Instructions file CodexOpenCode
AGENTS.md instructions for H-mmer/pentest-agents, covering pentest-agents repository maintenance, role, source map, generated output and scaffold contract.
not rated 815 2mo ago A 791 tokens
815Stars on the repository
205Mods indexed here, across every type
2mo agoLast push, which is what freshness is scored on
noneNo LICENSE: all rights reserved, so bodies are not copied
Instructions file
Claude Code instructions for H-mmer/pentest-agents, covering pentest-agents repository maintenance, repository role, source map, generated artifacts and scaffold contract.
not rated 815 2mo ago A 1,231 tokens
chain-table
03Instructions file GitHub Copilot
Instructions for H-mmer/pentest-agents, covering chain table — capability → next bug, the chain walk algorithm, capability → next bug table, terminal impacts (stop chaining, report) and known deep chains (real-world examples).
not rated 815 2mo ago C 2,942 tokens
hunting
04Instructions file GitHub Copilot
Instructions for H-mmer/pentest-agents, covering hunting rules, rule 0: the only question that matters, theoretical bug = wasted time. kill these immediately, rule 1: read full scope first and rule 2: kill weak findings fast.
not rated 815 2mo ago A 4,119 tokens
identities
05Instructions file GitHub Copilot
Instructions for H-mmer/pentest-agents, covering platform identities — canonical env var map, hackerone, bugcrowd, intigriti and yeswehack.
not rated 815 2mo ago A 1,550 tokens
mistakes
06Instructions file GitHub Copilot
Instructions for H-mmer/pentest-agents, covering mistakes log — lessons from real engagements, top 10 most common mistakes (read first), agent-behavior, gate floors are not work and write files to disk — terminal output is not a deliverable.
not rated 815 2mo ago A 17,588 tokens
never-submit
07Instructions file GitHub Copilot
Instructions for H-mmer/pentest-agents, covering never-submit list & conditionally valid findings, never-submit list (instant kill without chain) and conditionally valid (chain required).
not rated 815 2mo ago A 419 tokens
payloads
08Instructions file GitHub Copilot
Instructions for H-mmer/pentest-agents, covering payload reference, xss payloads, basic, waf bypass and context-specific.
not rated 815 2mo ago E 27,701 tokens
techniques
09Instructions file GitHub Copilot
Instructions for H-mmer/pentest-agents, covering proven attack techniques, graphql resolver-level auth bypass, with no auth, with fake auth and drf authentication semantics proof.
not rated 815 2mo ago B 4,484 tokens
Instructions file GitHub Copilot
Instructions for H-mmer/pentest-agents, covering patched — do not test, cloud subdomain-takeover cooldowns, framework fingerprint signatures, keycloak vs spring authorization server and azure app service vs s3 static hosting.
not rated 815 2mo ago A 1,504 tokens
Instructions file GitHub Copilot
Instructions for H-mmer/pentest-agents, covering waf bypass iteration protocol, detection first, check headers, trigger a block and read the error page and check wafw00f if available.
not rated 815 2mo ago B 1,516 tokens
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: