web security skills

0dayInc/pwn

Skill Claude CodeCodex

Exhaustively test a target against every applicable CWE.

0dayInc/pwn

Skill Claude CodeCodex

Drive extroosint with the right kind, feeds, pivots, and keys.

0dayInc/pwn

Skill Claude CodeCodex

Run a scoped pentest with NmapIt, Burp, Metasploit, and a written report.

vigolium/skills

Skill Claude CodeCodex

Use when operating the vigolium CLI for web vulnerability scanning, security testing, or traffic analysis. Covers scanning a URL/spec/raw request, running AI agent scans (autopilot, swarm, audit, query), triaging findings, confirming them with replay/fuzz, handing off to Burp, browsing stored traffic, writing…

galact-byte/galact-Skills

Skill Claude CodeCodex

A security-testing guide for finding command injection, where user input is treated as part of an operating-system command or an external program's arguments. It covers web applications, APIs, and continuous-integration systems in authorized tests.

galact-byte/galact-Skills

Skill Claude CodeCodex

A security-testing skill for checking whether Node.js's built-in permission controls can be bypassed. It covers the current permission model and older policy files.

galact-byte/galact-Skills

Skill Claude CodeCodex

A security-testing triage guide for identifying a target’s attack surface—the features and components that could be exposed to attack—and choosing suitable tests.

kings0527/web-reverse-engineering-skill

Skill Claude CodeCodex

A guide to analyzing how websites work in the browser, including their JavaScript, network requests, and anti-automation protections.

withcrux/agentHack-skills

Skill Claude CodeCodex

Analyze JSON Web Tokens (JWTs) for common security vulnerabilities including algorithm confusion attacks (RS256 to HS256), none algorithm bypass, weak secret brute-forcing, and claim manipulation. Practice in isolated lab environments to understand authentication bypass and privilege escalation via token forgery.

withcrux/agentHack-skills

Skill Claude CodeCodex

Detect reflected, stored, and DOM-based Cross-Site Scripting (XSS) vulnerabilities in web applications using manual payloads and browser-based analysis inside isolated lab environments. Covers OWASP A03 injection and sanitization bypass.