Skill Claude CodeCodex
A command guide for Katana, a web crawler that discovers pages and links. It covers crawl depth, JavaScript-based page discovery, and controlling concurrent requests.
not rated 808
+10 4mo ago A 41 tokens
808Stars on the repository
35Mods indexed here, across every type
4mo agoLast push, which is what freshness is scored on
customA LICENSE file GitHub cannot name, so bodies are not copied
Skill Claude CodeCodex
A command guide for Nuclei, a scanner that checks targets against reusable security-test templates. It covers choosing templates, running many checks, and setting limits for automation.
not rated 808
+10 4mo ago A 42 tokens
Strix•开放重定向
27Skill Claude CodeCodex
An open-redirect testing guide for checking whether a website can be tricked into sending users to an attacker-controlled address. It also covers phishing redirects, OAuth token theft, and allowlist bypasses.
not rated 808
+10 4mo ago C 47 tokens
Skill Claude CodeCodex
Improper file path handling and dynamic inclusion enable sensitive file disclosure, config/source leakage, SSRF pivots, and code execution. Treat all user-influenced paths, names, and schemes as untrusted; normalize and bind them to an allowlist or eliminate user control entirely.
not rated 808
+10 4mo ago A 50 tokens
Strix•快速扫描
29Skill Claude CodeCodex
Time-boxed assessment focused on high-impact vulnerabilities. Prioritize breadth over depth.
not rated 808
+10 4mo ago A 32 tokens
Strix•远程代码执行
30Skill Claude CodeCodex
A security-testing guide for remote code execution (RCE), where an attacker gets a system to run commands or code they supplied.
not rated 808
+10 4mo ago C 44 tokens
Strix•SQL 注入
31Skill Claude CodeCodex
A security-testing guide for SQL injection, where crafted input changes a database query sent by an application.
not rated 808
+10 4mo ago A 39 tokens
Skill Claude CodeCodex
A command reference for sqlmap, a program that automates testing for SQL injection in web applications.
not rated 808
+10 4mo ago A 42 tokens
Skill Claude CodeCodex
A security-testing guide for server-side request forgery (SSRF), where an attacker tricks a server into making requests on their behalf.
not rated 808
+10 4mo ago C 42 tokens
Strix•标准扫描
34Skill Claude CodeCodex
Balanced security assessment with structured methodology. Thorough coverage without exhaustive depth.
not rated 808
+10 4mo ago A 32 tokens
Strix•XSS 测试
35Skill Claude CodeCodex
A security-testing guide for cross-site scripting (XSS), where injected code runs in another user's web browser.
not rated 808
+10 4mo ago A 45 tokens
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: