Claude Code plugin for black-box and grey-box penetration testing on HackTheBox machines
allsmog/blackbox-claude-plugin
Agent
Use this agent when inside a container and needing to find escape vectors. Triggers on: "escape container", "docker escape", "container breakout", "am I in a container", "container privesc", "check for docker socket". Context: Got shell inside Docker container user: "How do I escape this container?" assistant: Runs…
allsmog/blackbox-claude-plugin
Agent
Use this agent when finding credentials, discovering .env files, or needing systematic credential extraction. Triggers on: "find credentials", "extract passwords", "check for passwords", ".env file", "database credentials", "credential hunting". Context: Found access to web application files user: "Look for…
allsmog/blackbox-claude-plugin
Agent
Use this agent when a specific CVE is identified and you need to find and run a working exploit. This agent will search GitHub for PoC exploits, clone them, and provide execution guidance. Examples: Context: CVE-2025-32433 identified on Erlang SSH user: "Exploit the Erlang SSH" assistant: Clones…
allsmog/blackbox-claude-plugin
Agent
Use this agent when the user asks "what exploits exist", "how do I exploit this", "suggest attack vectors", "find vulnerabilities", "searchsploit", "what's vulnerable", "how can I get a shell", or needs exploitation guidance. Examples: Context: After discovering Apache 2.4.49 user: "What exploits are there for this?"…
allsmog/blackbox-claude-plugin
Agent
Use this agent when the user asks to "scan a target", "run nmap", "find open ports", "discover services", "run reconnaissance", "scan the network", or needs automated network discovery. Examples: Context: User starting a new HTB machine user: "Scan 10.10.10.5" assistant: Runs comprehensive nmap scans and presents…
allsmog/blackbox-claude-plugin
Agent
Use this agent when the user asks to "escalate privileges", "get root", "become admin", "run linpeas", "run winpeas", "find privesc vectors", "sudo -l", "check SUID", or needs privilege escalation after getting initial shell. Examples: Context: User has shell as www-data user: "How can I get root?" assistant: Runs…
allsmog/blackbox-claude-plugin
Agent
Use this agent when the user asks to "enumerate services", "check SMB shares", "enumerate users", "find directories", "run gobuster", "enumerate LDAP", "check for anonymous access", or needs detailed service enumeration. Examples: Context: After nmap shows port 445 open user: "Enumerate the SMB shares" assistant: Runs…
allsmog/blackbox-claude-plugin
Agent
Use this agent when the user asks to "start a listener", "catch a shell", "manage shells", "send command to shell", "check shell output", "set up reverse shell", or needs to maintain persistent shell access during exploitation. Examples: Context: User has RCE and needs to catch reverse shell user: "Start a listener on…
allsmog/blackbox-claude-plugin
Agent
Use this agent when you discover source code, backup files, or need to analyze application code for vulnerabilities. Triggers on: "analyze source", "found code", "check for vulnerabilities", "review application", "found backup", "downloaded zip/tar", "requirements.txt", "package.json".