web-sqli
claudeUse when testing a web application for SQL injection on an authorized engagement.
7 skills
0
claude
recon-subdomain-enumeration
Use when starting authorized reconnaissance on a target domain and you need the complete subdomain enumeration playbook.
/
Plugin recon-subdomain-enumeration from marketplace agent-arsenal in mizazhaider-ceh/AgentArsenal. Commands read from the repo's manifest — 12 days ago.
What it installs
Skills (4)
recon-subdomain-enumerationUse when starting authorized reconnaissance on a target domain and you need the complete subdomain enumeration playbook. Covers passive collection (subfinder, amass passive, certificate transparency, DNS datasets), active brute forcing (dnsx, shuffledns, wordlists), permutation and alteration techni
recon-subdomain-enumeration-active-bruteforcingUse when passive sources are exhausted and you are authorized for active DNS enumeration on the target domain. Covers wildcard detection before trusting results, brute forcing with dnsx and shuffledns, wordlist selection and custom wordlist building from discovered names, resolver choice and polite
recon-subdomain-enumeration-passive-sourcesUse when you need subdomains without sending any packets to the target's infrastructure. Covers the full passive source stack, subfinder with API keys, amass in passive mode, crt.sh certificate transparency queries, DNS dataset services (VirusTotal, SecurityTrails, AlienVault OTX), search engine scr
recon-subdomain-enumeration-permutation-techniquesUse when passive and brute force enumeration plateau and you need to mutate known names into undiscovered ones on an authorized target domain. Covers alteration wordlists (dnsgen), environment and numbering patterns, hyphen and ordering variants, service-name seeding from the target's tech stack, an
More from mizazhaider-ceh/AgentArsenal
All 353 plugins →nmap-methodology
claudeUse when planning or running nmap scans during authorized engagements: host discovery options, TCP SYN, connect, UDP, NULL, FIN, Xmas, and ACK scan types, service and OS detection, timing templates T0 to T5, evasion techniques (fragmentation, decoys, idle scans, source port tricks, data length padding), NSE script selection by category, and output formats for evidence.
6 skills
0
privesc-linux
claudeUse when you hold a low-privilege Linux shell on an authorized engagement, lab, or CTF and need a reliable path to root.
6 skills
0
web-xss
claudeUse when testing a web application for cross-site scripting on an authorized engagement.
6 skills
0
ad-enumeration
claudeUse when mapping an authorized Active Directory environment during an internal assessment or assumed breach exercise.
5 skills
0
api-security-testing
claudeUse when testing REST, GraphQL, or internal APIs on an authorized engagement.
5 skills
0
Similar plugins
awesome-web-security
claudeLooks up curated web security learning resources (XSS, SQLi, CSRF, SSRF, OAuth/JWT, recon, evasion, tools, CTF). Filters by topic, difficulty, language, and resource type. Returns top references with archive fallbacks. Defensive use only; refuses unauthorized targeting.
1 skill
qazbnm456/awesome-web-security 14,048
universal-modder
claudecodexMod almost any game you own with an AI agent: engine recon, reverse engineering, fal-generated art/3D/audio, in-game testing, showcase videos, and a shared knowledge base of how games were modded.
13 skills · 3 agents · 1 MCP server · hooks
rehan-remade/universal-modder 9,652
agentic-bug-hunter
claudeAI-powered bug bounty toolkit — recon, vulnerability hunting, validation gates, and submission-ready reports for HackerOne, Bugcrowd, Intigriti, and Immunefi.
26 skills · 43 commands
awarexone/Agentic-Bug-Hunter 5,846
claude-bughunter
claude83-skill bug-hunting & external red-team bundle — 58 hunt-* web/vuln-class + framework skills, enterprise platform attack chains (M365/Entra, Okta, SharePoint, vCenter, SSL-VPN, APK/iOS), recon/OSINT, reporting & validation gates, Burp MCP integration. Skills auto-load by topic; 15 slash commands.
83 skills · 15 commands
elementalsouls/Claude-BugHunter 5,641
apex-recon
claudeEngineering lead reconnaissance — inventory the project before planning. Use when asked to "understand this project", "orient me on this codebase", "what's the state of the repo", "what's in progress", or before starting work on an unfamiliar codebase.
1 skill
jeremylongshore/tons-of-skills-marketplace 2,917
Mantis
codexMantis offensive-security daemon — autonomous bug bounty hunter with 7-phase FSM (RECON → AUTH → HUNT → CHAIN → VERIFY → GRADE → REPORT), parallel hunter sub-agents, cryptographic scope enforcement, and BLAKE3/Ed25519 Merkle event logs. Use only against assets you own or have explicit written authorization to test.
1 MCP server
hashgraph-online/awesome-codex-plugins 1,566
Maintain recon-subdomain-enumeration?
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.
claude & codex plugins353 plugins