web-sqli
claudeUse when testing a web application for SQL injection on an authorized engagement.
7 skills
Use when starting authorized reconnaissance on a target domain or organization while staying off the target's own infrastructure.
Plugin recon-passive from marketplace agent-arsenal in mizazhaider-ceh/AgentArsenal. Commands read from the repo's manifest — 12 days ago.
recon-passiveUse when starting authorized reconnaissance on a target domain or organization while staying off the target's own infrastructure. Passive reconnaissance with whois, dig against public resolvers, crt.sh certificate transparency logs, Shodan, Censys, theHarvester, Sublist3r, and Amass in passive mode.
recon-passive-dns-historyUse when you need the history of a domain or subdomain, not just its current DNS answer. Covers passive DNS history sources and timelines, tracking A, AAAA, CNAME, MX, and NS changes over time, spotting IP moves, provider migrations, and retired infrastructure, and using old answers to find forgotte
Use when testing a web application for SQL injection on an authorized engagement.
7 skills
Use when planning or running nmap scans during authorized engagements: host discovery options, TCP SYN, connect, UDP, NULL, FIN, Xmas, and ACK scan types, service and OS detection, timing templates T0 to T5, evasion techniques (fragmentation, decoys, idle scans, source port tricks, data length padding), NSE script selection by category, and output formats for evidence.
6 skills
Use when you hold a low-privilege Linux shell on an authorized engagement, lab, or CTF and need a reliable path to root.
6 skills
Use when testing a web application for cross-site scripting on an authorized engagement.
6 skills
Use when mapping an authorized Active Directory environment during an internal assessment or assumed breach exercise.
5 skills
Use when testing REST, GraphQL, or internal APIs on an authorized engagement.
5 skills
Looks up curated web security learning resources (XSS, SQLi, CSRF, SSRF, OAuth/JWT, recon, evasion, tools, CTF). Filters by topic, difficulty, language, and resource type. Returns top references with archive fallbacks. Defensive use only; refuses unauthorized targeting.
1 skill
Mod almost any game you own with an AI agent: engine recon, reverse engineering, fal-generated art/3D/audio, in-game testing, showcase videos, and a shared knowledge base of how games were modded.
13 skills · 3 agents · 1 MCP server · hooks
83-skill bug-hunting & external red-team bundle — 58 hunt-* web/vuln-class + framework skills, enterprise platform attack chains (M365/Entra, Okta, SharePoint, vCenter, SSL-VPN, APK/iOS), recon/OSINT, reporting & validation gates, Burp MCP integration. Skills auto-load by topic; 15 slash commands.
83 skills · 15 commands
Documentation reconnaissance for takeover — find all docs, assess accuracy, freshness, coverage, and discoverability, and identify critical knowledge gaps. Use when asked "what docs exist", "documentation assessment", or "knowledge gaps".
1 skill
Search domains, compare registrar prices, and find promo codes. Help users find and purchase domain names at the best price.
1 skill
183+ pentesting and OSINT tools (nmap, nuclei, amass, subfinder, httpx, sherlock, maigret, trufflehog, sqlmap, impacket, and more) wired into Claude Code. Runs locally on any OS via native Bash, WSL, or purpose-built Docker images — Claude picks the right backend and image automatically.
1 skill
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.