Plugins
8 plugins@landonschropp
Ls Scripting
Script authoring templates
4 skills · plugin
@dotnet
Dotnet Blazor
Skills for Blazor development: component authoring, interactivity, and web application patterns.
9 skills · plugin
curated
Skill Authoring Toolkit
For developers creating and maintaining skills for AI coding agents.
17 skills · plugin
@dotnet
Dotnet Template Engine
.NET Template Engine skills: template discovery, project scaffolding, and template authoring.
6 skills · plugin
curated
Document Coauthoring Pack
For teams that need to co-author, review, and polish technical documents, proposals, and specs.
11 skills · plugin
@fradser
Office
Office productivity skills for patent applications, PRD generation, video generation, Remotion programmatic video authoring, and AI writing trope detection
5 skills · plugin
@brycewang-stanford
Cell Skills
Twelve-skill bundle covering the Cell manuscript lifecycle: workflow router, scope/significance fit, single-narrative framing, the Highlights + eTOC + Graphical Abstract trio, the ≤150-word Summary, main-text writing, display items, STAR Methods + Key Resources Table, data/code availability, Cell Press author–date references, submission preflight + cover letter, and reviewer rebuttal.
9 skills · plugin
@testdouble
Han Plugin Builder
Guidance for building Claude Code skills, agents, and plugins. The guidance skill answers authoring questions and, run with init, vendors the full guidance set into a repo as a path-scoped rule index so the right guidance surfaces while editing skill and agent files. Opt-in and dependency-free: installed on its own, not pulled in by the han meta-plugin.
3 skills · plugin
Results for “author”
95 skills
mukul975 Testing API For Broken Object Level Authorization
Tests REST and GraphQL APIs for Broken Object Level Authorization (BOLA/IDOR) vulnerabilities by manipulating object identifiers to detect missing per-object authorization checks.
24.6k · bundle
mukul975 Exploiting OAUTH Misconfiguration
Identify and exploit OAuth 2.0 and OpenID Connect misconfigurations including redirect URI manipulation, token leakage, and authorization code theft during authorized security assessments.
24.6k · bundle
shulkwisec Auth Sec
Routes authentication and authorization testing efforts by identifying the primary attack surface — login mechanics, object authorization, browser trust boundaries, or identity protocols such as JWT/OAuth/SAML — before selecting a deeper skill.
21
zhaoxuya520 API Security
Authorized security assessment of REST, GraphQL, WebSocket, and SOAP APIs covering discovery, authentication, authorization, rate-limiting, and CI/CD integration.
12.8k · bundle
shulkwisec Bola Idor
Detect and exploit Broken Object Level Authorization (BOLA) and Insecure Direct Object Reference (IDOR) vulnerabilities in APIs and web applications.
21
zhaoxuya520 Database Security
Performs authorized database security assessments across PostgreSQL, MySQL, MSSQL, MongoDB, and Redis, checking exposure, authentication, authorization, dangerous configurations, and exploit paths.
12.8k · bundle
More results
getsentry Django Access Review
Reviews Django codebases for access control vulnerabilities and IDOR by tracing authorization flows, mapping attack surfaces, and reporting confirmed gaps with enforceable fixes.
845 · bundle
mukul975 Exploiting Idor Vulnerabilities
Identify and exploit Insecure Direct Object Reference vulnerabilities during authorized penetration tests by manipulating object identifiers in API requests and URLs.
24.6k · bundle
mukul975 Performing GRAPHQL Security Assessment
Assess GraphQL API endpoints for introspection leaks, injection attacks, authorization flaws, and denial-of-service vulnerabilities during authorized security tests.
24.6k · bundle
mukul975 Testing Mobile API Authentication
Tests authentication and authorization mechanisms in mobile application APIs to identify broken authentication, insecure token management, session fixation, privilege escalation, and IDOR vulnerabilities.
24.6k · bundle
mukul975 Exploiting SQL Injection Vulnerabilities
Identifies and exploits SQL injection vulnerabilities in web applications during authorized penetration tests using manual techniques and automated tools like sqlmap.
24.6k · bundle
mukul975 Exploiting Broken Function Level Authorization
Tests APIs for Broken Function Level Authorization (BFLA) vulnerabilities where regular users can invoke administrative functions or access privileged API endpoints by directly calling them.
24.6k · bundle
mukul975 Detecting Broken Object Property Level Authorization
Detect and test for OWASP API3:2023 Broken Object Property Level Authorization vulnerabilities including excessive data exposure and mass assignment attacks.
24.6k · bundle
tinh2 Pentest
Performs a static-analysis penetration test to find exploitable vulnerabilities, providing proof-of-concept payloads and fixes. Covers injection, XSS, authentication bypass, authorization flaws, path traversal, command injection, CSRF, SSRF, hardcoded secrets, and insecure deserialization, with a full attack surface.
13
mukul975 Exploiting AWS With Pacu
Use Pacu modules for AWS privilege escalation, persistence, and backdooring during authorized penetration tests.
24.6k · bundle
mukul975 Exploiting Insecure Deserialization
Identify and exploit insecure deserialization vulnerabilities in Java, PHP, Python, and .NET applications during authorized penetration tests.
24.6k · bundle
zhaoxuya520 Identity Federation
Authorized assessment of federated identity systems covering SAML, OIDC, and OAuth2 flows, SSO misconfigurations, and token confusion issues.
12.8k · bundle
shulkwisec API Sec
Routes API security testing into recon, authorization, token abuse, or hidden-parameter workflows based on observed endpoint characteristics.
21
mukul975 Abusing Dpapi For Credential Access
Extract DPAPI-protected secrets such as credentials and browser data from Windows systems during authorized penetration tests.
24.6k · bundle
zhaoxuya520 Radio Sdr
Guides authorized RF/SDR security research for signal identification, demodulation analysis, and replay feasibility studies in shielded lab environments.
12.8k · bundle
mukul975 Exploiting SQL Injection With Sqlmap
Detect and exploit SQL injection vulnerabilities using sqlmap to extract database contents during authorized penetration tests.
24.6k · bundle
mukul975 Attacking Entra Id With Roadtools
Enumerate Microsoft Entra ID tenants using ROADrecon and acquire/exchange tokens with roadtx for authorized red-team operations.
24.6k · bundle
zhaoxuya520 Ot Ics
Authorized OT/ICS security assessment covering Purdue model zoning, PLC/SCADA exposure, industrial protocol discovery, and safe passive-first evaluation.
12.8k · bundle
zhaoxuya520 Protocol Reverse
Authorized reverse engineering of custom binary protocols, Protobuf/gRPC, WebSocket frames, and PCAP-driven protocol recovery with structured workflow and tooling.
12.8k · bundle
mukul975 Reverse Engineering IOS App With Frida
Dynamically instrument iOS apps with Frida to trace methods, extract secrets, and bypass security controls during authorized penetration testing.
24.6k · bundle
zhaoxuya520 Windows Ad
Guides authorized Active Directory security research covering Kerberos attacks, AD CS vulnerabilities, BloodHound path analysis, NTLM relay, and domain privilege escalation techniques.
12.8k · bundle
zhaoxuya520 Macos Reverse
Guides authorized macOS and Mach-O reverse engineering covering codesign analysis, Objective-C/Swift symbol recovery, endpoint security surfaces, and Apple platform malware analysis.
12.8k · bundle
zhaoxuya520 Thick Client
Authorized security testing framework for desktop thick clients covering local storage, IPC, update channels, traffic interception, and client-side trust boundaries.
12.8k · bundle
mukul975 Moving Laterally With Netexec
Enumerate SMB, WinRM, LDAP, and MSSQL services, validate credentials, spray passwords, and execute commands on remote hosts using NetExec during authorized penetration tests.
24.6k · bundle
mukul975 Conducting Network Penetration Test
Conducts comprehensive network penetration tests against authorized target environments using host discovery, port scanning, service enumeration, vulnerability identification, and controlled exploitation following PTES methodology.
24.6k · bundle
mukul975 Exploiting Websocket Vulnerabilities
Test WebSocket implementations for authentication bypass, cross-site hijacking, injection attacks, and insecure message handling during authorized security assessments.
24.6k · bundle
mukul975 Conducting Spearphishing Simulation Campaign
Plan and execute authorized spearphishing simulations for red team engagements, covering pretext development, payload creation, infrastructure setup, campaign execution, and post-campaign analysis.
24.6k · bundle
mukul975 Bypassing Authentication With Forced Browsing
Discover hidden directories, files, APIs, and administrative interfaces by enumerating URLs and testing authentication enforcement during authorized security assessments.
24.6k · bundle
mukul975 Conducting Internal Reconnaissance With Bloodhound Ce
Map Active Directory attack paths and identify privilege escalation chains using BloodHound Community Edition for authorized security assessments.
24.6k · bundle
zhaoxuya520 Hardware Security
Guides authorized hardware and embedded interface security research including UART/JTAG discovery, debug pad triage, secure boot assessment, and offline firmware extraction support.
12.8k · bundle
drnabeelkhan Ethical Hacker
Conducts authorized security assessments to identify vulnerabilities, map them to OWASP and MITRE frameworks, and provide remediation guidance with responsible disclosure planning.
2