woohyun212

60 mods across 1 repository, 22 stars between them.

web-vuln-idor

49

woohyun212/security-skill

Skill Claude CodeCodex

IDOR testing across numeric IDs, UUIDs, GraphQL, WebSocket, API versioning, and mass assignment vectors.

not rated 22 6mo ago A 31 tokens original MIT

web-vuln-mfa-bypass

50

woohyun212/security-skill

Skill Claude CodeCodex

MFA bypass testing covering rate limiting, OTP reuse, response manipulation, race conditions, and direct navigation attacks.

not rated 22 6mo ago B 30 tokens original MIT

web-vuln-oauth

51

woohyun212/security-skill

Skill Claude CodeCodex

OAuth 2.0 and OIDC vulnerability detection with redirecturi bypass techniques.

not rated 22 6mo ago C 22 tokens original MIT

woohyun212/security-skill

Skill Claude CodeCodex

Web endpoint race condition testing (TOCTOU, coupon reuse, double-spend, limit overrun) using concurrent HTTP request bursts.

not rated 22 6mo ago A 35 tokens original MIT

web-vuln-saml-sso

53

woohyun212/security-skill

Skill Claude CodeCodex

SAML and SSO vulnerability detection including XML Signature Wrapping attacks.

not rated 22 6mo ago B 22 tokens original MIT

web-vuln-ssrf

54

woohyun212/security-skill

Skill Claude CodeCodex

SSRF vulnerability detection with IP bypass techniques and cloud metadata exploitation.

not rated 22 6mo ago C 20 tokens original MIT

web-vuln-ssti

55

woohyun212/security-skill

Skill Claude CodeCodex

Server-Side Template Injection detection and exploitation across template engines.

not rated 22 6mo ago A 18 tokens original MIT

web3-smart-contract

56

woohyun212/security-skill

Skill Claude CodeCodex

Smart contract security audit covering 10 DeFi vulnerability classes with Foundry PoC templates.

not rated 22 6mo ago B 22 tokens original MIT

whois-lookup

57

woohyun212/security-skill

Skill Claude CodeCodex

Domain and IP WHOIS lookup to gather registration and ownership information.

not rated 22 6mo ago B 17 tokens original MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: