ssti-testing
25Skill Claude CodeCodex
Server-side template injection detection, engine identification, and RCE.
not rated 126
+2 1mo ago A 16 tokens
126Stars on the repository
54Mods indexed here, across every type
1mo agoLast push, which is what freshness is scored on
noneNo LICENSE: all rights reserved, so bodies are not copied
Skill Claude CodeCodex
Subdomain discovery via subfinder, DNS brute-force, and passive sources.
not rated 126
+2 1mo ago C 20 tokens
Skill Claude CodeCodex
Discover any interface (HTTP, WebSocket, GraphQL, gRPC, or other) that distinguishes between existing and non-existing users through any observable difference.
not rated 126
+2 1mo ago C 35 tokens
web-recon
28Skill Claude CodeCodex
Enumerate web technologies, headers, endpoints, and metadata from a target.
not rated 126
+2 1mo ago A 18 tokens
Skill Claude CodeCodex
WebSocket security testing — injection, auth bypass, hijacking.
not rated 126
+2 1mo ago A 16 tokens
xss-testing
30Skill Claude CodeCodex
Detect and exploit cross-site scripting vulnerabilities in web applications.
not rated 126
+2 1mo ago A 14 tokens
xxe-testing
31Skill Claude CodeCodex
XML external entity injection for file read, SSRF, and DoS.
not rated 126
+2 1mo ago B 18 tokens
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: