wgpsec/AboutSecurity

Everything for pentest. | A penetration testing knowledge base that captures security methodologies in an AI Agent-executable format.

This repository also configures its own agents. See what AboutSecurity tells them →

1.7kStars on the repository
200Mods indexed here, across every type
8d agoLast push, which is what freshness is scored on
noneNo LICENSE: all rights reserved, so bodies are not copied

ftp-pentesting

97

wgpsec/AboutSecurity

Skill Claude CodeCodex

A guide to assessing FTP, an older protocol for transferring files between computers.

not rated 1.7k +7 8d ago B 106 tokens

imap-pentesting

98

wgpsec/AboutSecurity

Skill Claude CodeCodex

A security-testing guide for IMAP, an email protocol that lets users view and manage messages stored on a mail server. It covers service discovery, login testing, mailbox enumeration, message downloads, and command injection.

not rated 1.7k +7 8d ago A SkillSpector: warn 105 tokens

kafka-attack

99

wgpsec/AboutSecurity

Skill Claude CodeCodex

A security-testing guide for Apache Kafka, a system that stores and distributes streams of messages between applications. It focuses on brokers, topics, connectors, schemas, and access controls.

not rated 1.7k +7 8d ago A SkillSpector: warn 110 tokens

kerberos-pentesting

100

wgpsec/AboutSecurity

Skill Claude CodeCodex

A security-testing guide for Kerberos, an authentication system used to verify users and services, especially in Windows domains. It covers finding accounts, requesting authentication tickets, and testing ticket-based attacks.

not rated 1.7k +7 8d ago B 105 tokens

ldap-pentesting

101

wgpsec/AboutSecurity

Skill Claude CodeCodex

A security-testing guide for LDAP, a directory service used to store information about users, groups, computers, and organisational units. It also covers Active Directory, Microsoft's directory system for Windows networks.

not rated 1.7k +7 8d ago B 120 tokens

memcache-pentesting

102

wgpsec/AboutSecurity

Skill Claude CodeCodex

A security-testing guide for Memcached, an in-memory cache that applications use to store temporary data for faster access. It covers unauthorised access, cache extraction, amplification risks, and known vulnerabilities.

not rated 1.7k +7 8d ago B 94 tokens

mongodb-attack

103

wgpsec/AboutSecurity

Skill Claude CodeCodex

A security-testing guide for MongoDB, a document database that stores data in flexible records instead of traditional tables. It covers unauthorised access, database enumeration, NoSQL injection, script execution, and file extraction.

not rated 1.7k +7 8d ago A SkillSpector: warn 109 tokens

mssql-pentesting

104

wgpsec/AboutSecurity

Skill Claude CodeCodex

A security-testing guide for Microsoft SQL Server, a database system used by many business applications. It covers discovery, authentication checks, database enumeration, command execution, linked servers, and privilege escalation.

not rated 1.7k +7 8d ago B 115 tokens

mysql-pentesting

105

wgpsec/AboutSecurity

Skill Claude CodeCodex

A security-testing guide for MySQL, a database server commonly used by web applications. It covers finding the service, checking access controls, listing database contents, and testing ways it could be abused.

not rated 1.7k +7 8d ago C 116 tokens

pop-pentesting

106

wgpsec/AboutSecurity

Skill Claude CodeCodex

A security-testing guide for POP3, an email protocol used to retrieve messages from a mail server. It covers service discovery, login testing, message extraction, and known vulnerabilities.

not rated 1.7k +7 8d ago A SkillSpector: warn 94 tokens

postgresql-attack

107

wgpsec/AboutSecurity

Skill Claude CodeCodex

A security-testing guide for PostgreSQL, a relational database used to store structured application data. It covers unauthorised access, database enumeration, SQL injection, file access, command execution, and privilege escalation.

not rated 1.7k +7 8d ago C 117 tokens

postgresql-pentesting

108

wgpsec/AboutSecurity

Skill Claude CodeCodex

A guide to assessing PostgreSQL, a relational database system, for weak authentication, excessive permissions, and paths from the database to the host.

not rated 1.7k +7 8d ago B 110 tokens

rdp-pentesting

109

wgpsec/AboutSecurity

Skill Claude CodeCodex

A guide to testing RDP, Windows' remote desktop service, for weak authentication, session security, and known vulnerabilities.

not rated 1.7k +7 8d ago A SkillSpector: warn 105 tokens

redis-attack

110

wgpsec/AboutSecurity

Skill Claude CodeCodex

A guide to exploiting Redis when it has no authentication or a weak password, including attempts to access data or run commands on the host.

not rated 1.7k +7 8d ago A SkillSpector: warn 106 tokens

redis-pentesting

111

wgpsec/AboutSecurity

Skill Claude CodeCodex

A guide to testing Redis, an in-memory data store, for missing authentication and ways its access could affect the host system.

not rated 1.7k +7 8d ago A SkillSpector: warn 98 tokens

smb-pentesting

112

wgpsec/AboutSecurity

Skill Claude CodeCodex

A guide to assessing SMB/CIFS, the Windows file- and printer-sharing service, for exposed shares, weak access controls, and known vulnerabilities.

not rated 1.7k +7 8d ago B 126 tokens

smtp-pentesting

113

wgpsec/AboutSecurity

Skill Claude CodeCodex

A guide to testing SMTP, the service that sends and receives email, for configuration and security weaknesses.

not rated 1.7k +7 8d ago A SkillSpector: warn 130 tokens

snmp-pentesting

114

wgpsec/AboutSecurity

Skill Claude CodeCodex

A guide to assessing SNMP, a protocol used to monitor and manage network devices, for exposed information and unsafe write access.

not rated 1.7k +7 8d ago B 124 tokens

sqlserver-attack

115

wgpsec/AboutSecurity

Skill Claude CodeCodex

A guide to testing Microsoft SQL Server installations for security weaknesses, including exposed access, database contents, and paths to operating-system command execution.

not rated 1.7k +7 8d ago A SkillSpector: warn 112 tokens

ssh-pentesting

116

wgpsec/AboutSecurity

Skill Claude CodeCodex

A guide to assessing SSH, the secure service commonly used for remote terminal access, for authentication and configuration weaknesses.

not rated 1.7k +7 8d ago C 128 tokens

vnc-pentesting

117

wgpsec/AboutSecurity

Skill Claude CodeCodex

A guide to assessing VNC, a remote desktop service, for weak or missing authentication and known vulnerabilities.

not rated 1.7k +7 8d ago A SkillSpector: warn 104 tokens

voip-pentesting

118

wgpsec/AboutSecurity

Skill Claude CodeCodex

A penetration-testing guide for VoIP and SIP systems, which carry internet-based voice calls and signalling.

not rated 1.7k +7 8d ago B 121 tokens

winrm-pentesting

119

wgpsec/AboutSecurity

Skill Claude CodeCodex

A penetration-testing guide for WinRM, a Windows service that allows remote management and command execution over the network.

not rated 1.7k +7 8d ago B 108 tokens

api-fuzz

120

wgpsec/AboutSecurity

Skill Claude CodeCodex

A security-testing guide for REST and GraphQL APIs, including endpoint discovery, authentication checks, permission boundaries, and targeted input testing.

not rated 1.7k +7 8d ago A SkillSpector: pass 147 tokens

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: