web-sqli
claudeUse when testing a web application for SQL injection on an authorized engagement.
7 skills
0
claude
bugbounty-scope-recon
Use when starting a new in-scope bug bounty program and you need reconnaissance that stays strictly inside the authorized scope.
/
Plugin bugbounty-scope-recon from marketplace agent-arsenal in mizazhaider-ceh/AgentArsenal. Commands read from the repo's manifest — 12 days ago.
What it installs
Skills (4)
bugbounty-scope-reconUse when starting a new in-scope bug bounty program and you need reconnaissance that stays strictly inside the authorized scope. Covers reading the policy into a machine-usable scope file, asset discovery from the stated scope (domains, wildcards, IP ranges, mobile apps, APIs), mapping scope boundar
bugbounty-scope-recon-asset-discoveryUse when a program's scope statement is written and you need to turn it into a concrete asset inventory without crossing the lines. Covers expanding wildcard domains into verified subdomain lists, expanding CIDR ranges into live IPs, extracting API hosts and endpoints from web JavaScript and mobile
bugbounty-scope-recon-out-of-scope-avoidanceUse when testing is underway on an in-scope bug bounty program and you need mechanical guarantees that no packet leaves the authorized scope. Covers enforcing the target list in scanners (exclusion flags), Burp target scope with out-of-scope dropping, pre-flight scope checks before active tools run,
bugbounty-scope-recon-scope-boundary-mappingUse when your asset inventory is built and every discovered asset needs a verdict before testing begins. Covers the three-verdict system (in-scope, out-of-scope, gray area), how to judge tricky cases like CNAMEs to third parties, acquired domains, shared staging, and IP reassignments, writing the de
More from mizazhaider-ceh/AgentArsenal
All 353 plugins →nmap-methodology
claudeUse when planning or running nmap scans during authorized engagements: host discovery options, TCP SYN, connect, UDP, NULL, FIN, Xmas, and ACK scan types, service and OS detection, timing templates T0 to T5, evasion techniques (fragmentation, decoys, idle scans, source port tricks, data length padding), NSE script selection by category, and output formats for evidence.
6 skills
0
privesc-linux
claudeUse when you hold a low-privilege Linux shell on an authorized engagement, lab, or CTF and need a reliable path to root.
6 skills
0
web-xss
claudeUse when testing a web application for cross-site scripting on an authorized engagement.
6 skills
0
ad-enumeration
claudeUse when mapping an authorized Active Directory environment during an internal assessment or assumed breach exercise.
5 skills
0
api-security-testing
claudeUse when testing REST, GraphQL, or internal APIs on an authorized engagement.
5 skills
0
Similar plugins
ruflo-agntcy
claudeAGNTCY/Outshift Internet-of-Cognition runtime integration — SLIM secure transport, CASA intent-scoped tool authorization, and AGNTCY identity/observability spans (ADR-380); optional, removable augmentation per ADR-150
1 skill
ruvnet/ruflo 81,589
medical-device-software
claudeGet medical device software through IEC 62304 and IEC 81001-5-1. Four deterministic stdlib scripts: a software safety classifier (62304 4.3 with A1 external controls and segregation) that also sets the FDA Basic/Enhanced documentation level and flags 524B cyber devices; a lifecycle gap check scoped by class, with IEC 81001-5-1 security activities; a SOUP register check with SBOM cross-check; and a trace matrix release gate. Ships cs-device-software-lead agent, /cs-medical-device-software and /cs-soup-review commands and 4 references with per-claim confidence levels.
1 skill · 2 commands · 1 agent
alirezarezvani/claude-skills 29,725
awesome-web-security
claudeLooks up curated web security learning resources (XSS, SQLi, CSRF, SSRF, OAuth/JWT, recon, evasion, tools, CTF). Filters by topic, difficulty, language, and resource type. Returns top references with archive fallbacks. Defensive use only; refuses unauthorized targeting.
1 skill
qazbnm456/awesome-web-security 14,048
AI Governance Legal
claudeTriages proposed AI use cases against your registry, runs impact assessments across the regimes in scope, reviews vendor AI terms for training-on-data and liability gaps, and keeps your AI policy current with practice.
10 skills · 2 MCP servers
anthropics/claude-for-legal 9,991
universal-modder
claudecodexMod almost any game you own with an AI agent: engine recon, reverse engineering, fal-generated art/3D/audio, in-game testing, showcase videos, and a shared knowledge base of how games were modded.
13 skills · 3 agents · 1 MCP server · hooks
rehan-remade/universal-modder 9,652
code-improver
claudeImproves code targets — skills, plugins, or a branch's changes — through an autonomous review-and-fix workflow with a pluggable reviewer (any installed skill or agent), a cross-round findings ledger, oscillation escalation, and a mechanical scope guard.
3 skills · 1 agent
trailofbits/skills 8,166
Maintain bugbounty-scope-recon?
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.
claude & codex plugins353 plugins