ogrodev/fsociety

Multi-plugin marketplace for Claude Code offensive security plugins

20Stars on the repository
63Mods indexed here, across every type
5mo agoLast push, which is what freshness is scored on
MITLicence, which decides whether bodies are shown

api-testing

01

ogrodev/fsociety

Skill Claude CodeCodex

Activate this skill whenever the user mentions API endpoint, REST API, RESTful, GraphQL, GraphQL introspection, GraphQL mutation, gRPC, gRPC reflection, WebSocket, WebSocket upgrade, WS endpoint, API security, API fuzzing, API enumeration, API versioning, API gateway, API rate limit, JWT, JSON Web Token, bearer token…

20 5mo ago A 366 tokens original MIT

cloud-lateral

02

ogrodev/fsociety

Skill Claude CodeCodex

Activate this skill whenever the user mentions cloud lateral movement, cloud privilege escalation, cloud post-exploitation, cloud red team, multi-cloud attack, cloud pentesting, AWS, Amazon Web Services, EC2, S3, Lambda, IAM, STS, SSM, Systems Manager, CloudTrail, GuardDuty, CloudShell, Secrets Manager, Parameter…

20 5mo ago D 374 tokens original MIT

network-recon

03

ogrodev/fsociety

Skill Claude CodeCodex

Activate this skill whenever the user mentions port scan, port scanning, nmap, nmap scan, masscan, rustscan, service detection, service enumeration, service fingerprinting, network scan, network scanning, network mapping, network discovery, network topology, open ports, closed ports, filtered ports, banner grabbing…

20 5mo ago A 314 tokens original MIT

password-attacks

04

ogrodev/fsociety

Skill Claude CodeCodex

This skill should be used when the user mentions "brute force", "password cracking", "hydra", "hashcat", "john the ripper", "credential stuffing", "password spray", "password spraying", "hash cracking", "wordlist", "dictionary attack", "mask attack", "rainbow table", "NTLM", "NTLMv2", "bcrypt", "Kerberoast"…

20 5mo ago A 412 tokens original MIT

payment-security

05

ogrodev/fsociety

Skill Claude CodeCodex

This skill should be used when the user mentions "payment", "payment gateway", "checkout", "IDOR payment", "payment bypass", "Stripe", "MercadoPago", "Binance Pay", "PIX", "PayPal", "Adyen", "Braintree", "Square", "Razorpay", "Mollie", "webhook", "payment webhook", "price manipulation", "amount tampering", "currency…

20 5mo ago A 308 tokens original MIT

reporting

06

ogrodev/fsociety

Skill Claude CodeCodex

This skill should be used when the user mentions "generate report", "pentest report", "engagement report", "findings report", "executive summary", "technical report", "vulnerability report", "remediation report", "remediation plan", "retest report", "write up findings", "document findings", "report findings", "create…

20 5mo ago A 290 tokens original MIT

waf-bypass

07

ogrodev/fsociety

Skill Claude CodeCodex

This skill should be used when the user mentions "WAF", "web application firewall", "WAF bypass", "WAF evasion", "WAF detection", "WAF fingerprint", "wafw00f", "firewall bypass", "firewall evasion", "request filtering", "request blocked", "payload blocked", "blocked by WAF", "403 forbidden", "406 not acceptable", "429…

20 5mo ago A 520 tokens original MIT

web-assessment

08

ogrodev/fsociety

Skill Claude CodeCodex

This skill activates when the user mentions "XSS", "cross-site scripting", "reflected XSS", "stored XSS", "DOM XSS", "blind XSS", "SQL injection", "SQLi", "blind SQLi", "union injection", "error-based injection", "time-based injection", "stacked queries", "second-order injection", "SSRF", "server-side request…

20 5mo ago A 557 tokens original MIT

wordpress-hacking

09

ogrodev/fsociety

Skill Claude CodeCodex

Activate this skill whenever the user mentions WordPress, WP, WooCommerce, WP plugin, WP theme, wp-admin, wp-content, wp-login, wp-json, wp-includes, xmlrpc, XML-RPC, wp-cron, admin-ajax, wp-config, wpscan, WordPress vulnerability, WordPress exploit, WordPress enumeration, WordPress brute force, WordPress RCE…

20 5mo ago A 370 tokens original MIT

engagement-setup

10

ogrodev/fsociety

Skill Claude CodeCodex

This skill should be used when the user mentions "new engagement", "setup engagement", "initialize workspace", "start operation", "new pentest", "setup project", "create workspace", "engagement setup", "initialize engagement", "new investigation", "start campaign", "new operation", "workspace init", "set up a new…

20 5mo ago A 102 tokens original MIT

binary-diffing

11

ogrodev/fsociety

Skill Claude CodeCodex

This skill activates when the user mentions "patch analysis", "binary diff", "binary diffing", "bindiff", "BinDiff", "Diaphora", "diaphora", "radiff2", "DarunGrim", "turbodiff", "version comparison", "what changed between versions", "compare binaries", "diff binaries", "function comparison", "code delta", "patch…

20 5mo ago A 293 tokens original MIT

dotnet-reversing

12

ogrodev/fsociety

Skill Claude CodeCodex

Activate this skill when the user mentions ".NET", "CLR", "managed code", "C# binary", "C# decompile", "decompile C#", "VB.NET", "F# binary", "ILSpy", "dnSpy", "de4dot", "dotPeek", ".NET Reflector", "monodis", "ilspycmd", "ilasm", "ildasm", "Cecil", "Mono.Cecil", "dnlib", ".NET Reactor", "ConfuserEx", "Dotfuscator"…

20 5mo ago A 442 tokens original MIT

ogrodev/fsociety

Skill Claude CodeCodex

Activate this skill when the user mentions ANY of: "YARA", "YARA rules", "YARA signature", "write YARA", "detection rule", "packer detection", "packer identification", "packed binary", "UPX", "Themida", "VMProtect", "ASPack", "crypter", "obfuscated binary", "entropy", "entropy analysis", "section entropy", "high…

20 5mo ago A 449 tokens original MIT

pe-analysis

14

ogrodev/fsociety

Skill Claude CodeCodex

Activate this skill whenever the user mentions PE analysis, PE file, PE header, portable executable, Windows executable analysis, EXE analysis, DLL analysis, SYS driver analysis, OCX analysis, PE structure, PE format, PE parsing, PE triage, PE inspection, binary headers, file headers, DOS header, MZ header, COFF…

20 5mo ago A 401 tokens original MIT

secret-extraction

15

ogrodev/fsociety

Skill Claude CodeCodex

This skill activates when the user mentions "extract secrets", "find credentials", "hardcoded passwords", "API keys", "embedded keys", "connection strings", "tokens", "secret scanning", "credential extraction", "extract crypto keys", "private keys", "certificate extraction", "config extraction", "encryption keys"…

20 5mo ago C 548 tokens original MIT