Skill Claude CodeCodex
A methodology for finding privilege-escalation paths in AWS Identity and Access Management (IAM), the system that controls access to AWS resources.
261 tagged pentest, measured the same way as everything else here.
Browse within: dictionary 201fuzz 201hacking 201payload 201pentest-tool 106ai-framework 58bounty-hunters 48hackerone 48security-research 48owasp 43cybersecurity 34penetration-testing 31attack-surface-management 26easm 26
Skill Claude CodeCodex
A methodology for finding privilege-escalation paths in AWS Identity and Access Management (IAM), the system that controls access to AWS resources.
Skill Claude Code
An authorized red-team framework for testing systems through stated assumptions. Red teaming is a permitted security exercise that imitates attacks to find weaknesses.
Skill Claude CodeCodex
Perform deep analysis of CVEs and security vulnerabilities including CVSS scoring, affected versions, exploit maturity, and remediation steps. Use when the user needs detailed vulnerability intelligence.
Skill Claude CodeCodex
Binary analysis and reverse engineering workflow using checksec, strings, binwalk, radare2, ropgadget, and gdb for CTF and vulnerability research.
Skill Claude CodeCodex
Supervised authorized pentest: scope, route, validate, report.
sparkfinderoven/r01-hesreallyhim-awesome-claude-code-security
Skill Claude CodeCodex
🔒 Security & Compliance skill suite derived from hesreallyhim/awesome-claude-code. Security audits, vulnerability management, GDPR/SOC2/ISO27001 compliance and incident response. Provides 10 specialised commands for security, compliance, gdpr workflows.
yoanbernabeu/supabase-pentest-skills
Skill Claude CodeCodex
Create a test user (with explicit permission) to audit what authenticated users can access vs anonymous users. Detects IDOR, cross-user access, and privilege escalation.
timenavigatorrage/r16-voltagent-awesome-agent-skills-security
Skill Claude CodeCodex
🔒 Security & Compliance skill suite derived from VoltAgent/awesome-agent-skills. Security audits, vulnerability management, GDPR/SOC2/ISO27001 compliance and incident response. Provides 10 specialised commands for security, compliance, gdpr workflows.
regimentpebblehearth/r09-travisvn-awesome-claude-skills-security
Skill Claude CodeCodex
🔒 Security & Compliance skill suite derived from travisvn/awesome-claude-skills. Security audits, vulnerability management, GDPR/SOC2/ISO27001 compliance and incident response. Provides 10 specialised commands for security, compliance, gdpr workflows.
femtopremiertag/r15-shanraisshan-claude-code-best-practice-security
Skill Claude CodeCodex
🔒 Security & Compliance skill suite derived from shanraisshan/claude-code-best-practice. Security audits, vulnerability management, GDPR/SOC2/ISO27001 compliance and incident response. Provides 10 specialised commands for security, compliance, gdpr workflows.
Pennantpholeap/r18-anthropics-claude-code-security
Skill Claude CodeCodex
🔒 Security & Compliance skill suite derived from anthropics/claude-code. Security audits, vulnerability management, GDPR/SOC2/ISO27001 compliance and incident response. Provides 10 specialised commands for security, compliance, gdpr workflows.
victorsenatorbear59/r12-vincenthopf-my-claude-code-security
Skill Claude CodeCodex
🔒 Security & Compliance skill suite derived from vincenthopf/My-Claude-Code. Security audits, vulnerability management, GDPR/SOC2/ISO27001 compliance and incident response. Provides 10 specialised commands for security, compliance, gdpr workflows.
CraftsmanTuck/r08-composiohq-awesome-claude-skills-security
Skill Claude CodeCodex
🔒 Security & Compliance skill suite derived from ComposioHQ/awesome-claude-skills. Security audits, vulnerability management, GDPR/SOC2/ISO27001 compliance and incident response. Provides 10 specialised commands for security, compliance, gdpr workflows.
TeamArtisanThrive/r03-anthropics-skills-security
Skill Claude CodeCodex
🔒 Security & Compliance skill suite derived from anthropics/skills. Security audits, vulnerability management, GDPR/SOC2/ISO27001 compliance and incident response. Provides 10 specialised commands for security, compliance, gdpr workflows.
DensitySerfRemedy/r05-jqueryscript-awesome-claude-code-security
Skill Claude CodeCodex
🔒 Security & Compliance skill suite derived from jqueryscript/awesome-claude-code. Security audits, vulnerability management, GDPR/SOC2/ISO27001 compliance and incident response. Provides 10 specialised commands for security, compliance, gdpr workflows.
RestraintSound/r19-iannuttall-claude-agents-security
Skill Claude CodeCodex
🔒 Security & Compliance skill suite derived from iannuttall/claude-agents. Security audits, vulnerability management, GDPR/SOC2/ISO27001 compliance and incident response. Provides 10 specialised commands for security, compliance, gdpr workflows.
paintairsever/r07-getbindu-awesome-claude-code-and-skills-security
Skill Claude CodeCodex
🔒 Security & Compliance skill suite derived from GetBindu/awesome-claude-code-and-skills. Security audits, vulnerability management, GDPR/SOC2/ISO27001 compliance and incident response. Provides 10 specialised commands for security, compliance, gdpr workflows.
freewaychameleonnode/r17-behisecc-awesome-claude-skills-security
Skill Claude CodeCodex
🔒 Security & Compliance skill suite derived from BehiSecc/awesome-claude-skills. Security audits, vulnerability management, GDPR/SOC2/ISO27001 compliance and incident response. Provides 10 specialised commands for security, compliance, gdpr workflows.
Skill Claude CodeCodex
Use when the user sends BB:, CTF:, Target:, or Pentest: followed by a domain or IP — activates autonomous JSON-only daemon mode for authorized penetration testing, bug bounty, and CTF challenges.
Skill Claude CodeCodex
Generate AK47 plugin YAML from vulnerability details using the official syntax docs. Use this skill for plugin authoring, conversion, or refinement.
Skill Claude CodeCodex
Authorized penetration tester persona — offensive security specialist for network, web app, cloud, and Active Directory assessments. Requires explicit authorization.
Skill Claude CodeCodex
Use when operating the vigolium CLI for web vulnerability scanning, security testing, or traffic analysis. Covers scanning a URL/spec/raw request, running AI agent scans (autopilot, swarm, audit, query), triaging findings, confirming them with replay/fuzz, handing off to Burp or Caido, browsing stored traffic, writing…
Skill Codex
Operate BurpSuite MCP Bridge for professional, authorized web testing. Use when Codex needs to inspect Burp live/history/logger/selection traffic, prioritize one target, retrieve a decisive request/response, intercept and edit a request or response before forwarding, replay one controlled mutation, manage temporary…
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: