wgpsec/AboutSecurity

Everything for pentest. | A penetration testing knowledge base that captures security methodologies in an AI Agent-executable format.

This repository also configures its own agents. See what AboutSecurity tells them →

1.7kStars on the repository
200Mods indexed here, across every type
8d agoLast push, which is what freshness is scored on
noneNo LICENSE: all rights reserved, so bodies are not copied

servicemesh-tactics

193

wgpsec/AboutSecurity

Skill Claude CodeCodex

A guide to testing service meshes such as Istio and Linkerd, which control communication between services in a container platform.

not rated 1.7k +12 8d ago A SkillSpector: warn 124 tokens

sonarqube-tactics

194

wgpsec/AboutSecurity

Skill Claude CodeCodex

A guide to testing SonarQube, a platform that reviews source code for bugs and security issues.

not rated 1.7k +12 8d ago A SkillSpector: warn 132 tokens

terraform-tactics

195

wgpsec/AboutSecurity

Skill Claude CodeCodex

A guide to testing Terraform projects and state files. Terraform is a tool that describes and manages cloud infrastructure through code.

not rated 1.7k +12 8d ago A SkillSpector: warn 117 tokens

tool-delivery

196

wgpsec/AboutSecurity

Skill Claude CodeCodex

A collection of methods for transferring tools and files to Linux or Windows machines you already control through a shell or remote command.

not rated 1.7k +12 8d ago A SkillSpector: warn 167 tokens

js-api-extract

197

wgpsec/AboutSecurity

Skill Claude CodeCodex

A method for reading JavaScript files used by web applications to find hidden API addresses, keys, internal hostnames, and WebSocket endpoints.

not rated 1.7k +12 8d ago A SkillSpector: pass 99 tokens

passive-recon

198

wgpsec/AboutSecurity

Skill Claude CodeCodex

A guide to passive OSINT reconnaissance: collecting publicly available information about exposed assets without directly contacting the target. OSINT means intelligence gathered from open sources, while asset discovery finds domains, services, and other internet-facing systems.

not rated 1.7k +12 8d ago A SkillSpector: pass 85 tokens

recon-full

199

wgpsec/AboutSecurity

Skill Claude CodeCodex

A guide to active, end-to-end reconnaissance for security testing, from confirming scope through subdomain discovery and port scanning. Reconnaissance is the process of mapping a target's internet-facing systems before testing them.

not rated 1.7k +12 8d ago A SkillSpector: pass 75 tokens

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: