Offensive payload library lookup. SQL injection, XSS, SSTI, LDAP, XXE, CSRF, CRLF, SSRF, deserialization, auth bypass, WAF bypass, CVE-specific exploits. Thin wrapper around a local clone of swisskyrepo/PayloadsAllTheThings with topic-folder navigation and Intruder wordlist retrieval.
Plugin redcap-payloads from marketplace redcap in GITDIDDY69/redcap. Commands read from the repo's manifest — 1 month ago.
redcap-payloadsOffensive-security payload library lookup. Use when the user needs an exploit payload for a specific vulnerability class — SQL injection (MySQL, MSSQL, PostgreSQL, OracleSQL, SQLite), cross-site scripting (reflected, stored, DOM, CSP bypass), server-side template injection, command injection, LDAP i
Android APK / XAPK / JAR / AAR decompilation with jadx and Fernflower/Vineflower. Extract HTTP API endpoints (Retrofit, OkHttp, Volley), trace call flows from UI to network, locate compile-time feature gates. Optional Androguard integration for programmatic call-graph and cross-reference analysis. Adopted from SimoneAvogadro/android-reverse-engineering-skill under Apache 2.0.
1 skill · 1 command
Meta-dispatcher for the redcap suite. Routes red-team and device-research intent to the appropriate sibling skill. Start here when the right sibling isn't obvious or when a task needs multiple siblings chained.
1 skill
Security compliance baseline audit using ComplianceAsCode/content. Compare a target system or device config to a hardening baseline — SCAP, STIG (DISA), CIS benchmarks, PCI-DSS, OSPP, USGCB. Emit deviation report with specific rule references (OVAL, XCCDF, CCE).
1 skill
Autonomous penetration testing via local PentestGPT CLI. Subprocess wrapper around a private fork of GreyDGL/PentestGPT for CTF challenges, Hack The Box machines, and authorized engagements. Streams walkthrough, detects flags, maintains session state. Isolates upstream's adversarial system prompt.
1 skill
Binary reverse engineering with ImHex. Hex editing, Pattern Language for structured binary parsing, YARA, diffing, multi-ISA disassembly (ARM32/64, x86, MIPS, RISC-V), entropy and magic-byte analysis. Uses ImHex's native MCP server when installed, otherwise teaches the pattern language for manual use.
1 skill
Firmware and kernel analysis workbench. Unpack MTK scatter / squashfs / ubifs / ext4 partitions. Grep for compile-time feature gates (em_support, show_5g_toggle, engineer_mode, debug_mode). Audit advertised features vs actual compile-time state. Detect FCC-filing gaps. Corpus grows as you acquire trees and dumps.
1 skill
Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses
200 skills · 98 commands · 71 agents · 1 MCP server · hooks
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.
hooks
CMEM Pro for the Claude app - hooks stream tool use to cmem.ai and inject observations into new sessions and agents
3 skills · 1 MCP server · hooks
agentic-flow (external: maintained in ruvnet/agentic-flow, pinned to commit d19737b, plugin 3.4.0): the agentic-flow MCP server pinned to [email protected] (ReasoningBank learning, ecosystem tools prompt_injection_scan, swarm_partition_tasks, sublinear_solve, sublinear_pagerank and ecosystem_status, multi-provider routing, autopilot learning; readonly profile by default, no tool pre-approved), 2 agents, 4 skills, /agentic-flow-status, and a mod guard on agentic_flow_agent with /agentic-flow-guard
4 skills · 1 command · 2 agents · 1 MCP server
Install the "AAS Secure App Builder" editorial skill bundle for Claude Code.
12 skills
Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture
24 skills · 2 agents
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.