auth-bypass
01Skill Claude CodeCodex
Test for authentication and authorization flaws including credential attacks, session issues, and access control bypasses.
not rated 146
+3 2mo ago A 22 tokens
146Stars on the repository
54Mods indexed here, across every type
2mo agoLast push, which is what freshness is scored on
noneNo LICENSE: all rights reserved, so bodies are not copied
Skill Claude CodeCodex
Business logic vulnerability detection — workflow bypass, price manipulation, state abuse, and application-specific flaws.
not rated 146
+3 2mo ago B 23 tokens
Skill Claude CodeCodex
OS command injection detection, exploitation, and filter bypass.
not rated 146
+3 2mo ago B 14 tokens
cors-testing
04Skill Claude CodeCodex
CORS misconfiguration testing for data theft and access control bypass.
not rated 146
+3 2mo ago A 15 tokens
csrf-testing
05Skill Claude CodeCodex
Cross-site request forgery testing for state-changing operations.
not rated 146
+3 2mo ago A 13 tokens
Skill Claude CodeCodex
Insecure deserialization detection and gadget chain exploitation.
not rated 146
+3 2mo ago A 13 tokens
Skill Claude CodeCodex
Discover hidden directories, files, and endpoints on a web server.
not rated 146
+3 2mo ago A 17 tokens
Skill Claude CodeCodex
Detect and exploit local and remote file inclusion vulnerabilities for sensitive data access and code execution.
not rated 146
+3 2mo ago B 20 tokens
Skill Claude CodeCodex
File upload vulnerability testing — webshells, bypass, path traversal.
not rated 146
+3 2mo ago A 17 tokens
Skill Claude CodeCodex
GraphQL security testing — introspection, injection, auth bypass, DoS.
not rated 146
+3 2mo ago A 18 tokens
idor-testing
11Skill Claude CodeCodex
Insecure direct object reference testing for broken access control.
not rated 146
+3 2mo ago A 13 tokens
Skill Claude CodeCodex
Information disclosure detection — error messages, files, headers, debug endpoints.
not rated 146
+3 2mo ago A 18 tokens
jwt-testing
13Skill Claude CodeCodex
JWT token attack techniques — alg bypass, key confusion, claim tampering.
not rated 146
+3 2mo ago A 17 tokens
Skill Claude CodeCodex
Test for unvalidated redirects — URL parameters, login flows, OAuth callbacks that redirect to attacker-controlled domains.
not rated 146
+3 2mo ago A 25 tokens
osint-recon
15Skill Claude CodeCodex
Open-source intelligence gathering — CVE lookup, breach search, DNS history, social profiling.
not rated 146
+3 2mo ago A 22 tokens
Skill Claude CodeCodex
Discover hidden parameters, test values, and identify input handling anomalies.
not rated 146
+3 2mo ago A 17 tokens
Skill Claude CodeCodex
Discover open ports, running services, and their versions on a target.
not rated 146
+3 2mo ago A 17 tokens
Skill Claude CodeCodex
Race condition and TOCTOU exploitation — parallel request attacks.
not rated 146
+3 2mo ago A 15 tokens
Skill Claude CodeCodex
Engagement report structure and formatting guidelines.
not rated 146
+3 2mo ago A 10 tokens
Skill Claude CodeCodex
HTTP request smuggling via CL.TE/TE.CL desync and cache poisoning.
not rated 146
+3 2mo ago A 20 tokens
Skill Claude CodeCodex
Detect PII, credentials, and corporate sensitive data in API responses, source code, files, headers, and database extracts.
not rated 146
+3 2mo ago A 30 tokens
Skill Claude CodeCodex
Frontend source code analysis for hidden routes, API endpoints, and secrets.
not rated 146
+3 2mo ago A 16 tokens
sqli-testing
23Skill Claude CodeCodex
Detect and exploit SQL injection vulnerabilities in web application parameters.
not rated 146
+3 2mo ago A 14 tokens
ssrf-testing
24Skill Claude CodeCodex
Detect and exploit server-side request forgery to access internal resources and cloud metadata.
not rated 146
+3 2mo ago B 19 tokens
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: