Plugins
8 plugins@landonschropp
Ls Scripting
Script authoring templates
4 skills · plugin
@dotnet
Dotnet Blazor
Skills for Blazor development: component authoring, interactivity, and web application patterns.
9 skills · plugin
curated
Skill Authoring Toolkit
For developers creating and maintaining skills for AI coding agents.
17 skills · plugin
@dotnet
Dotnet Template Engine
.NET Template Engine skills: template discovery, project scaffolding, and template authoring.
6 skills · plugin
curated
Document Coauthoring Pack
For teams that need to co-author, review, and polish technical documents, proposals, and specs.
11 skills · plugin
@fradser
Office
Office productivity skills for patent applications, PRD generation, video generation, Remotion programmatic video authoring, and AI writing trope detection
5 skills · plugin
@brycewang-stanford
Cell Skills
Twelve-skill bundle covering the Cell manuscript lifecycle: workflow router, scope/significance fit, single-narrative framing, the Highlights + eTOC + Graphical Abstract trio, the ≤150-word Summary, main-text writing, display items, STAR Methods + Key Resources Table, data/code availability, Cell Press author–date references, submission preflight + cover letter, and reviewer rebuttal.
9 skills · plugin
@testdouble
Han Plugin Builder
Guidance for building Claude Code skills, agents, and plugins. The guidance skill answers authoring questions and, run with init, vendors the full guidance set into a repo as a path-scoped rule index so the right guidance surfaces while editing skill and agent files. Opt-in and dependency-free: installed on its own, not pulled in by the han meta-plugin.
3 skills · plugin
Results for “author”
95 skills
trailofbits Firebase Apk Scanner
Scans Android APKs for Firebase security misconfigurations including open databases, storage buckets, authentication issues, and exposed cloud functions. For authorized security research only.
6k · bundle
mukul975 Operating Havoc C2
Build and operate a Havoc C2 framework for authorized red-team engagements, including team server deployment, evasive Demon agent generation, and post-exploitation.
24.6k · bundle
mukul975 Testing JWT Token Security
Assess JSON Web Token implementations for cryptographic weaknesses, algorithm confusion attacks, and authorization bypass vulnerabilities during security engagements.
24.6k · bundle
mukul975 Performing Ssl Stripping Attack
Simulates SSL stripping attacks using sslstrip, Bettercap, and mitmproxy in authorized environments to test HSTS enforcement, certificate validation, and HTTPS upgrade mechanisms.
24.6k · bundle
mukul975 Performing Physical Intrusion Assessment
Conduct authorized physical penetration testing using tailgating, badge cloning, lock bypassing, and rogue device deployment to evaluate facility security controls.
24.6k · bundle
mukul975 Conducting Social Engineering Pretext Call
Plan and execute authorized vishing (voice phishing) pretext calls to assess employee susceptibility to social engineering and evaluate security awareness controls.
24.6k · bundle
mukul975 Exploiting Ms17 010 Eternalblue Vulnerability
Exploits the MS17-010 (EternalBlue) vulnerability in Microsoft's SMBv1 implementation for authorized security testing, red team exercises, and penetration testing engagements.
24.6k · bundle
zhaoxuya520 Digital Forensics
Guides authorized digital forensics and incident response workflows including memory dump analysis, disk timeline creation, PCAP investigation, and artifact triage with evidence preservation.
12.8k · bundle
mukul975 Performing Clickjacking Attack Test
Test web applications for clickjacking vulnerabilities by assessing frame embedding controls and crafting proof-of-concept overlay attacks during authorized security assessments.
24.6k · bundle
mukul975 Conducting Cloud Penetration Testing
Perform authorized penetration testing against AWS, Azure, and GCP cloud environments using cloud-specific tools and methodologies, with findings mapped to the MITRE ATT&CK Cloud matrix.
24.6k · bundle
mukul975 Exploiting Server Side Request Forgery
Identify and exploit SSRF vulnerabilities to access internal services, cloud metadata, and restricted network resources during authorized penetration tests.
24.6k · bundle
mukul975 Testing For Xxe Injection Vulnerabilities
Discover and exploit XML External Entity injection vulnerabilities to read server files, perform SSRF, and exfiltrate data during authorized penetration tests.
24.6k · bundle
mukul975 Building Red Team C2 Infrastructure With Havoc
Deploy and configure the Havoc C2 framework with teamserver, HTTPS listeners, redirectors, and Demon agents for authorized red team operations.
24.6k · bundle
zhaoxuya520 Wifi Wireless
Guides authorized Wi-Fi security assessments including handshake capture, PMKID collection, rogue AP detection, and offline password policy evaluation using aircrack-ng, hashcat, and Wireshark.
12.8k · bundle
mukul975 Performing IOS App Security Assessment
Conduct authorized iOS application security assessments using Frida, Objection, and static analysis to evaluate app security posture against OWASP MASTG standards.
24.6k · bundle
mukul975 Performing Binary Exploitation Analysis
Analyze ELF binaries for exploitation vectors using checksec, ROPgadget, and pwntools for buffer overflow and ROP chain development during authorized security testing and CTF challenges.
24.6k · bundle
mukul975 Conducting Wireless Network Penetration Test
Assess the security of WiFi infrastructure through authorized penetration testing, including weak encryption detection, handshake capture, evil twin attacks, and network segmentation validation.
24.6k · bundle
mukul975 Exploiting Template Injection Vulnerabilities
Detect and exploit Server-Side Template Injection (SSTI) vulnerabilities across Jinja2, Twig, Freemarker, and other template engines to achieve remote code execution during authorized penetration tests.
24.6k · bundle
mukul975 Performing Open Source Intelligence Gathering
Collects publicly available information about a target organization to identify attack surfaces, social engineering targets, technology stacks, and credential exposures for authorized security testing.
24.6k · bundle
mukul975 Testing For Xss Vulnerabilities With Burpsuite
Identify and validate cross-site scripting vulnerabilities using Burp Suite's scanner, intruder, and repeater tools during authorized security assessments.
24.6k · bundle
zhaoxuya520 Attack Chain
Orchestrates multi-stage attack-path planning and execution across reconnaissance, initial access, privilege escalation, lateral movement, and impact assessment for authorized penetration testing.
12.8k · bundle
zhaoxuya520 Pentest Tools
Provides a comprehensive penetration testing toolchain with 20+ security tools (Nmap, Nuclei, SQLMap, FFUF, Hashcat, etc.) exposed via MCP servers for authorized vulnerability scanning, exploitation, and reporting.
12.8k · bundle
mukul975 Testing Cors Misconfiguration
Identify and exploit Cross-Origin Resource Sharing misconfigurations that allow unauthorized cross-domain data access and credential theft during authorized security assessments.
24.6k · bundle
mukul975 Performing Hash Cracking With Hashcat
Crack password hashes using Hashcat for authorized penetration testing and password policy assessment, supporting dictionary, brute-force, rule-based, and hybrid attacks.
24.6k · bundle
mukul975 Executing Phishing Simulation Campaign
Executes authorized phishing simulation campaigns to assess an organization's susceptibility to email-based social engineering attacks, including scenario design, infrastructure setup, and metric tracking.
24.6k · bundle
mukul975 Performing Csrf Attack Simulation
Test web applications for Cross-Site Request Forgery vulnerabilities by crafting forged requests that exploit authenticated user sessions during authorized security assessments.
24.6k · bundle
mukul975 Performing Initial Access With Evilginx3
Conduct authorized red team initial access using EvilGinx3 adversary-in-the-middle phishing to capture session tokens and bypass multi-factor authentication.
24.6k · bundle
mukul975 Performing Mobile App Certificate Pinning Bypass
Bypasses SSL/TLS certificate pinning in Android and iOS apps to intercept HTTPS traffic during authorized security assessments using Frida, Objection, and custom scripts.
24.6k · bundle
mukul975 Exploiting Active Directory Certificate Services Esc1
Exploit misconfigured Active Directory Certificate Services ESC1 vulnerability to request certificates as high-privileged users and escalate domain privileges during authorized red team assessments.
24.6k · bundle
mukul975 Escaping Containers To Host
Exploit privileged pods, host mounts, runC CVEs, and exposed Docker sockets to break out of a container and reach the underlying host during authorized container-security assessments.
24.6k · bundle
mukul975 Performing Web Cache Poisoning Attack
Exploit web cache mechanisms to serve malicious content to other users by poisoning cached responses through unkeyed headers and parameters during authorized security tests.
24.6k · bundle
mukul975 Performing Cloud Penetration Testing With Pacu
Conduct authorized AWS penetration testing using Pacu to enumerate IAM configurations, discover privilege escalation paths, test credential harvesting, and validate security controls through systematic attack simulation.
24.6k · bundle
zhaoxuya520 Mobile Reverse
Provides a structured methodology for authorized Android and iOS reverse engineering, covering static analysis, dynamic instrumentation with Frida and Objection, SSL pinning bypass, root/jailbreak detection evasion, and cryptographic key extraction.
12.8k · bundle
mukul975 Exploiting Ipv6 Vulnerabilities
Identifies and exploits IPv6-specific vulnerabilities including SLAAC spoofing, Router Advertisement flooding, and IPv6 tunneling during authorized assessments to test dual-stack security controls and IPv6-aware network defenses.
24.6k · bundle
mukul975 Performing Red Team With Covenant
Automate red team operations using the Covenant C2 framework's REST API for authorized adversary simulation, including listener setup, grunt deployment, task execution, and lateral movement tracking.
24.6k · bundle
mukul975 Performing Credential Access With Lazagne
Extract stored credentials from compromised endpoints using the LaZagne post-exploitation tool to recover passwords from browsers, databases, system vaults, and applications during authorized red team operations.
24.6k · bundle