Everything for pentest. | A penetration testing knowledge base that captures security methodologies in an AI Agent-executable format.
This repository also configures its own agents. See what AboutSecurity tells them →
Skill Claude CodeCodex
A guide to Kerberoasting and AS-REP Roasting, techniques for requesting or capturing Active Directory authentication data and cracking it offline. Active Directory is Microsoft's system for managing users, computers, and access in a Windows domain.
Skill Claude CodeCodex
A collection of advanced techniques for attacking Kerberos, the authentication protocol commonly used by Windows domains. It goes beyond basic ticket-cracking and delegation attacks.
Skill Claude CodeCodex
A guide to moving from one compromised computer to another by using passwords, hashes, keys, or authentication tickets. This is called lateral movement in security testing.
Skill Claude CodeCodex
A guide to moving through segmented networks by building proxies, tunnels, and port forwards across multiple hosts and firewalls.
Skill Claude CodeCodex
A guide to poisoning or impersonating network services to trick devices into sending authentication data or accepting an attacker as an intermediary.
Skill Claude CodeCodex
A guide to NTLM relay attacks, in which authentication messages are captured and forwarded to another service to act as the victim. NTLM is an older Windows authentication protocol.
Skill Claude CodeCodex
A guide to exploiting vulnerabilities in Chinese enterprise office and internal-network systems, including Seeyon, Weaver, Yonyou, Landray, and others. These office systems commonly handle internal business workflows and data.
Skill Claude CodeCodex
A guide to assessing Microsoft SCCM, also called MECM or Configuration Manager, which centrally manages Windows computers, software, and deployment tasks.
Skill Claude CodeCodex
A guide to extracting and examining configuration details from Cobalt Strike, Sliver, or Havoc command-and-control samples, memory dumps, and traffic. Command-and-control systems let an attacker remotely operate compromised machines.
Skill Claude CodeCodex
A guide to analysing suspected malware in Windows, Linux, or Apple executable files, as well as malicious code found in memory dumps. It combines examining files without running them, observing them while they run, reverse engineering, and collecting indicators of compromise.
Skill Claude CodeCodex
A guide to implementing techniques that make malicious software harder for automated sandboxes to analyse. A sandbox is an isolated environment that runs suspicious programs for observation.
Skill Claude CodeCodex
A guide to testing Android apps from their install packages and while they run. It covers code and manifest inspection, runtime instrumentation, network traffic, stored data, app components, WebViews, and device-protection checks.
Skill Claude CodeCodex
A research guide for examining iOS operating-system components, including kernel files, with virtual devices, jailbroken phones, emulators, and binary comparison tools. Corellium is a cloud service that can run virtual iOS devices.
Skill Claude CodeCodex
A guide to choosing devices and tools for testing iPhone and iPad apps. It compares jailbroken and non-jailbroken devices, injected testing tools, and the Xcode Simulator, which runs iOS apps on a Mac.
Skill Claude CodeCodex
A post-compromise guide to keeping access to Linux and Windows systems, including through web applications. It describes methods involving scheduled tasks, services, startup settings, SSH keys, registry entries, WMI, and web shells.
Skill Claude CodeCodex
A post-compromise guide for Linux systems after a shell has been obtained through methods such as remote code execution, a web shell, or SSH. It covers finding higher privileges, credentials, and paths to other systems.
Skill Claude CodeCodex
A post-compromise guide for Windows systems after access is gained through remote code execution, a web shell, or Remote Desktop. It covers system discovery, privilege increases, credential extraction, and domain reconnaissance.
Skill Claude CodeCodex
A security-testing guide for Argo CD, a tool that deploys Kubernetes applications from Git repositories. It covers attacks involving its API, login systems, Redis cache, webhooks, and application deployments.
Skill Claude CodeCodex
A security-testing guide for Concourse CI, a system that runs automated build and deployment pipelines. It covers ways to inspect and attack exposed Concourse servers, pipelines, workers, and stored credentials.
Skill Claude CodeCodex
A guide to testing database services such as Redis, Microsoft SQL Server, PostgreSQL, MySQL, and MongoDB.
Skill Claude CodeCodex
A guide to testing Harbor, a private registry that stores and distributes container images.
Skill Claude CodeCodex
A guide to testing web middleware and application servers such as Tomcat, WebLogic, JBoss, IIS, Nginx, and Apache.
Skill Claude CodeCodex
A guide to testing Portainer, a web interface for managing Docker and other container environments.
Skill Claude CodeCodex
A guide to testing RabbitMQ message brokers for unauthorized access and misuse. RabbitMQ is software that stores and routes messages between applications.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: