pentest skills

261 tagged pentest, measured the same way as everything else here.

Browse within: dictionary 201fuzz 201hacking 201payload 201pentest-tool 106ai-framework 58bounty-hunters 48hackerone 48security-research 48owasp 43cybersecurity 34penetration-testing 31attack-surface-management 26easm 26

aws-iam-privesc

01

wgpsec/AboutSecurity

Skill Claude CodeCodex

A methodology for finding privilege-escalation paths in AWS Identity and Access Management (IAM), the system that controls access to AWS resources.

not rated 1.8k +14 changed today F ✓ AI review SkillSpector: warn 104 tokens

pentest-redteam

02

0rangec3t/Black-cat

Skill Claude Code

An authorized red-team framework for testing systems through stated assumptions. Red teaming is a permitted security exercise that imitates attacks to find weaknesses.

not rated 324 +5 2mo ago A 41 tokens

oasm-platform/open-asm

Skill Claude CodeCodex

Perform deep analysis of CVEs and security vulnerabilities including CVSS scoring, affected versions, exploit maturity, and remediation steps. Use when the user needs detailed vulnerability intelligence.

not rated 238 +12 yesterday A 37 tokens GPL-3.0

binary-analysis

04

CommonHuman-Lab/nyxstrike

Skill Claude CodeCodex

Binary analysis and reverse engineering workflow using checksec, strings, binwalk, radare2, ropgadget, and gdb for CTF and vulnerability research.

not rated 155 +2 2d ago A 35 tokens

pentest

05

Strategic-Automation/violin

Skill Claude CodeCodex

Supervised authorized pentest: scope, route, validate, report.

not rated 151 +2 changed 2d ago A SkillSpector: pass 17 tokens original MIT

yoanbernabeu/supabase-pentest-skills

Skill Claude CodeCodex

Create a test user (with explicit permission) to audit what authenticated users can access vs anonymous users. Detects IDOR, cross-user access, and privilege escalation.

not rated 69 8mo ago A Socket: passSnyk: fail 40 tokens

TeamArtisanThrive/r03-anthropics-skills-security

Skill Claude CodeCodex

🔒 Security & Compliance skill suite derived from anthropics/skills. Security audits, vulnerability management, GDPR/SOC2/ISO27001 compliance and incident response. Provides 10 specialised commands for security, compliance, gdpr workflows.

not rated 48 5mo ago A 58 tokens

ouroboros-pentest

19

g4sk0/mergen-mcp

Skill Claude CodeCodex

Use when the user sends BB:, CTF:, Target:, or Pentest: followed by a domain or IP — activates autonomous JSON-only daemon mode for authorized penetration testing, bug bounty, and CTF challenges.

not rated 16 7mo ago A 47 tokens original MIT

99999G/AK47

Skill Claude CodeCodex

Generate AK47 plugin YAML from vulnerability details using the official syntax docs. Use this skill for plugin authoring, conversion, or refinement.

not rated 16 +5 2mo ago C 32 tokens original MIT

penetration-tester

21

chandrudp29/skillhub

Skill Claude CodeCodex

Authorized penetration tester persona — offensive security specialist for network, web app, cloud, and Active Directory assessments. Requires explicit authorization.

not rated 14 3mo ago A 30 tokens original MIT

vigolium-scanner

22

vigolium/skills

Skill Claude CodeCodex

Use when operating the vigolium CLI for web vulnerability scanning, security testing, or traffic analysis. Covers scanning a URL/spec/raw request, running AI agent scans (autopilot, swarm, audit, query), triaging findings, confirming them with replay/fuzz, handing off to Burp or Caido, browsing stored traffic, writing…

not rated 9 changed 23d ago A 136 tokens

6jeffr3y/burpsuite-mcp-bridge

Skill Codex

Operate BurpSuite MCP Bridge for professional, authorized web testing. Use when Codex needs to inspect Burp live/history/logger/selection traffic, prioritize one target, retrieve a decisive request/response, intercept and edit a request or response before forwarding, replay one controlled mutation, manage temporary…

not rated 4 3d ago A 92 tokens

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: