web-security skills

281 tagged web-security, measured the same way as everything else here.

Browse within: penetration-testing 254reverse-engineering 235bugbounty 234fuzzing 234reconnaissance 234owasp 19skill-md 16bug-hunting 14burpsuite 12Web Vulnerabilities 11XSS 8RCE 6ai-for-cybersecurity 6javascript 6

osint

01

0dayInc/pwn

Skill Claude Code

Drive extroosint with the right kind, feeds, pivots, and keys.

not rated 86 +1 today A SkillSpector: pass 21 tokens original MIT

vigolium-scanner

02

vigolium/skills

Skill Claude CodeCodex

Use when operating the vigolium CLI for web vulnerability scanning, security testing, or traffic analysis. Covers scanning a URL/spec/raw request, running AI agent scans (autopilot, swarm, audit, query), triaging findings, confirming them with replay/fuzz, handing off to Burp or Caido, browsing stored traffic, writing…

not rated 9 changed 23d ago A 136 tokens

agent-workflow

03

galact-byte/galact-Skills

Skill Claude CodeCodex

Use when an agent must decide whether to proceed autonomously, ask for clarification, request approval, or select an appropriate verification scope for a coding or documentation task.

not rated 7 changed 1mo ago A 35 tokens

withcrux/agentHack-skills

Skill Claude CodeCodex

Analyze JSON Web Tokens (JWTs) for common security vulnerabilities including algorithm confusion attacks (RS256 to HS256), none algorithm bypass, weak secret brute-forcing, and claim manipulation. Practice in isolated lab environments to understand authentication bypass and privilege escalation via token forgery.

not rated 5 6mo ago A 62 tokens

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: