphiago/recon-skills

Skill Claude CodeCodex

High-precision Google dorks for exposed configs, secrets, and credentials -- real-world validated.

1.2k 8d ago A 24 tokens original MIT

recon-playbook

10

uphiago/recon-skills

Skill Claude CodeCodex

Use when starting or restructuring an authorized external web and API assessment.

1.2k 8d ago A 18 tokens original MIT

api-noauth-hunt

12

uphiago/recon-skills

Skill Claude CodeCodex

Use when an API may expose data or privileged operations without authentication.

1.2k 8d ago A 19 tokens original MIT

cache-attack

14

uphiago/recon-skills

Skill Claude CodeCodex

Poison CDN cache or deceive when X-Cache header is detected.

1.2k 8d ago A 18 tokens original MIT

cms-detection

15

uphiago/recon-skills

Skill Claude CodeCodex

Identify CMS, frameworks, and server technology stacks on live hosts.

1.2k 8d ago A 17 tokens original MIT

deep-invade

17

uphiago/recon-skills

Skill Claude CodeCodex

Deep pentest WP: SSRF, plugin CVE, JS mine, port scan chain.

1.2k 8d ago C 24 tokens original MIT

email-security

18

uphiago/recon-skills

Skill Claude CodeCodex

DMARC/SPF/DKIM check, email spoofing, SMTP test, and security header analysis.

1.2k 8d ago A 23 tokens original MIT