211 tagged offensive security, measured the same way as everything else here.
Browse within: bug-bounty 124pentesting 82ai-security 58red-teaming 58redteam 43cloud-security 41firebase-hacking 41hermes-agent 41jwt-attacks 41ctf 33claude-code-skills 30exploit-development 30recon 27penetration-testing 19
Skill Claude CodeCodex
Triage and steward issues in BT6 research and support repositories, deciding whether to answer, reproduce, correct evidence, link work, design a feature, route security, implement, or close.
Skill Claude CodeCodex
Run an explicitly authorized, conservative BT6 merge train that processes validated pull requests one at a time and reconciles repository, CI, evidence, and issue state after each merge.
Skill Claude CodeCodex
Audit the full pull-request and issue queue of a BT6 research or support repository, classifying readiness, evidence risk, and next action without mutating tracker state.
Skill Claude CodeCodex
Mine errorlog for creds, paths, SQL when leak hunt finds.
Skill Claude CodeCodex
Exploit XMLRPC multicall, pingback for brute force and SSRF.
Skill Claude CodeCodex
Use when a bounded list of authorized API endpoints needs consistent CORS triage before browser validation.
hypnguyen1209/offensive-claude
Skill Claude CodeCodex
Use when writing security tooling, exploits, scanners, or C2 in Python/C/Go/Rust/ASM — systems & network programming, automation, cryptography implementation.
hypnguyen1209/offensive-claude
Skill Claude CodeCodex
Use when bypassing EDR/AV to run a payload — hook unhooking, direct/indirect syscalls, PPID spoofing, process injection, AMSI bypass, ETW patching, memory/sleep encryption, behavioral evasion.
hypnguyen1209/offensive-claude
Skill Claude CodeCodex
Use when writing position-independent shellcode or a loader — PEB walking, API hashing, null-byte avoidance, encoders, loaders, PE-to-shellcode conversion, cross-platform shellcode.
Skill Claude CodeCodex
Use when testing for race conditions, single-packet attacks, TOCTOU vulnerabilities, limit-bypass via concurrent requests, coupon/voucher reuse, double-spend, rate limit bypass, or parallel request timing attacks. Also use when the user says "race condition", "single packet attack", "concurrent requests", "double…
Skill Claude CodeCodex
Use when hunting for secrets, API keys, tokens, or credentials on a pentest target, running phase 2 of an engagement, scanning JS files for hardcoded secrets, or running trufflehog/gitleaks. Also use when the user says "run secrets", "hunt secrets", or "phase 2".
Skill Claude CodeCodex
Use when aggregating pentest findings across all phases, clustering vulnerabilities by severity, prioritizing findings for a report, or surfacing the top actionable issues from a completed scan. Also use when the user says "triage", "aggregate findings", or "what did we find".
Skill Claude CodeCodex
Activate this skill whenever the user mentions API endpoint, REST API, RESTful, GraphQL, GraphQL introspection, GraphQL mutation, gRPC, gRPC reflection, WebSocket, WebSocket upgrade, WS endpoint, API security, API fuzzing, API enumeration, API versioning, API gateway, API rate limit, JWT, JSON Web Token, bearer token…
Skill Claude CodeCodex
This skill should be used when the user mentions "payment", "payment gateway", "checkout", "IDOR payment", "payment bypass", "Stripe", "MercadoPago", "Binance Pay", "PIX", "PayPal", "Adyen", "Braintree", "Square", "Razorpay", "Mollie", "webhook", "payment webhook", "price manipulation", "amount tampering", "currency…
Skill Claude CodeCodex
This skill should be used when the user mentions "generate report", "pentest report", "engagement report", "findings report", "executive summary", "technical report", "vulnerability report", "remediation report", "remediation plan", "retest report", "write up findings", "document findings", "report findings", "create…
Skill Claude CodeCodex
Autonomous offensive security pipeline. Use when the user wants to hunt bugs, run pentests, do recon, or manage huntbot targets. Triggers on security testing, bug bounty, vulnerability scanning, or any mention of huntbot commands.
HankLEE-1/security-skills-consolidated
Skill Claude CodeCodex
A security skill for information gathering and reconnaissance, including passive research, active probing, and common Google search operators. Reconnaissance means collecting information about a target before security testing.
HankLEE-1/security-skills-consolidated
Skill Claude CodeCodex
A guide to reverse engineering, the practice of examining software to understand how it works, using tools such as radare2.
HankLEE-1/security-skills-consolidated
Skill Claude CodeCodex
A malware-analysis guide covering the process of examining harmful software, including static analysis and basic information about Windows PE files, the format used by many Windows programs.
vigilantshield/Claude-HunterKit
Skill Claude CodeCodex
Business logic vulnerability testing for web/mobile/API engagements. Covers workflow bypass, state machine violations, multi-step process abuse, price/quantity/discount manipulation, currency confusion, coupon stacking, refund/chargeback abuse, race conditions on logic boundaries, parameter tampering for hidden flows…
vigilantshield/Claude-HunterKit
Skill Claude CodeCodex
IDOR (Insecure Direct Object Reference) testing checklist: object ID enumeration, horizontal/vertical privilege escalation, GUID predictability, indirect references via hashes, chained IDOR, and API endpoint IDOR. Use for web app pentests and bug bounty IDOR discovery.
vigilantshield/Claude-HunterKit
Skill Claude CodeCodex
GraphQL security testing checklist: introspection abuse, batching attacks, query depth/complexity DoS, field suggestion enumeration, IDOR via GraphQL, injection through arguments, authorization bypass. Use when assessing GraphQL endpoints in web app tests or bug bounty.
Skill Claude CodeCodex
Cryptography CTF attacks: RSA, AES, ECC, PRNG, hash length-extension, padding oracles, lattice/LWE/CVP, HNP, Coppersmith, Pollard, Wiener, ZKP/Circom/halo2, post-quantum KEM. Dispatch on prime shape, oracle type, or scheme artefact.
Skill Claude CodeCodex
Web exploitation: SQLi, XSS, SSTI, SSRF, CSRF, XXE, JWT, OAuth/OIDC, SAML, prototype pollution, file-upload/path-traversal, HTTP smuggling, cache poisoning, Web3/Solidity, auth/parser differentials. Dispatch on manifest + framework signals.