437 tagged penetration-testing, measured the same way as everything else here.
Browse within: web-security 254bugbounty 245reverse-engineering 236fuzzing 235reconnaissance 234mcp-server 98mcp-tools 87cybersecurity 65owasp 32pentest 31api-security 30mitre-attack 30incident-response 27offensive-security 26
Skill Claude CodeCodex
Security-test a REST, GraphQL, or gRPC API with Strix — autonomous agents that enumerate endpoints from an OpenAPI/GraphQL schema (or by crawling), then actually exploit the API-specific vulnerability classes in the OWASP API Security Top 10 (2023) — broken object-level authorization (BOLA/IDOR), broken object…
Skill Claude Code
Supabase / PostgREST Row-Level-Security playbook — pull the anon (or leaked servicerole) key out of the frontend JS, map tables from the auto-generated OpenAPI spec, test anonymous RLS READ disclosures (PII/secret leaks), and anonymous RLS WRITE abuse (insert/update/delete — e.g. forging…
Skill Claude CodeCodex
Compact operational boundary policy for durable red-team workflows. It does not route domains or decide workflow completion.
Skill Claude CodeCodex
Cross-site scripting skill vision validation.
Skill Claude Code
Execute authorized penetration testing via Kali Linux CLI tools over SSH or Docker. Covers: information gathering, vulnerability analysis, sniffing & spoofing, web/API testing, exploitation, password attacks, wireless, cloud-native security, RFID/NFC, VoIP/ICS, reverse engineering, forensics, post-exploitation/C2, and…
Skill Claude CodeCodex
Supervised authorized pentest: scope, route, validate, report.
Skill Claude Code
Drive extroosint with the right kind, feeds, pivots, and keys.
yoanbernabeu/supabase-pentest-skills
Skill Claude CodeCodex
Create a test user (with explicit permission) to audit what authenticated users can access vs anonymous users. Detects IDOR, cross-user access, and privilege escalation.
frendysanusi/claude-pentest-skills
Skill Claude CodeCodex
Structured web application penetration testing with OWASP methodology, curated payload references, 6-gate validation, and professional report generation.
Correia-jpv/fucking-awesome-web-security
Skill Claude Code
Looks up curated web security learning resources (XSS, SQLi, CSRF, SSRF, OAuth/JWT, deserialization, SAML, recon, evasion, defensive tooling, CTF). Filters by topic, difficulty, language, and resource type. Returns top references with archive fallbacks. Defensive and educational use only.
Skill Claude CodeCodex
Name: capybara-nexus-v2 Tier: Frontier (Capybara-class) Mandate: Autonomous Reasoning, Empirical Feedback, & Zero-Day Research.
HankLEE-1/security-skills-consolidated
Skill Claude CodeCodex
A guide to reverse engineering, the practice of examining software to understand how it works, using tools such as radare2.
Skill Claude CodeCodex
Advanced UI analysis and interaction through pixel-level reasoning to solve complex interaction problems, locate hard-to-find elements, verify visual states, and debug layout/rendering issues. Use as needed after UI Mapper inspection when advanced reasoning or non-standard views are required.
Skill Claude CodeCodex
Reverse engineers iOS applications using Frida dynamic instrumentation to understand internal logic, extract encryption keys, bypass security controls, and discover hidden functionality without source code access. Use when performing authorized iOS penetration testing, analyzing proprietary protocols, understanding…
Skill Claude CodeCodex
Production-grade red-team security audit skill for AI coding assistants. Audits codebases for OWASP Top 10 vulnerabilities, auth flaws, IDOR, XSS, SSRF, JWT misuse, Supabase policies, and provides drop-in secure code replacements with zero exfiltration risk.
Skill Claude Code
Full-spectrum web application Vulnerability Assessment and Penetration Testing (VAPT). Automates reconnaissance, scanning, injection testing, authentication analysis, and report generation. Supports --mode pro (terse) and --mode dev (educational). Enforces authorization gate before any active testing.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: