Dark-web OSINT (Tor)
codexDark-web OSINT: fan-out onion search + Tor page scraping exposed over stdio MCP. Engine lifted from robin (MIT). Authorized threat-intel use only. Requires a local Tor daemon on 127.0.0.1:9050.
1 MCP server
0
Plugin marketplace
infosec
Plugins published from ModelsLab/infosec-plugins.
Add this marketplace
Then install any plugin below by name — each page has its exact command.
Pentest Recon
codexReconnaissance methodology skill pack (pure knowledge, no runtime deps).
1 skill
0
Reporting methodology skill pack: turn raw findings into a clear, client-ready penetration-test report (pure knowledge, no runtime deps).
1 skill
0
Scope Guard
codexAuthorized-use enforcement: scope confirmation, rules-of-engagement, and hard-refusal boundaries for security work (pure knowledge, no runtime deps).
1 skill
0
Web App Testing
codexWeb application security testing methodology: WSTG-aligned test taxonomy, verification discipline, OpSec noise tagging, and reporting handoff (pure knowledge, no runtime deps).
1 skill
0
Nuclei (web)
codexMCP wrapper around the `nuclei` scanner (shells out to a locally-installed binary via Docker; nothing weaponized is redistributed).
1 MCP server
0
README badge
Shows how many plugins this repo ships, and links here.
claude & codex plugins6 plugins