morodomi/redteam-skills

morodomi/redteam-skills

Agent

Part of redteam-core

An agent that uses static analysis—examining source code without running it—to find common API security weaknesses.

morodomi/redteam-skills

Agent

Part of redteam-core

An agent that turns detected vulnerabilities into concrete attack scenarios by analysing how weaknesses can be chained together.

morodomi/redteam-skills

Agent

Part of redteam-core

A static code checker for authentication and authorization weaknesses. It looks for hardcoded credentials, missing login checks, broken access controls, and weak session settings in common web frameworks.

morodomi/redteam-skills

Agent

Part of redteam-core

A static code checker for unsafe cryptography and security settings. It looks for debug mode, weak hashes such as MD5 or SHA-1, weak encryption algorithms, default credentials, and overly broad cross-origin access.

morodomi/redteam-skills

Agent

Part of redteam-core

A static code-analysis agent that looks for Cross-Site Request Forgery (CSRF), an attack where a victim’s browser is tricked into sending an unwanted request to a site where they are signed in.

morodomi/redteam-skills

Agent

Part of redteam-core

A browser-based web crawler that uses Playwright to discover URLs and endpoints, including ones created dynamically by JavaScript.

morodomi/redteam-skills

Agent

Part of redteam-core

An agent that dynamically checks whether potential web vulnerabilities are real by sending HTTP requests to an application. It can test issues such as SQL injection, cross-site scripting, authentication bypasses, and request-forgery weaknesses.

morodomi/redteam-skills

Agent

Part of redteam-core

A security-analysis agent that looks for unsafe exception handling, such as ignored errors, overly broad catches, and resources that are not released.

morodomi/redteam-skills

Agent

Part of redteam-core

An agent that reviews findings from static security analysis and marks likely false positives. Static analysis checks source code for possible problems without running the application.

morodomi/redteam-skills

Agent

Part of redteam-core

A static-analysis agent that looks for file-related security vulnerabilities, with descriptions written in Japanese. Static analysis checks source code without running the application.

morodomi/redteam-skills

Agent

Part of redteam-core

Agent "injection-attacker" from morodomi/redteam-skills, covering injection attacker, detection targets, sql injection, command injection and framework detection patterns.

morodomi/redteam-skills

Agent

Part of redteam-core

A reconnaissance agent for security reviews. It examines a codebase to find routes, identify the technology stack, and locate user-input areas that may deserve attention.

morodomi/redteam-skills

Agent

Part of redteam-core

Agent "sca-attacker" from morodomi/redteam-skills, covering sca attacker, detection targets, osv api integration, http execution and version resolution strategy.

morodomi/redteam-skills

Agent

Part of redteam-core

A code-analysis agent that looks for server-side request forgery (SSRF), a flaw where user-controlled addresses make a server send unintended requests.

morodomi/redteam-skills

Agent

Part of redteam-core

A static checker for server-side template injection, a vulnerability where user-controlled text is treated as template code on the server. It covers Blade, Jinja2, Twig, ERB, and EJS patterns.

morodomi/redteam-skills

Agent

Part of redteam-core

A security-checking agent for WordPress, the software used to build many websites, that looks for unsafe coding patterns in the source code.

morodomi/redteam-skills

Agent

Part of redteam-core

A static-analysis agent for finding cross-site scripting (XSS), a vulnerability that lets untrusted input run as code in a user's browser. It checks reflected, DOM-based, and stored XSS patterns in several web frameworks.

morodomi/redteam-skills

Agent

Part of redteam-core

A static checker for XML External Entity injection, a vulnerability in which unsafe XML parsing can read files, contact other systems, or consume excessive resources.