Skill Claude CodeCodex
Detect hardcoded passwords in HTML forms, JavaScript, and API responses.
1.2k 8d ago C 22 tokens
original MIT
Skill Claude CodeCodex
Spoof HTTP/2 SETTINGS frames and pseudo-header order per browser profile.
1.2k 8d ago A 23 tokens
original MIT
Skill Claude CodeCodex
Human-like mouse, keyboard and scroll behavior for behavioral bot bypass.
1.2k 8d ago A 18 tokens
original MIT
Skill Claude CodeCodex
Attack cameras via RTSP, ONVIF, Axis config when 554 open.
1.2k 8d ago A 22 tokens
original MIT
Skill Claude CodeCodex
Analyze JS bundles and source maps for hardcoded secrets, API keys, JWTs, and internal endpoints.
1.2k 8d ago A 26 tokens
original MIT
jwt-attack
30Skill Claude CodeCodex
Decode, forge, brute JWTs when Bearer auth header is seen.
1.2k 8d ago C 19 tokens
original MIT
Skill Claude CodeCodex
Discover origin IPs behind CDN/WAF via favicon hash, DNS history, and SSL certs.
1.2k 8d ago A 25 tokens
original MIT
Skill Claude CodeCodex
Chain phpinfo to RCE via exec check when info.php exposed.
1.2k 8d ago A 20 tokens
original MIT
Skill Claude CodeCodex
Port scan /8-/24 with Masscan+RustScan and nmap banners.
1.2k 8d ago B 23 tokens
original MIT
Skill Claude CodeCodex
Nmap scan for MySQL, Redis, FTP, SSH, internal API services.
1.2k 8d ago A 22 tokens
original MIT
Skill Claude CodeCodex
Exploit public bucket Content-Type override for stored XSS on target origin.
1.2k 8d ago A 24 tokens
original MIT
Skill Claude CodeCodex
Enumerate Hikvision ISAPI endpoints on SCADA and IoT web interfaces.
1.2k 8d ago C 24 tokens
original MIT
Skill Claude CodeCodex
Mass scan for exposed env files, backups, and git configs.
1.2k 8d ago C 19 tokens
original MIT
Skill Claude CodeCodex
Hunt staging via crt.sh when production is WAF-hardened.
1.2k 8d ago C 22 tokens
original MIT
Skill Claude CodeCodex
Launch stealth Chromium with C++ fingerprint patches for anti-bot bypass.
1.2k 8d ago A 19 tokens
original MIT
Skill Claude CodeCodex
Map subdomains via crt.sh and subfinder at recon kickoff.
1.2k 8d ago A 19 tokens
original MIT
Skill Claude CodeCodex
Detect and verify subdomain takeover via dangling CNAME to unclaimed services.
1.2k 8d ago A 23 tokens
original MIT
Skill Claude CodeCodex
Spoof TLS ClientHello and JA4 fingerprints for browser impersonation.
1.2k 8d ago A 22 tokens
original MIT
Skill Claude CodeCodex
Exploit unauthenticated multi-step API flows without credentials.
1.2k 8d ago A 20 tokens
original MIT
Skill Claude CodeCodex
Discover hidden virtual hosts via Host header fuzzing and SSL certificate parsing.
1.2k 8d ago B 20 tokens
original MIT
visual-recon
45Skill Claude CodeCodex
Screenshot all live hosts for rapid visual triage and technology fingerprinting.
1.2k 8d ago A 18 tokens
original MIT
Skill Claude CodeCodex
Sensitive file scanning, path traversal bypass, vHost enum, .env extract, log mining, Varnish detect.
1.2k 8d ago A 28 tokens
original MIT
Skill Claude CodeCodex
Hunt WP plugins via REST, exploit CVEs when version known.
1.2k 8d ago B 19 tokens
original MIT
Skill Claude CodeCodex
Batch WP recon: users, CORS, XMLRPC, leaks across domains.
1.2k 8d ago D 22 tokens
original MIT