Offensive security skills plugin for Claude Code - 120 skills for authorized pentesting, CTF, and security research
Skill Claude CodeCodex
Part of malskills-zh
A skill for creating and maintaining AGENTS.md files, which give AI coding agents instructions for a repository or project. It can also replace tool-specific instruction files with this shared format.
Skill Claude CodeCodex
Part of malskills-zh
A suite for auditing 802.11 wireless networks, the standard used by Wi-Fi. It can capture connection handshakes, send deauthentication requests, and attempt to recover WEP, WPA, or WPA2 passwords.
Skill Claude CodeCodex
Part of malskills-zh
An OWASP tool for mapping an organisation’s internet-facing attack surface—the systems and services an attacker could reach. It combines public-source research with active DNS checks to discover subdomains and assets.
Skill Claude CodeCodex
Part of malskills-zh
A tool for finding hidden HTTP input parameters on web endpoints. It tests query parameters, request-body fields, and headers on REST or GraphQL services.
Skill Claude CodeCodex
Part of malskills-zh
A skill for writing, reviewing, and generating x86-64 or ARM64 assembly files. Assembly is low-level code that directly represents processor operations and must follow platform calling conventions.
Skill Claude CodeCodex
Part of malskills-zh
An assembly-language performance-optimization workflow for reviewing compiler-generated assembly. It examines issues such as bounds checks, register spills, dependency chains, missing vectorization, memory access, and instruction choice.
Skill Claude CodeCodex
Part of malskills-zh
An assembly-language testing workflow for checking hand-written or manually optimized .asm, .s, and .S files. It uses C test drivers, debugger register checks, object-file inspection, ABI checks, and cycle-accurate measurements.
Skill Claude CodeCodex
Part of malskills-zh
A browser exploitation framework for controlling browsers through cross-site scripting (XSS), a web vulnerability that lets injected JavaScript run in another user's browser.
Skill Claude CodeCodex
Part of malskills-zh
A network-security tool for examining and attacking local wired, Wi-Fi, Bluetooth, and HID networks. Its listed activities include intercepting traffic, removing HTTPS encryption, and stealing credentials.
Skill Claude CodeCodex
Part of malskills-zh
A firmware-image analysis tool for examining software stored in devices such as routers, cameras, and other embedded systems. It can identify and extract embedded file systems, compressed archives, and executable code.
Skill Claude CodeCodex
Part of malskills-zh
A graph-based tool for mapping Active Directory, Microsoft's system for managing users, computers, and permissions in Windows networks. It shows relationships that can form attack paths through the network.
Skill Claude CodeCodex
Part of malskills-zh
A platform for testing the security of web applications through an intercepting proxy, scanner, request editor, and fuzzing tool. An intercepting proxy lets you view and change HTTP traffic between a browser and a server.
Skill Claude CodeCodex
Part of malskills-zh
A workflow for creating Beacon Object Files, small C programs that run inside Cobalt Strike or compatible command-and-control frameworks. It covers compiling and debugging these files.
Skill Claude CodeCodex
Part of malskills-zh
A set of secure programming patterns for C11 and newer code, focused on ownership, resource lifetimes, error handling, integer safety, and API design.
Skill Claude CodeCodex
Part of malskills-zh
A C-language testing workflow for C11 and newer code, covering both unit tests of individual modules and integration tests of connected components. It includes CTest, failure diagnosis, sanitizers, and fuzz testing.
Skill Claude CodeCodex
Part of malskills-zh
A Windows password-recovery skill that can sniff network traffic, crack captured password handshakes, and decode cached credentials.
Skill Claude CodeCodex
Part of malskills-zh
A security-auditing skill for Active Directory Certificate Services, Microsoft's system for issuing certificates in Windows networks. It uses Certify to find certificate-template settings that may allow privilege escalation.
Skill Claude CodeCodex
Part of malskills-zh
A data-exfiltration skill that hides stolen information inside strings that look harmless, such as tweets, chess moves, or cat names.
Skill Claude CodeCodex
Part of malskills-zh
Guidance for using Cobalt Strike, a commercial platform for authorised red-team exercises and threat simulation. It covers Beacon, the platform’s implant, and its command-and-control communication options.
Skill Claude CodeCodex
Part of malskills-zh
Guidance for Coercer, a security tool that abuses Windows network protocols to make a server authenticate to a system under an operator's control. The captured authentication can then be used in attacks such as NTLM relay or hash collection.
Skill Claude CodeCodex
Part of malskills-zh
A tool for finding and using OS command-injection vulnerabilities in web parameters, cookies, or HTTP headers. Command injection lets an attacker make a server run operating-system commands through an input field.
Skill Claude CodeCodex
Part of malskills-zh
A Chinese-language security skill for checking CORS configuration. CORS is a browser rule that controls whether one website can request data from another website.
Skill Claude CodeCodex
Part of malskills-zh
A collaborative .NET command-and-control framework for authorized red-team exercises and post-compromise work. It includes a web interface, implants that communicate over HTTP/S or SMB, a task library, and support for multiple operators.
Skill Claude CodeCodex
Part of malskills-zh
A coding skill for creating C++ Beacon Object Files (BOFs), small modules used by Cobalt Strike and similar command-and-control frameworks.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: