web-sqli
claudeUse when testing a web application for SQL injection on an authorized engagement.
7 skills
Use when you hold a low-privilege Linux shell on an authorized engagement, lab, or CTF and need a reliable path to root.
Plugin privesc-linux from marketplace agent-arsenal in mizazhaider-ceh/AgentArsenal. Commands read from the repo's manifest — 12 days ago.
privesc-linuxUse when you hold a low-privilege Linux shell on an authorized engagement, lab, or CTF and need a reliable path to root. Covers LinPEAS-driven enumeration plus a manual checklist: sudo misconfigurations (sudo -l, NOPASSWD entries, LD_PRELOAD tricks), SUID and SGID binaries with GTFOBins techniques,
container-breakout-checksUse when your Linux shell is inside a container on an
cron-abuseUse when you have a Linux shell on an authorized engagement
kernel-exploitsUse when simpler Linux privilege escalation paths are
sudo-misconfigUse when you have a Linux shell on an authorized engagement
suid-binariesUse when you have a low-privilege Linux shell on an authorized
Use when testing a web application for SQL injection on an authorized engagement.
7 skills
Use when planning or running nmap scans during authorized engagements: host discovery options, TCP SYN, connect, UDP, NULL, FIN, Xmas, and ACK scan types, service and OS detection, timing templates T0 to T5, evasion techniques (fragmentation, decoys, idle scans, source port tricks, data length padding), NSE script selection by category, and output formats for evidence.
6 skills
Use when testing a web application for cross-site scripting on an authorized engagement.
6 skills
Use when mapping an authorized Active Directory environment during an internal assessment or assumed breach exercise.
5 skills
Use when testing REST, GraphQL, or internal APIs on an authorized engagement.
5 skills
Use when testing authentication on an authorized engagement.
5 skills
Comprehensive C/C++ security code review, with coverage verified against a parse of the source
1 skill · 1 agent
Hooks that send each Claude Code tool call to a local Tracekit signer before it runs: allowed, denied with the rule that matched, or held until you approve it from another terminal. The signer signs every call, decision and result into a hash-chained record that `tracekit verify` checks offline. Needs the tracekit-ai Python package (`pip install tracekit-ai==1.6.0 && tracekit init --dev --v2 --no-hooks`). In that dev mode the signer runs as your own user; on Linux, system mode runs it as a separate user.
3 skills · 3 commands · hooks
Brief-led image generation, editing, review, and bounded multi-model orchestration with current Gemini image models. Requires Claude Code 2.1.199+, Python 3.11+ with python3 on PATH, and Linux, macOS, or WSL for generation.
1 skill · 2 agents · 1 MCP server
183+ pentesting and OSINT tools (nmap, nuclei, amass, subfinder, httpx, sherlock, maigret, trufflehog, sqlmap, impacket, and more) wired into Claude Code. Runs locally on any OS via native Bash, WSL, or purpose-built Docker images — Claude picks the right backend and image automatically.
1 skill
Per-session screenshot cleanup: tracks screenshots created during each Claude Code session and asks before moving them to the Trash (recoverable). macOS + Linux, zero dependencies.
1 skill · hooks
IoT security testing toolkit with skills for firmware analysis, network reconnaissance, UEFI security, and device exploitation
13 skills
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.