87 tagged ctf, measured the same way as everything else here.
Browse within: cybersecurity 55bug-bounty 54ai-security 53offensive-security 12penetration-testing 12red-team 12hackthebox 11pentesting 9claude-ai 6claude-code-skill 6
Agent
Delegates to this agent when the user asks about malware analysis, reverse engineering, binary analysis, disassembly, debugging, sandbox analysis, static analysis, dynamic analysis, or suspicious file triage.
Agent
Delegates to this agent when the user asks about OSINT, reconnaissance, information gathering, target profiling, email harvesting, subdomain enumeration, social media recon, breach data, open source intelligence, or building a target dossier for authorized engagements.
Agent
Delegates to this agent when the user asks about threat modeling, attack surface analysis, STRIDE, DREAD, attack trees, data flow diagrams, trust boundaries, or security architecture review.
Agent
Active Directory exploitation subagent for red-run. Executes one AD technique skill per invocation as directed by the orchestrator. Handles Kerberos attacks, ADCS abuse, ACL exploitation, credential operations, lateral movement, and domain persistence. Use when the orchestrator needs to exploit an AD vulnerability.
Agent
Linux privilege escalation subagent for red-run. Executes one privesc skill per invocation as directed by the orchestrator. Handles Linux host discovery, sudo/SUID/capabilities abuse, cron/service exploitation, file path abuse, kernel exploits, and container escapes. Use when the orchestrator has shell access on a…
Agent
Web application exploitation subagent for red-run. Executes one web technique skill per invocation as directed by the orchestrator. Handles injection testing, authentication bypass, file upload, deserialization, and all other web exploitation techniques. Use when the orchestrator needs to exploit a web vulnerability.
Agent Claude Code
Red Team penetration testing agent for HTB Expressway. Use when the user wants to attack or pentest the target machine. Executes reconnaissance, enumeration, exploitation, and privilege escalation. ALWAYS shows attack plan first before executing.
Agent Claude Code
Security report writer agent. Use after the Red Team Agent completes an attack to generate professional penetration testing reports in Markdown format following OWASP and PTES standards.
Agent
Agent Skills for Happy Hacking Space's open-source security tools. Compatible with Claude Code, OpenAI Codex, Gemini CLI, and Cursor.
allsmog/blackbox-claude-plugin
Agent
Use this agent when a specific CVE is identified and you need to find and run a working exploit. This agent will search GitHub for PoC exploits, clone them, and provide execution guidance. Examples: Context: CVE-2025-32433 identified on Erlang SSH user: "Exploit the Erlang SSH" assistant: Clones…
allsmog/blackbox-claude-plugin
Agent
Use this agent when the user asks "what exploits exist", "how do I exploit this", "suggest attack vectors", "find vulnerabilities", "searchsploit", "what's vulnerable", "how can I get a shell", or needs exploitation guidance. Examples: Context: After discovering Apache 2.4.49 user: "What exploits are there for this?"…
allsmog/blackbox-claude-plugin
Agent
Use this agent when the user asks to "start a listener", "catch a shell", "manage shells", "send command to shell", "check shell output", "set up reverse shell", or needs to maintain persistent shell access during exploitation. Examples: Context: User has RCE and needs to catch reverse shell user: "Start a listener on…
Agent Claude Code
Plans Active Directory attack paths from enumeration or BloodHound data. Use on domain-joined Windows rooms.
Agent Claude Code
Maps discovered service versions to known CVEs and public exploits. Use after version detection.
Agent Claude Code
Ranks Windows privilege escalation paths from enum output. Use after winPEAS/whoami/systeminfo on a Windows box.
Agent
Security testing workflow assistant for recon, web, network, mobile, pwn, crypto, reverse engineering, and forensics phases.
Agent
Use this agent when the user provides a binary file and wants comprehensive analysis, asks to "analyze this binary", "check this pwn challenge", "what vulnerabilities does this have", or when automatic binary analysis would help understand a CTF challenge. Examples.
Agent
Use this agent when the user has analysis findings and needs exploitation technique recommendations, asks "how should I exploit this", "what technique should I use", "how do I bypass these protections", or needs guidance choosing between exploitation approaches. Examples.
Agent
Use this agent when the user needs a customized pwntools exploit script, asks to "generate an exploit", "create exploit template", "write the exploit script", or when exploit code generation would help after analysis is complete. Examples.