Solve CTF challenges, find bugs, better accuracy. Plug and play with any agent.
This repository also configures its own agents. See what The-Scaffolding tells them →
Skill Claude CodeCodex
Improve future activation behavior by capturing missed dependencies, split quality regressions, and workflow friction, then codifying minimal corrections in local instructions.
Skill Claude CodeCodex
Provide baseline activation guardrails for tool readiness and dependency checks before any phase starts.
Skill Claude CodeCodex
Triage cryptographic artifacts from encoding and classical ciphers through RSA, EC, symmetric, hash, protocol, RNG, custom, and zero-knowledge attacks.
Skill Claude CodeCodex
Coordinate forensic investigation across image, memory, network, stego, format, log, multimedia, and timeline phases with disciplined data validation.
Skill Claude CodeCodex
Drive mobile app testing from static extraction through TLS bypass, storage abuse, intent/WebView abuse, runtime hooks, and backend pivoting.
Skill Claude CodeCodex
Assess network assets with non-destructive service mapping, auth posture checks, directory exposure reviews, remote access, and evidence-linked pivoting.
Skill Claude CodeCodex
Advance pwn workflows from environment setup into stack, heap, format-string, UAF, integer, TOCTOU, kernel, and shellcode exploitation.
Skill Claude CodeCodex
Use recursive bug-bounty recon to discover, verify, and pivot domains, hosts, IPs, cloud assets, and JS signals into the next testing phase.
Skill Claude CodeCodex
Progress binary analysis from sample intake through static, anti-analysis, unpacking, dynamic tracing, VM reverse engineering, and symbolic review.
Skill Claude CodeCodex
Execute web-application assessment from setup and recon through injection, access control, auth/session issues, API, and SSRF chains.
Skill Cursor
Security testing workflow assistant for recon, web, network, mobile, pwn, crypto, reverse engineering, and forensics phases.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: