Skill Claude CodeCodex
Web cache poisoning and web cache deception vulnerability detection.
Skill Claude CodeCodex
Web cache poisoning and web cache deception vulnerability detection.
Skill Claude CodeCodex
GraphQL API security testing including introspection, batching, and authorization bypass.
Skill Claude CodeCodex
HTTP request smuggling (desync) detection in proxy/CDN architectures testing CL.TE, TE.CL, TE.TE, and H2.CL parser disagreements.
Skill Claude CodeCodex
IDOR testing across numeric IDs, UUIDs, GraphQL, WebSocket, API versioning, and mass assignment vectors.
Skill Claude CodeCodex
MFA bypass testing covering rate limiting, OTP reuse, response manipulation, race conditions, and direct navigation attacks.
Skill Claude CodeCodex
OAuth 2.0 and OIDC vulnerability detection with redirecturi bypass techniques.
Skill Claude CodeCodex
Web endpoint race condition testing (TOCTOU, coupon reuse, double-spend, limit overrun) using concurrent HTTP request bursts.
Skill Claude CodeCodex
SAML and SSO vulnerability detection including XML Signature Wrapping attacks.
Skill Claude CodeCodex
SSRF vulnerability detection with IP bypass techniques and cloud metadata exploitation.
Skill Claude CodeCodex
Server-Side Template Injection detection and exploitation across template engines.
Skill Claude CodeCodex
Smart contract security audit covering 10 DeFi vulnerability classes with Foundry PoC templates.
Skill Claude CodeCodex
Domain and IP WHOIS lookup to gather registration and ownership information.