Skill Claude CodeCodex
Attack SAML SSO via XSW, signature strip, metadata extract.
not rated 1.2k 3d ago C 22 tokens
original MIT
1.2kStars on the repository
147Mods indexed here, across every type
3d agoLast push, which is what freshness is scored on
MITLicence, which decides whether bodies are shown
Skill Claude CodeCodex
Use when two or more verified findings may combine into a higher-impact authorized attack path.
not rated 1.2k 3d ago A 23 tokens
original MIT
Skill Claude CodeCodex
Use when verified WordPress findings may combine into an authorized path to administrative or server control.
not rated 1.2k 3d ago A 23 tokens
original MIT
Skill Claude CodeCodex
Escape Docker containers to host root via 5 techniques.
not rated 1.2k 3d ago F 16 tokens
original MIT
Skill Claude CodeCodex
Use when classifying a verified web or WordPress behavior and selecting a related validation skill.
not rated 1.2k 3d ago A 23 tokens
original MIT
Skill Claude CodeCodex
Compare recon waves to find NEW, REGRESSED, PERSISTENT findings.
not rated 1.2k 3d ago A 21 tokens
original MIT
Skill Claude CodeCodex
High-precision Google dorks for exposed configs, secrets, and credentials -- real-world validated.
not rated 1.2k 3d ago A 24 tokens
original MIT
Skill Claude CodeCodex
7-phase pentest pipeline from passive recon to exploitation.
not rated 1.2k 3d ago A 16 tokens
original MIT
Skill Claude CodeCodex
Use when starting or restructuring an authorized external web and API assessment.
not rated 1.2k 3d ago A 18 tokens
original MIT
Skill Claude CodeCodex
Pick sectors, compile targets, batch recon for campaigns.
not rated 1.2k 3d ago C 17 tokens
original MIT
Skill Claude CodeCodex
Use when an API may expose data or privileged operations without authentication.
not rated 1.2k 3d ago A 19 tokens
original MIT
Skill Claude CodeCodex
Map organization IP infrastructure via ASN, CIDR, TLD expansion, and reverse DNS.
not rated 1.2k 3d ago A 24 tokens
original MIT
cache-attack
13Skill Claude CodeCodex
Poison CDN cache or deceive when X-Cache header is detected.
not rated 1.2k 3d ago A 18 tokens
original MIT
Skill Claude CodeCodex
Identify CMS, frameworks, and server technology stacks on live hosts.
not rated 1.2k 3d ago A 17 tokens
original MIT
Skill Claude CodeCodex
Exploit WP CORS credential reflection for data theft.
not rated 1.2k 3d ago A 17 tokens
original MIT
deep-invade
16Skill Claude CodeCodex
Deep pentest WP: SSRF, plugin CVE, JS mine, port scan chain.
not rated 1.2k 3d ago C 24 tokens
original MIT
Skill Claude CodeCodex
DMARC/SPF/DKIM check, email spoofing, SMTP test, and security header analysis.
not rated 1.2k 3d ago A 23 tokens
original MIT
Skill Claude CodeCodex
Mine errorlog for creds, paths, SQL when leak hunt finds.
not rated 1.2k 3d ago A 19 tokens
original MIT
Skill Claude CodeCodex
Exchange/OWA NTLM AD leak, spray attack when mail subdomain.
not rated 1.2k 3d ago A 22 tokens
original MIT
Skill Claude CodeCodex
Exploit Firebase/Supabase for data via JS config leak probe.
not rated 1.2k 3d ago B 21 tokens
original MIT
Skill Claude CodeCodex
Exploit Flask/Werkzeug debugger exposure for traceback and SECRET leaks.
not rated 1.2k 3d ago B 22 tokens
original MIT
Skill Claude CodeCodex
Find leaked API keys, tokens, and credentials in public GitHub repositories.
not rated 1.2k 3d ago A 20 tokens
original MIT
Skill Claude CodeCodex
Mine GitLab for secrets, CI tokens when subdomain found.
not rated 1.2k 3d ago C 19 tokens
original MIT
Skill Claude CodeCodex
Detect hardcoded passwords in HTML forms, JavaScript, and API responses.
not rated 1.2k 3d ago C 22 tokens
original MIT
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: