Skill Claude CodeCodex
Human-like mouse, keyboard and scroll behavior for behavioral bot bypass.
not rated 1.3k
+15 1mo ago A SkillSpector: pass 18 tokens
original MIT
Skill Claude CodeCodex
Attack cameras via RTSP, ONVIF, Axis config when 554 open.
not rated 1.3k
+15 1mo ago A SkillSpector: warn 22 tokens
original MIT
Skill Claude CodeCodex
Analyze JS bundles and source maps for hardcoded secrets, API keys, JWTs, and internal endpoints.
not rated 1.3k
+15 1mo ago A SkillSpector: pass 26 tokens
original MIT
jwt-attack
28Skill Claude CodeCodex needs its repo
Decode, forge, brute JWTs when Bearer auth header is seen.
not rated 1.3k
+15 1mo ago C SkillSpector: warn 19 tokens
original MIT
Skill Claude CodeCodex
Discover origin IPs behind CDN/WAF via favicon hash, DNS history, and SSL certs.
not rated 1.3k
+15 1mo ago A SkillSpector: warn 25 tokens
original MIT
Skill Claude CodeCodex
Chain phpinfo to RCE via exec check when info.php exposed.
not rated 1.3k
+15 1mo ago A SkillSpector: warn 20 tokens
original MIT
Skill Claude CodeCodex
Port scan /8-/24 with Masscan+RustScan and nmap banners.
not rated 1.3k
+15 1mo ago B SkillSpector: warn 23 tokens
original MIT
Skill Claude CodeCodex
Nmap scan for MySQL, Redis, FTP, SSH, internal API services.
not rated 1.3k
+15 1mo ago A SkillSpector: warn 22 tokens
original MIT
Skill Claude CodeCodex
Exploit public bucket Content-Type override for stored XSS on target origin.
not rated 1.3k
+15 1mo ago A SkillSpector: pass 24 tokens
original MIT
Skill Claude CodeCodex
Enumerate Hikvision ISAPI endpoints on SCADA and IoT web interfaces.
not rated 1.3k
+15 1mo ago C SkillSpector: warn 24 tokens
original MIT
Skill Claude CodeCodex
Mass scan for exposed env files, backups, and git configs.
not rated 1.3k
+15 1mo ago C SkillSpector: warn 19 tokens
original MIT
Skill Claude CodeCodex
Hunt staging via crt.sh when production is WAF-hardened.
not rated 1.3k
+15 1mo ago C SkillSpector: warn 22 tokens
original MIT
Skill Claude CodeCodex
Launch stealth Chromium with C++ fingerprint patches for anti-bot bypass.
not rated 1.3k
+15 1mo ago A SkillSpector: warn 19 tokens
original MIT
Skill Claude CodeCodex
Map subdomains via crt.sh and subfinder at recon kickoff.
not rated 1.3k
+15
changed 1mo ago A SkillSpector: warn 19 tokens
original MIT
Skill Claude CodeCodex
Detect and verify subdomain takeover via dangling CNAME to unclaimed services.
not rated 1.3k
+15 1mo ago A SkillSpector: warn 23 tokens
original MIT
Skill Claude CodeCodex
Spoof TLS ClientHello and JA4 fingerprints for browser impersonation.
not rated 1.3k
+15 1mo ago A SkillSpector: pass 22 tokens
original MIT
Skill Claude CodeCodex
Exploit unauthenticated multi-step API flows without credentials.
not rated 1.3k
+15 1mo ago A SkillSpector: warn 20 tokens
original MIT
Skill Claude CodeCodex needs its repo
Discover hidden virtual hosts via Host header fuzzing and SSL certificate parsing.
not rated 1.3k
+15 1mo ago B SkillSpector: warn 20 tokens
original MIT
visual-recon
43Skill Claude CodeCodex needs its repo
Screenshot all live hosts for rapid visual triage and technology fingerprinting.
not rated 1.3k
+15 1mo ago A SkillSpector: warn 18 tokens
original MIT
Skill Claude CodeCodex
Sensitive file scanning, path traversal bypass, vHost enum, .env extract, log mining, Varnish detect.
not rated 1.3k
+15 1mo ago A SkillSpector: warn 28 tokens
original MIT
Skill Claude CodeCodex
Hunt WP plugins via REST, exploit CVEs when version known.
not rated 1.3k
+15 1mo ago B SkillSpector: warn 19 tokens
original MIT
Skill Claude CodeCodex
Batch WP recon: users, CORS, XMLRPC, leaks across domains.
not rated 1.3k
+15 1mo ago D 22 tokens
original MIT
Skill Claude CodeCodex
Scan WordPress REST API plugin endpoints for unauthenticated state-changing operations — discover write endpoints (POST/PUT/PATCH/DELETE) exposed without auth, enumerate all plugin routes, and test for unauthorized content publishing, settings modification, and data leakage.
not rated 1.3k
+15 1mo ago C SkillSpector: warn 57 tokens
original MIT
Skill Claude CodeCodex
Exploit XMLRPC multicall, pingback for brute force and SSRF.
not rated 1.3k
+15 1mo ago A SkillSpector: warn 21 tokens
original MIT
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: