xAmirHamza77

120 mods across 2 repositories, 6 stars between them.

xAmirHamza77/PenKit51

Skill Claude CodeCodex

A set of methods for penetration testing, which is an authorised attempt to find security weaknesses in a computer system or network.

2 1mo ago A 17 tokens

xAmirHamza77/PenKit51

Skill Claude CodeCodex

Security testing playbook for Next.js covering App Router, Server Actions, RSC, and Edge runtime vulnerabilities.

2 1mo ago B 26 tokens

nmap-tooling

99

xAmirHamza77/PenKit51

Skill Claude CodeCodex

Canonical Nmap CLI syntax, two-pass scanning workflow, and sandbox-safe bounded scan patterns.

2 1mo ago A 23 tokens

xAmirHamza77/PenKit51

Skill Claude CodeCodex

NoSQL injection testing covering MongoDB operator injection, authentication bypass, blind extraction, GraphQL variable injection, and Redis/DynamoDB/Elasticsearch/Neo4j-specific attack surfaces.

2 1mo ago A 42 tokens

nuclei-tooling

101

xAmirHamza77/PenKit51

Skill Claude CodeCodex

Exact Nuclei command structure, template selection, and bounded high-throughput execution controls.

2 1mo ago A 24 tokens

xAmirHamza77/PenKit51

Skill Claude CodeCodex

OAuth 2.0 and OIDC flow security testing covering redirect manipulation, token leakage, PKCE bypass, and client misconfiguration.

2 1mo ago A 30 tokens

xAmirHamza77/PenKit51

Skill Claude CodeCodex

Run Python through execcommand in the SDK sandbox. Use the image-baked caidoapi module for Caido proxy automation from Python scripts.

2 1mo ago A 33 tokens

security-automation

111

xAmirHamza77/PenKit51

Skill Claude CodeCodex

A set of methods for automating security-related work. Security automation means using software to carry out security tasks with less manual effort.

2 1mo ago A 13 tokens

semgrep-tooling

112

xAmirHamza77/PenKit51

Skill Claude CodeCodex

Exact Semgrep CLI structure, metrics-off scanning, scoped ruleset selection, and automation-safe output patterns.

2 1mo ago A 26 tokens

source-aware-sast

113

xAmirHamza77/PenKit51

Skill Claude CodeCodex

Practical source-aware SAST and AST playbook for semgrep, ast-grep, gitleaks, and trivy fs.

2 1mo ago A 31 tokens

sqlmap-tooling

116

xAmirHamza77/PenKit51

Skill Claude CodeCodex

Skill "sqlmap-tooling" from xAmirHamza77/PenKit51, covering sqlmap tooling, deep exploitation guide, sqlmap cli playbook, platform methodology and sqlmap tooling.

2 1mo ago A 23 tokens

ssrf-testing

117

xAmirHamza77/PenKit51

Skill Claude CodeCodex

SSRF testing for cloud metadata access, internal service discovery, and protocol smuggling.

2 1mo ago C 20 tokens

ssti-testing

118

xAmirHamza77/PenKit51

Skill Claude CodeCodex

Server-side template injection across Jinja / Mako / Velocity / Freemarker / Thymeleaf / Twig / Handlebars / EJS / ERB with engine fingerprinting, sandbox escape, and RCE gadget chains.

2 1mo ago D 49 tokens