The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.
Directorio de skills
Descubre skills reutilizables para AI agents.
Cada recomendación conserva un vínculo claro con su repositorio, auditoría y ruta de instalación.
Resultados de búsqueda: enumeration
Directorio en inglésScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning, sensitive information discovery, vulnerability scanning, distributed nodes
A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.
AI-powered subdomain enumeration tool with local LLM analysis via Ollama - 100% private, zero API costs
A script for credentials-based attack surface enumeration and general reconnaissance of massive networks
LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping
An IIS short filename enumeration tool
🔥 Professional Penetration Testing Framework v4.0 - Automated subdomain enumeration, vulnerability scanning with Nuclei, port scanning, and comprehensive HTML reports. Features parallel scanning, resume capability, and real-time progress tracking.
Using this script, you can enumerate Usernames and passwords of Nosql(mongodb) injecion vulnerable web applications.
Use when preparing or writing any committable deliverable (phase closeout, status report, skill file, wave spec, README section, summary document, CHANGELOG entry, or any markdown file declaring completion or pass/fail status). Applies before the write happens, not after. Without this discipline, agents ship 60% deliverables and declare closure prematurely.
Review changes on current branch and output a structured review. Optionally post to PR with --pr flag, or apply non-blocking follow-ups inline with --apply-followups.