A collection of 15 major topics and 500+ skills—the most comprehensive network security agent skill set ever. One repository covers the entire penetration testing process, from reconnaissance and vulnerability discovery to exploitation, post-exploitation, WAF bypasses, and report generation. Integrates scattered security skills into an executable knowledge system that makes your Lobster more security-savvy!
HankLEE-1/security-skills-consolidated
Skill Claude CodeCodex
A security skill for information gathering and reconnaissance, including passive research, active probing, and common Google search operators. Reconnaissance means collecting information about a target before security testing.
HankLEE-1/security-skills-consolidated
Skill Claude CodeCodex
A security-testing skill for finding vulnerabilities, which are weaknesses that can be exploited. It covers matching software against CVEs, web scanning, configuration checks, and source-code bug hunting.
HankLEE-1/security-skills-consolidated
Skill Claude CodeCodex
A security guide to vulnerability exploitation, including proof-of-concept construction, exploit categories, reverse engineering, exploit chains, and comparing patched and unpatched software.
HankLEE-1/security-skills-consolidated
Skill Claude CodeCodex
// Base64编码 base64decode('c3lzdGVt')('id').
HankLEE-1/security-skills-consolidated
Skill Claude CodeCodex
A guide to post-exploitation, the stage after gaining access to a system when an authorised security test examines what access provides. It covers checking the environment, system, network, and user information, as well as moving between systems.
HankLEE-1/security-skills-consolidated
Skill Claude CodeCodex
A web-security skill covering server-side request forgery (SSRF), internal-network probing, protocol exploitation, and bypass techniques. SSRF is when a server is tricked into making requests on someone’s behalf.
HankLEE-1/security-skills-consolidated
Skill Claude CodeCodex
A guide to reverse engineering, the practice of examining software to understand how it works, using tools such as radare2.
HankLEE-1/security-skills-consolidated
Skill Claude CodeCodex
A mobile-security skill covering Android penetration testing, runtime-first investigation, tools, and common ADB commands. ADB is Android’s command-line tool for communicating with a device or emulator.
HankLEE-1/security-skills-consolidated
Skill Claude CodeCodex
GAARM = Governance, Authentication, Authorization, Risk Management.
HankLEE-1/security-skills-consolidated
Skill Claude CodeCodex
A penetration-testing workflow covering information gathering, vulnerability discovery, exploitation, optional post-exploitation, and report writing. Penetration testing is an authorized attempt to find and verify security weaknesses.
HankLEE-1/security-skills-consolidated
Skill Claude CodeCodex
A security-reporting format for documenting individual vulnerabilities. It includes severity, affected scope, reproduction steps with full requests and responses, screenshots, proof-of-concept code, and remediation advice.
HankLEE-1/security-skills-consolidated
Skill Claude CodeCodex
A guide to capture-the-flag security competitions, often called CTFs, where participants solve challenges such as exploitation and reverse engineering to find hidden text called flags.
HankLEE-1/security-skills-consolidated
Skill Claude CodeCodex
A security guide for checking software supply chains and APIs. A software supply chain includes the libraries, tools, and services your code depends on.
HankLEE-1/security-skills-consolidated
Skill Claude CodeCodex
A malware-analysis guide covering the process of examining harmful software, including static analysis and basic information about Windows PE files, the format used by many Windows programs.
HankLEE-1/security-skills-consolidated
Skill Claude CodeCodex
A code-audit skill covering common software security weaknesses, including injection and authentication or permission problems.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: