auth-bypass
01Skill Claude CodeCodex
Test for authentication and authorization flaws including credential attacks, session issues, and access control bypasses.
122 1mo ago A 22 tokens
122Stars on the repository
54Mods indexed here, across every type
1mo agoLast push, which is what freshness is scored on
noneNo LICENSE: all rights reserved, so bodies are not copied
Skill Claude CodeCodex
Business logic vulnerability detection — workflow bypass, price manipulation, state abuse, and application-specific flaws.
122 1mo ago B 23 tokens
Skill Claude CodeCodex
OS command injection detection, exploitation, and filter bypass.
122 1mo ago B 14 tokens
cors-testing
04Skill Claude CodeCodex
CORS misconfiguration testing for data theft and access control bypass.
122 1mo ago A 15 tokens
csrf-testing
05Skill Claude CodeCodex
Cross-site request forgery testing for state-changing operations.
122 1mo ago A 13 tokens
Skill Claude CodeCodex
Insecure deserialization detection and gadget chain exploitation.
122 1mo ago A 13 tokens
Skill Claude CodeCodex
Discover hidden directories, files, and endpoints on a web server.
122 1mo ago A 17 tokens
Skill Claude CodeCodex
Detect and exploit local and remote file inclusion vulnerabilities for sensitive data access and code execution.
122 1mo ago B 20 tokens
Skill Claude CodeCodex
File upload vulnerability testing — webshells, bypass, path traversal.
122 1mo ago A 17 tokens
Skill Claude CodeCodex
GraphQL security testing — introspection, injection, auth bypass, DoS.
122 1mo ago A 18 tokens
idor-testing
11Skill Claude CodeCodex
Insecure direct object reference testing for broken access control.
122 1mo ago A 13 tokens
Skill Claude CodeCodex
Information disclosure detection — error messages, files, headers, debug endpoints.
122 1mo ago A 18 tokens
jwt-testing
13Skill Claude CodeCodex
JWT token attack techniques — alg bypass, key confusion, claim tampering.
122 1mo ago A 17 tokens
Skill Claude CodeCodex
Test for unvalidated redirects — URL parameters, login flows, OAuth callbacks that redirect to attacker-controlled domains.
122 1mo ago A 25 tokens
osint-recon
15Skill Claude CodeCodex
Open-source intelligence gathering — CVE lookup, breach search, DNS history, social profiling.
122 1mo ago A 22 tokens
Skill Claude CodeCodex
Discover hidden parameters, test values, and identify input handling anomalies.
122 1mo ago A 17 tokens
Skill Claude CodeCodex
Discover open ports, running services, and their versions on a target.
122 1mo ago A 17 tokens
Skill Claude CodeCodex
Race condition and TOCTOU exploitation — parallel request attacks.
122 1mo ago A 15 tokens
Skill Claude CodeCodex
Engagement report structure and formatting guidelines.
122 1mo ago A 10 tokens
Skill Claude CodeCodex
HTTP request smuggling via CL.TE/TE.CL desync and cache poisoning.
122 1mo ago A 20 tokens
Skill Claude CodeCodex
Detect PII, credentials, and corporate sensitive data in API responses, source code, files, headers, and database extracts.
122 1mo ago A 30 tokens
Skill Claude CodeCodex
Frontend source code analysis for hidden routes, API endpoints, and secrets.
122 1mo ago A 16 tokens
sqli-testing
23Skill Claude CodeCodex
Detect and exploit SQL injection vulnerabilities in web application parameters.
122 1mo ago A 14 tokens
ssrf-testing
24Skill Claude CodeCodex
Detect and exploit server-side request forgery to access internal resources and cloud metadata.
122 1mo ago B 19 tokens