85 tagged ethical hacking, measured the same way as everything else here.
Browse within: bug-bounty 61cybersecurity 48automated-testing 31kali-linux 31llm-agent 31blue-team 28ctf-tools 28osint 15ethical-hacking-tools 13metasploit 13malware 9forensics 5
Skill Claude CodeCodex
Wiring a new tool the AI agent can call (not the recon pipeline): the tool registry, the phase map, the hardcoded dispatch chokepoint, and the duplicated execution paths that make a tool work in single mode but silently break in parallel plans. Trigger: adding or editing a tool the agent invokes; editing…
Skill Claude CodeCodex
Adding a built-in Agent Skill (an attack technique like ssrf, xxe, rce) that ships hardcoded in RedAmon: classified by the Intent Router, injected into the agent prompt, toggled per project, badged in the chat drawer. Nine layers across agentic and webapp, two of which fail with no error. Trigger: adding or editing a…
Skill Claude CodeCodex
Spawning and hardening scan containers from the recon orchestrator: the security flags that look correct and break the container, and the sibling bind-mount path handling. capdrop and no-new-privileges were each reverted after breaking real scans. Trigger: editing reconorchestrator/containermanager.py; changing how a…
Skill Claude CodeCodex
Proof-of-Concept (PoC) Validation Skill for security exploit verification. Use when validating exploitability of vulnerabilities, generating tailored payloads, executing exploits in sandboxed environments, or verifying successful exploitation (e.g., SQL injection, CVE exploitation, command injection). Triggers on…
Skill Claude CodeCodex
Module Loop and Iteration Skill for orchestrating multi-phase penetration testing workflows. Use when coordinating sequential tool execution, managing dependencies between reconnaissance and vulnerability scanning modules, implementing adaptive fallback strategies, or managing workflow state across iterations.…
Skill Claude CodeCodex
Parallel research with 4 specialized agents (Official, Practical, Edge Cases, Future).
Skill Claude CodeCodex
File upload vulnerability testing — webshells, bypass, path traversal.
Skill Claude CodeCodex
Detect PII, credentials, and corporate sensitive data in API responses, source code, files, headers, and database extracts.
Skill Claude CodeCodex
Frontend source code analysis for hidden routes, API endpoints, and secrets.
Skill Claude CodeCodex
A Chinese-language guide for carrying out authorized penetration tests with Kali Linux command-line tools through a local system, SSH, or Docker.
Skill Claude CodeCodex
Execute authorized penetration testing via Kali Linux CLI tools over SSH or Docker. Covers: information gathering, vulnerability analysis, sniffing & spoofing, web/API testing, exploitation, password attacks, wireless, cloud-native security, RFID/NFC, VoIP/ICS, reverse engineering, forensics, post-exploitation/C2, and…
Skill Claude CodeCodex
RedTeam physical terminal execution skill. ONLY run using runinterminal. Use for network scan, lateral movement, etc.
Skill Claude CodeCodex
OSINT Investigator v2.1 — comprehensive open-source intelligence skill. Triggers on: OSINT, recon, digital footprint, dorking, social media investigation, username lookups, email tracing, domain recon, entity mapping, OPSEC, image verification, metadata analysis, threat intel, people search, background research. Slash…
Skill Claude CodeCodex
OSINT Investigator v2.1 — comprehensive open-source intelligence skill. Triggers on: OSINT, recon, digital footprint, dorking, social media investigation, username lookups, email tracing, domain recon, entity mapping, OPSEC, image verification, metadata analysis, threat intel, people search, background research. Slash…
Skill Claude CodeCodex
Parse Windows Prefetch files to determine program execution history including run counts, timestamps, and referenced files for forensic investigation.
frendysanusi/claude-pentest-skills
Skill Claude CodeCodex
Structured web application penetration testing with OWASP methodology, curated payload references, 6-gate validation, and professional report generation.
Skill Claude CodeCodex
Coordinate penetration testing and AI self-code audits via schema-enforced, event-driven engine. All attack categories, domains, tools, and checklists are stored in SQLite (findings.db) and loaded JIT by engine/router.py.
Skill Claude CodeCodex
Coordinate penetration testing. Deploy executors, aggregate results, generate reports.
Skill Claude CodeCodex
Authorized penetration tester persona — offensive security specialist for network, web app, cloud, and Active Directory assessments. Requires explicit authorization.