web-sqli
claudeUse when testing a web application for SQL injection on an authorized engagement.
7 skills
0
claude
recon-subdomain-takeover
Use when authorized reconnaissance finds DNS records pointing at third-party services and you need to check for subdomain takeover.
/
Plugin recon-subdomain-takeover from marketplace agent-arsenal in mizazhaider-ceh/AgentArsenal. Commands read from the repo's manifest — 12 days ago.
What it installs
Skills (5)
recon-subdomain-takeoverUse when authorized reconnaissance finds DNS records pointing at third-party services and you need to check for subdomain takeover. Covers how takeovers happen (dangling CNAMEs, expired cloud resources, unclaimed service endpoints), DNS record analysis to find candidates, fingerprinting cloud and Sa
recon-subdomain-dangling-cnameUse when DNS analysis has flagged CNAME records and you need to decide which ones are truly dangling and claimable. Covers classifying CNAME targets by service, testing resolution and HTTP fingerprints per provider, distinguishing dead endpoints from parked or squatted ones, and building takeover-re
recon-subdomain-takeover-claiming-and-verificationUse when a takeover candidate is fingerprinted as claimable on an in-scope target and the program permits verification. Covers the permission check before any claiming, the least-invasive claiming procedure (benign proof file only, never defacement), evidence to capture at each step, releasing or ha
recon-subdomain-takeover-cloud-service-fingerprintsUse when DNS analysis has produced takeover candidates and you need to fingerprint the cloud or SaaS service behind each one. Covers fetching candidate responses safely, matching against known service fingerprints (Heroku, GitHub Pages, S3, Azure, Shopify, Tumblr, and more), handling services that c
recon-subdomain-takeover-dns-record-analysisUse when you have an in-scope subdomain list and need to find takeover candidates in the DNS records. Covers enumerating CNAME, A, and NS records at scale with dig, spotting dangling CNAMEs (targets that no longer resolve), expired cloud IP assignments, dead delegated nameservers, and building the c
More from mizazhaider-ceh/AgentArsenal
All 353 plugins →nmap-methodology
claudeUse when planning or running nmap scans during authorized engagements: host discovery options, TCP SYN, connect, UDP, NULL, FIN, Xmas, and ACK scan types, service and OS detection, timing templates T0 to T5, evasion techniques (fragmentation, decoys, idle scans, source port tricks, data length padding), NSE script selection by category, and output formats for evidence.
6 skills
0
privesc-linux
claudeUse when you hold a low-privilege Linux shell on an authorized engagement, lab, or CTF and need a reliable path to root.
6 skills
0
web-xss
claudeUse when testing a web application for cross-site scripting on an authorized engagement.
6 skills
0
ad-enumeration
claudeUse when mapping an authorized Active Directory environment during an internal assessment or assumed breach exercise.
5 skills
0
api-security-testing
claudeUse when testing REST, GraphQL, or internal APIs on an authorized engagement.
5 skills
0
Similar plugins
awesome-web-security
claudeLooks up curated web security learning resources (XSS, SQLi, CSRF, SSRF, OAuth/JWT, recon, evasion, tools, CTF). Filters by topic, difficulty, language, and resource type. Returns top references with archive fallbacks. Defensive use only; refuses unauthorized targeting.
1 skill
qazbnm456/awesome-web-security 14,048
universal-modder
claudecodexMod almost any game you own with an AI agent: engine recon, reverse engineering, fal-generated art/3D/audio, in-game testing, showcase videos, and a shared knowledge base of how games were modded.
13 skills · 3 agents · 1 MCP server · hooks
rehan-remade/universal-modder 9,652
claude-bughunter
claude83-skill bug-hunting & external red-team bundle — 58 hunt-* web/vuln-class + framework skills, enterprise platform attack chains (M365/Entra, Okta, SharePoint, vCenter, SSL-VPN, APK/iOS), recon/OSINT, reporting & validation gates, Burp MCP integration. Skills auto-load by topic; 15 slash commands.
83 skills · 15 commands
elementalsouls/Claude-BugHunter 5,641
volt-recon
claudeFirmware reconnaissance for takeover — inventory the MCU, peripherals, RTOS, protocols, OTA, power management, and assess code quality with risk flags. Use when asked to "understand this firmware", "device inventory", or "embedded assessment".
1 skill
jeremylongshore/tons-of-skills-marketplace 2,917
pm-parents
claudeSchool-age parenting ops: parent-teacher conferences that inform, IEP/504 meetings walked in prepared, and college applications supported without takeover
3 skills
mohitagw15856/pm-claude-skills 1,544
hackingtool
claude183+ pentesting and OSINT tools (nmap, nuclei, amass, subfinder, httpx, sherlock, maigret, trufflehog, sqlmap, impacket, and more) wired into Claude Code. Runs locally on any OS via native Bash, WSL, or purpose-built Docker images — Claude picks the right backend and image automatically.
1 skill
AKCodez/hackingtool-plugin 1,165
Maintain recon-subdomain-takeover?
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.
claude & codex plugins353 plugins