AI Agent Skills

Subdover is a MultiThreaded Subdomain Takeover Vulnerability Scanner Written In Python3

Using this script, you can enumerate Usernames and passwords of Nosql(mongodb) injecion vulnerable web applications.

Passive and active reconnaissance, subdomain enumeration, DNS analysis, technology fingerprinting, and OSINT data correlation for authorized security assessments

A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendat…

LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping

A script for credentials-based attack surface enumeration and general reconnaissance of massive networks

DNS Subdomain● Brute force ● Web Spider ● Nmap Scan ● etc

ScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning, sensitive information discovery, vulnerability scanning, distributed nodes

The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical pro…

AI-powered subdomain enumeration tool with local LLM analysis via Ollama - 100% private, zero API costs

An IIS short filename enumeration tool

🔥 Professional Penetration Testing Framework v4.0 - Automated subdomain enumeration, vulnerability scanning with Nuclei, port scanning, and comprehensive HTML reports.…

Cyber threat intelligence and OSINT analysis toolkit. Runs structured investigations and delivers analyst-grade intelligence products with sourced, trust-scored findings…

Hunt account takeover taxonomy — 9 distinct paths to ATO, plus chains. Paths: (1) password reset flaws (host-header injection redirects token, predictable/numeric token,…

Hunting skill for csrf vulnerabilities. Built from 15 public bug bounty reports including modern variants — SameSite=Lax sibling-subdomain bypass (Argo CD CVE-2024-22424…

Hunt ASP.NET-specific surface — ViewState deserialization (signed-only vs encrypted), machineKey recovery, dual-parser MAC-bypass anti-pattern, request-validator bypass,…