276 tagged pentest, measured the same way as everything else here.
Browse within: pentest-tool 100payload 61dictionary 60fuzz 60hacking 60ai-framework 58bounty-hunters 42hackerone 42security-research 42owasp 41cybersecurity 37penetration-testing 31attack-surface-management 26easm 26
Skill Claude CodeCodex
Use this skill whenever the user asks to add, absorb, migrate, port, update, merge, compare, or extract security knowledge into the AboutSecurity repository from any external resource such as InternalAllTheThings, blog posts, tools, docs, PRs, screenshots, notes, or URLs. This skill SOPs the full workflow: first…
Skill Claude CodeCodex
A methodology for moving from a compromised Azure or Entra ID cloud account into an on-premises Active Directory network. Active Directory is commonly used to manage users and computers inside an organization.
Skill Claude CodeCodex
A playbook for moving from Google Cloud Platform (GCP) into Google Workspace, the suite containing services such as Gmail, Drive, Calendar, and administration tools.
Skill Claude CodeCodex
Threat Intelligence Report Design System — ReportLab-based PDF generation for A4 reports with Transilience branding, typography, and layout standards.
Skill Claude CodeCodex
Evidence-safe firewall ruleset audit reference specification — 22 documented detector patterns (17 vendor-agnostic plus 5 FortiGate-specific), a 15-check semantic catalogue, CIS Fortinet FortiGate Benchmark guidance, a custom customer-policy benchmark, and consolidated network-team Excel profiles including grouped…
Skill Claude CodeCodex
Run a professional penetration engagement OR a network vulnerability scan from a scope. WEB mode (apex domains / app URLs) — mandatory surface expansion, systematic OWASP attack-class coverage, reversible active exploitation, authoritative validation, Transilience PDF. NETWORK mode (a list of IPs/CIDRs, e.g. 1500…
Skill Claude CodeCodex
An authorized red-team framework for testing systems through stated assumptions. Red teaming is a permitted security exercise that imitates attacks to find weaknesses.
Skill Claude CodeCodex
Anti-slop frontend skill for landing pages, portfolios, and redesigns. The agent reads the brief, infers the right design direction, and ships interfaces that do not look templated. Real design systems when applicable, audit-first on redesigns, strict pre-flight check.
Skill Claude CodeCodex
Upgrades existing websites and apps to premium quality. Audits current design, identifies generic AI patterns, and applies high-end design standards without breaking functionality. Works with any CSS framework or vanilla CSS.
Skill Claude CodeCodex
Manages shadcn components and projects — adding, searching, fixing, debugging, styling, and composing UI. Provides project context, component docs, and usage examples. Applies when working with shadcn/ui, component registries, presets, --preset codes, or any project with a components.json file. Also triggers for…
Skill Claude CodeCodex
Binary analysis and reverse engineering workflow using checksec, strings, binwalk, radare2, ropgadget, and gdb for CTF and vulnerability research.
Skill Claude CodeCodex
Cloud and container security auditing workflow using prowler, trivy, kube-hunter, and docker-bench for AWS, GCP, Azure, Kubernetes, and container images.
Skill Claude CodeCodex
Exploitation workflow using Metasploit, msfvenom payload generation, and Exploit-DB search — from vulnerability identification to shell.
incogbyte/android-reverse-engineering-claude-skill
Skill Claude CodeCodex
Decompile Android APK, XAPK, AAB, DEX, JAR, and AAR files using jadx or Fernflower/Vineflower. Reverse engineer Android apps, extract HTTP API endpoints (Retrofit, OkHttp, Volley, GraphQL, WebSocket), trace call flows from UI to network layer, analyze security patterns (cert pinning, exposed secrets, Android Fragment…
Skill Claude CodeCodex
Test identity, authentication, authorization, and sessions.
Skill Claude CodeCodex
Supervised authorized pentest: scope, route, validate, report.
Skill Claude CodeCodex
Web application testing: injection and client-side flaws.
sparkfinderoven/r01-hesreallyhim-awesome-claude-code-security
Skill Claude CodeCodex
🔒 Security & Compliance skill suite derived from hesreallyhim/awesome-claude-code. Security audits, vulnerability management, GDPR/SOC2/ISO27001 compliance and incident response. Provides 10 specialised commands for security, compliance, gdpr workflows.
Skill Claude CodeCodex
Security-focused command execution techniques for penetration testing. Use this skill when executing system commands during authorized security assessments. Covers Windows and Linux command execution, common security testing commands, and best practices for avoiding detection.
yoanbernabeu/supabase-pentest-skills
Skill Claude CodeCodex
Test Row Level Security (RLS) policies for common bypass vulnerabilities and misconfigurations.
yoanbernabeu/supabase-pentest-skills
Skill Claude CodeCodex
Create a test user (with explicit permission) to audit what authenticated users can access vs anonymous users. Detects IDOR, cross-user access, and privilege escalation.
yoanbernabeu/supabase-pentest-skills
Skill Claude CodeCodex
Discover and test Supabase Edge Functions for security vulnerabilities and misconfigurations.
timenavigatorrage/r16-voltagent-awesome-agent-skills-security
Skill Claude CodeCodex
🔒 Security & Compliance skill suite derived from VoltAgent/awesome-agent-skills. Security audits, vulnerability management, GDPR/SOC2/ISO27001 compliance and incident response. Provides 10 specialised commands for security, compliance, gdpr workflows.
regimentpebblehearth/r09-travisvn-awesome-claude-skills-security
Skill Claude CodeCodex
🔒 Security & Compliance skill suite derived from travisvn/awesome-claude-skills. Security audits, vulnerability management, GDPR/SOC2/ISO27001 compliance and incident response. Provides 10 specialised commands for security, compliance, gdpr workflows.