Plugins
12 plugins@landonschropp
Ls Scripting
Script authoring templates
4 skills · plugin
curated
Build Blazor Web App with Auth
Install this pack to build a Blazor Web App with authentication and interactive components.
4 skills · plugin
curated
Deploy Azure Infrastructure
Creates databases, caches, and configures authentication, monitoring, and backup.
3 skills · plugin
@dotnet
Dotnet Blazor
Skills for Blazor development: component authoring, interactivity, and web application patterns.
9 skills · plugin
curated
Skill Authoring Toolkit
For developers creating and maintaining skills for AI coding agents.
17 skills · plugin
@dotnet
Dotnet Template Engine
.NET Template Engine skills: template discovery, project scaffolding, and template authoring.
6 skills · plugin
curated
Build TypeSpec API for Copilot
Generate TypeSpec API plugin files with REST operations, authentication, and Adaptive Cards.
3 skills · plugin
curated
Azure Identity and Storage with Python
For Python developers building secure Azure applications with authentication and blob storage.
4 skills · plugin
curated
Document Coauthoring Pack
For teams that need to co-author, review, and polish technical documents, proposals, and specs.
11 skills · plugin
@fradser
Office
Office productivity skills for patent applications, PRD generation, video generation, Remotion programmatic video authoring, and AI writing trope detection
5 skills · plugin
@brycewang-stanford
Cell Skills
Twelve-skill bundle covering the Cell manuscript lifecycle: workflow router, scope/significance fit, single-narrative framing, the Highlights + eTOC + Graphical Abstract trio, the ≤150-word Summary, main-text writing, display items, STAR Methods + Key Resources Table, data/code availability, Cell Press author–date references, submission preflight + cover letter, and reviewer rebuttal.
9 skills · plugin
@testdouble
Han Plugin Builder
Guidance for building Claude Code skills, agents, and plugins. The guidance skill answers authoring questions and, run with init, vendors the full guidance set into a repo as a path-scoped rule index so the right guidance surfaces while editing skill and agent files. Opt-in and dependency-free: installed on its own, not pulled in by the han meta-plugin.
3 skills · plugin
Results for “auth”
114 skills
zhaoxuya520 Identity Federation
Authorized assessment of federated identity systems covering SAML, OIDC, and OAuth2 flows, SSO misconfigurations, and token confusion issues.
12.8k · bundle
shulkwisec API Sec
Routes API security testing into recon, authorization, token abuse, or hidden-parameter workflows based on observed endpoint characteristics.
21
shulkwisec Param Fuzz
Systematically fuzz web applications for hidden content and input validation vulnerabilities across directories, files, parameters, and authentication bypasses.
21
mukul975 Abusing Dpapi For Credential Access
Extract DPAPI-protected secrets such as credentials and browser data from Windows systems during authorized penetration tests.
24.6k · bundle
zhaoxuya520 Radio Sdr
Guides authorized RF/SDR security research for signal identification, demodulation analysis, and replay feasibility studies in shielded lab environments.
12.8k · bundle
mukul975 Exploiting SQL Injection With Sqlmap
Detect and exploit SQL injection vulnerabilities using sqlmap to extract database contents during authorized penetration tests.
24.6k · bundle
mukul975 Performing Web Cache Deception Attack
Exploit path normalization discrepancies between CDN caching layers and origin servers to cache and retrieve authenticated content.
24.6k · bundle
mukul975 Attacking Entra Id With Roadtools
Enumerate Microsoft Entra ID tenants using ROADrecon and acquire/exchange tokens with roadtx for authorized red-team operations.
24.6k · bundle
zhaoxuya520 Ot Ics
Authorized OT/ICS security assessment covering Purdue model zoning, PLC/SCADA exposure, industrial protocol discovery, and safe passive-first evaluation.
12.8k · bundle
zhaoxuya520 Protocol Reverse
Authorized reverse engineering of custom binary protocols, Protobuf/gRPC, WebSocket frames, and PCAP-driven protocol recovery with structured workflow and tooling.
12.8k · bundle
mukul975 Testing Websocket API Security
Tests WebSocket API implementations for security vulnerabilities including missing authentication, Cross-Site WebSocket Hijacking, injection attacks, and denial-of-service.
24.6k · bundle
mukul975 Reverse Engineering IOS App With Frida
Dynamically instrument iOS apps with Frida to trace methods, extract secrets, and bypass security controls during authorized penetration testing.
24.6k · bundle
zhaoxuya520 Windows Ad
Guides authorized Active Directory security research covering Kerberos attacks, AD CS vulnerabilities, BloodHound path analysis, NTLM relay, and domain privilege escalation techniques.
12.8k · bundle
zhaoxuya520 Thick Client
Authorized security testing framework for desktop thick clients covering local storage, IPC, update channels, traffic interception, and client-side trust boundaries.
12.8k · bundle
zhaoxuya520 Macos Reverse
Guides authorized macOS and Mach-O reverse engineering covering codesign analysis, Objective-C/Swift symbol recovery, endpoint security surfaces, and Apple platform malware analysis.
12.8k · bundle
mukul975 Moving Laterally With Netexec
Enumerate SMB, WinRM, LDAP, and MSSQL services, validate credentials, spray passwords, and execute commands on remote hosts using NetExec during authorized penetration tests.
24.6k · bundle
mukul975 Conducting Network Penetration Test
Conducts comprehensive network penetration tests against authorized target environments using host discovery, port scanning, service enumeration, vulnerability identification, and controlled exploitation following PTES methodology.
24.6k · bundle
mukul975 Extracting Credentials From Memory Dump
Extract cached credentials, password hashes, Kerberos tickets, and authentication tokens from memory dumps using Volatility and Mimikatz for forensic investigation.
24.6k · bundle
mukul975 Conducting Spearphishing Simulation Campaign
Plan and execute authorized spearphishing simulations for red team engagements, covering pretext development, payload creation, infrastructure setup, campaign execution, and post-campaign analysis.
24.6k · bundle
mukul975 Conducting Internal Reconnaissance With Bloodhound Ce
Map Active Directory attack paths and identify privilege escalation chains using BloodHound Community Edition for authorized security assessments.
24.6k · bundle
zhaoxuya520 Hardware Security
Guides authorized hardware and embedded interface security research including UART/JTAG discovery, debug pad triage, secure boot assessment, and offline firmware extraction support.
12.8k · bundle
drnabeelkhan Ethical Hacker
Conducts authorized security assessments to identify vulnerabilities, map them to OWASP and MITRE frameworks, and provide remediation guidance with responsible disclosure planning.
2
mukul975 Operating Havoc C2
Build and operate a Havoc C2 framework for authorized red-team engagements, including team server deployment, evasive Demon agent generation, and post-exploitation.
24.6k · bundle
mukul975 Testing JWT Token Security
Assess JSON Web Token implementations for cryptographic weaknesses, algorithm confusion attacks, and authorization bypass vulnerabilities during security engagements.
24.6k · bundle
mukul975 Performing Ssl Stripping Attack
Simulates SSL stripping attacks using sslstrip, Bettercap, and mitmproxy in authorized environments to test HSTS enforcement, certificate validation, and HTTPS upgrade mechanisms.
24.6k · bundle
mukul975 Performing Physical Intrusion Assessment
Conduct authorized physical penetration testing using tailgating, badge cloning, lock bypassing, and rogue device deployment to evaluate facility security controls.
24.6k · bundle
mukul975 Conducting Social Engineering Pretext Call
Plan and execute authorized vishing (voice phishing) pretext calls to assess employee susceptibility to social engineering and evaluate security awareness controls.
24.6k · bundle
mukul975 Exploiting Ms17 010 Eternalblue Vulnerability
Exploits the MS17-010 (EternalBlue) vulnerability in Microsoft's SMBv1 implementation for authorized security testing, red team exercises, and penetration testing engagements.
24.6k · bundle
zhaoxuya520 Digital Forensics
Guides authorized digital forensics and incident response workflows including memory dump analysis, disk timeline creation, PCAP investigation, and artifact triage with evidence preservation.
12.8k · bundle
mukul975 Performing Clickjacking Attack Test
Test web applications for clickjacking vulnerabilities by assessing frame embedding controls and crafting proof-of-concept overlay attacks during authorized security assessments.
24.6k · bundle
mukul975 Conducting Cloud Penetration Testing
Perform authorized penetration testing against AWS, Azure, and GCP cloud environments using cloud-specific tools and methodologies, with findings mapped to the MITRE ATT&CK Cloud matrix.
24.6k · bundle
mukul975 Exploiting Server Side Request Forgery
Identify and exploit SSRF vulnerabilities to access internal services, cloud metadata, and restricted network resources during authorized penetration tests.
24.6k · bundle
mukul975 Testing For Xxe Injection Vulnerabilities
Discover and exploit XML External Entity injection vulnerabilities to read server files, perform SSRF, and exfiltrate data during authorized penetration tests.
24.6k · bundle
mukul975 Building Red Team C2 Infrastructure With Havoc
Deploy and configure the Havoc C2 framework with teamserver, HTTPS listeners, redirectors, and Demon agents for authorized red team operations.
24.6k · bundle
zhaoxuya520 Wifi Wireless
Guides authorized Wi-Fi security assessments including handshake capture, PMKID collection, rogue AP detection, and offline password policy evaluation using aircrack-ng, hashcat, and Wireshark.
12.8k · bundle
mukul975 Performing IOS App Security Assessment
Conduct authorized iOS application security assessments using Frida, Objection, and static analysis to evaluate app security posture against OWASP MASTG standards.
24.6k · bundle