Skill Claude CodeCodex
Human-like mouse, keyboard and scroll behavior for behavioral bot bypass.
not rated 1.3k
+26 9d ago A SkillSpector: pass 18 tokens
original MIT
1.3kStars on the repository
147Mods indexed here, across every type
9d agoLast push, which is what freshness is scored on
MITLicence, which decides whether bodies are shown
Skill Claude CodeCodex
Attack cameras via RTSP, ONVIF, Axis config when 554 open.
not rated 1.3k
+26 9d ago A SkillSpector: warn 22 tokens
original MIT
Skill Claude CodeCodex
Analyze JS bundles and source maps for hardcoded secrets, API keys, JWTs, and internal endpoints.
not rated 1.3k
+26 9d ago A SkillSpector: pass 26 tokens
original MIT
jwt-attack
28Skill Claude CodeCodex needs its repo
Decode, forge, brute JWTs when Bearer auth header is seen.
not rated 1.3k
+26 9d ago C SkillSpector: warn 19 tokens
original MIT
Skill Claude CodeCodex
Discover origin IPs behind CDN/WAF via favicon hash, DNS history, and SSL certs.
not rated 1.3k
+26 9d ago A SkillSpector: warn 25 tokens
original MIT
Skill Claude CodeCodex
Chain phpinfo to RCE via exec check when info.php exposed.
not rated 1.3k
+26 9d ago A SkillSpector: warn 20 tokens
original MIT
Skill Claude CodeCodex
Port scan /8-/24 with Masscan+RustScan and nmap banners.
not rated 1.3k
+26 9d ago B SkillSpector: warn 23 tokens
original MIT
Skill Claude CodeCodex
Nmap scan for MySQL, Redis, FTP, SSH, internal API services.
not rated 1.3k
+26 9d ago A SkillSpector: warn 22 tokens
original MIT
Skill Claude CodeCodex
Exploit public bucket Content-Type override for stored XSS on target origin.
not rated 1.3k
+26 9d ago A SkillSpector: pass 24 tokens
original MIT
Skill Claude CodeCodex
Enumerate Hikvision ISAPI endpoints on SCADA and IoT web interfaces.
not rated 1.3k
+26 9d ago C SkillSpector: warn 24 tokens
original MIT
Skill Claude CodeCodex
Mass scan for exposed env files, backups, and git configs.
not rated 1.3k
+26 9d ago C SkillSpector: warn 19 tokens
original MIT
Skill Claude CodeCodex
Hunt staging via crt.sh when production is WAF-hardened.
not rated 1.3k
+26 9d ago C SkillSpector: warn 22 tokens
original MIT
Skill Claude CodeCodex
Launch stealth Chromium with C++ fingerprint patches for anti-bot bypass.
not rated 1.3k
+26 9d ago A SkillSpector: warn 19 tokens
original MIT
Skill Claude CodeCodex
Map subdomains via crt.sh and subfinder at recon kickoff.
not rated 1.3k
+26
changed 7d ago A SkillSpector: warn 19 tokens
original MIT
Skill Claude CodeCodex
Detect and verify subdomain takeover via dangling CNAME to unclaimed services.
not rated 1.3k
+26 9d ago A SkillSpector: warn 23 tokens
original MIT
Skill Claude CodeCodex
Spoof TLS ClientHello and JA4 fingerprints for browser impersonation.
not rated 1.3k
+26 9d ago A SkillSpector: pass 22 tokens
original MIT
Skill Claude CodeCodex
Exploit unauthenticated multi-step API flows without credentials.
not rated 1.3k
+26 9d ago A SkillSpector: warn 20 tokens
original MIT
Skill Claude CodeCodex needs its repo
Discover hidden virtual hosts via Host header fuzzing and SSL certificate parsing.
not rated 1.3k
+26 9d ago B SkillSpector: warn 20 tokens
original MIT
visual-recon
43Skill Claude CodeCodex needs its repo
Screenshot all live hosts for rapid visual triage and technology fingerprinting.
not rated 1.3k
+26 9d ago A SkillSpector: warn 18 tokens
original MIT
Skill Claude CodeCodex
Sensitive file scanning, path traversal bypass, vHost enum, .env extract, log mining, Varnish detect.
not rated 1.3k
+26 9d ago A SkillSpector: warn 28 tokens
original MIT
Skill Claude CodeCodex
Hunt WP plugins via REST, exploit CVEs when version known.
not rated 1.3k
+26 9d ago B SkillSpector: warn 19 tokens
original MIT
Skill Claude CodeCodex
Batch WP recon: users, CORS, XMLRPC, leaks across domains.
not rated 1.3k
+26 9d ago D 22 tokens
original MIT
Skill Claude CodeCodex
Scan WordPress REST API plugin endpoints for unauthenticated state-changing operations — discover write endpoints (POST/PUT/PATCH/DELETE) exposed without auth, enumerate all plugin routes, and test for unauthorized content publishing, settings modification, and data leakage.
not rated 1.3k
+26 9d ago C SkillSpector: warn 57 tokens
original MIT
Skill Claude CodeCodex
Exploit XMLRPC multicall, pingback for brute force and SSRF.
not rated 1.3k
+26 9d ago A SkillSpector: warn 21 tokens
original MIT
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: