Live registry search

Results for “subdomain-takeover”

Exact name and slug matches are checked against the live registry before ranked alternatives.

Clear search

Decision filters

Choose by scenario, quality, and trust signals.

Use casePlatform fitQuality tierTrust profileSafety gateGitHub adoption

Showing 1-12 of 12 ranked candidates matching "subdomain-takeover"

Best blend of relevance, quality, freshness, and verified outcomes

Subdover

NEEDS REVIEW · 36TRUST · 67SAFE · BLOCKEDLEGAL

Subdover is a MultiThreaded Subdomain Takeover Vulnerability Scanner Written In Python3

$ npx skills add PushpenderIndia/subdover

111 stars33 quality67 trustBlocked for auto-install3y since pushRisky

QualityInspect the repository carefully before adding it to an agent workflow.Check: Repository looks stale

TrustPotentially useful, but at least one trust signal needs human inspection.Review: License is unclear

Safety gateThis skill should not be selected by an agent without explicit human security review.

Scenario Security and compliance · I need my agent to scan a project for security risks and summarize what needs attention.

CLI + Codex · 4 targets

pythonsecurity

by PushpenderIndiaDetailsQuick view

Reconnaissance & OSINT Automation

STRONG · 71TRUST · 72SAFE · REVIEWEDCODING

Passive and active reconnaissance, subdomain enumeration, DNS analysis, technology fingerprinting, and OSINT data correlation for authorized security assessments

$ npx skills add Masriyan/Claude-Code-CyberSecurity-Skill --skill Reconnaissance & OSINT Automation

397 stars45 quality72 trustReviewed with permission notesClaude Code4d since pushNeeds review

QualitySolid option that is likely worth shortlisting for production workflows.Check: Active scanning capabilities (e.g., nmap) could be misused if authorization is…

TrustGood trust signals with a few areas worth checking before rollout.Review: Active scanning capabilities (e.g., nmap) could be misused if authorization is…

Safety gateUsable candidate, but the agent should surface permission and audit notes before installation.

Scenario Coding agents · I need a coding agent that can understand a repository, edit code, and review pull requests.

Claude Code + CLI · 4 targets

by MasriyanDetailsQuick view

PentestER Fully Automatic Scanner

NEEDS REVIEW · 41TRUST · 65SAFE · BLOCKEDCODING

DNS Subdomain● Brute force ● Web Spider ● Nmap Scan ● etc

$ npx skills add RASSec/pentestER-Fully-automatic-scanner

375 stars37 quality65 trustBlocked for auto-install3y since pushRisky

QualityInspect the repository carefully before adding it to an agent workflow.Check: Repository looks stale

TrustPotentially useful, but at least one trust signal needs human inspection.Review: License is unclear

Safety gateThis skill should not be selected by an agent without explicit human security review.

Scenario Testing and QA · I need my agent to test a web app, reproduce bugs, and verify fixes.

CLI + Codex · 4 targets

pythonsecurity

by RASSecDetailsQuick view

hunt-ato

STRONG · 83TRUST · 72SAFE · REVIEWEDCODING

Hunt account takeover taxonomy — 9 distinct paths to ATO, plus chains. Paths: (1) password reset flaws (host-header injection redirects token, predictable/numeric token,…

$ npx skills add elementalsouls/Claude-BugHunter --skill hunt-ato

4.1K stars49 quality72 trustReviewed with permission notesClaude Code5d since pushNeeds review

QualitySolid option that is likely worth shortlisting for production workflows.Check: No explicit setup or environment preparation section, though the skill is self-…

TrustGood trust signals with a few areas worth checking before rollout.Review: No explicit setup or environment preparation section, though the skill is self-…

Safety gateUsable candidate, but the agent should surface permission and audit notes before installation.

Scenario Testing and QA · I need my agent to test a web app, reproduce bugs, and verify fixes.

Claude Code + CLI · 4 targets

by elementalsoulsDetailsQuick view

ScopeSentry

VERIFIEDEXCELLENT · 86TRUST · 84SAFE · REVIEWEDLEGAL

ScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning, sensitive information discovery, vulnerability scanning, distributed nodes

$ npx skills add Autumn-27/ScopeSentry

1.5K stars61 quality84 trustReviewed3mo since pushSafe to try

QualityHigh-confidence pick with strong adoption and healthy maintenance signals.

TrustGood trust signals with a few areas worth checking before rollout.Review: License is unclear

Safety gateGood audit and safety signals with no high-risk permission hints in public metadata.

Scenario Security and compliance · I need my agent to scan a project for security risks and summarize what needs attention.

CLI + Codex · 4 targets

gocrawler

by Autumn-27DetailsQuick view

hunt-csrf

STRONG · 83TRUST · 72SAFE · REVIEWEDCODING

Hunting skill for csrf vulnerabilities. Built from 15 public bug bounty reports including modern variants — SameSite=Lax sibling-subdomain bypass (Argo CD CVE-2024-22424…

$ npx skills add elementalsouls/Claude-BugHunter --skill hunt-csrf

4.3K stars49 quality72 trustReviewed with permission notesClaude Code1d since pushNeeds review

QualitySolid option that is likely worth shortlisting for production workflows.Check: The SKILL.md excerpt does not include explicit setup instructions (e.g., how to…

TrustGood trust signals with a few areas worth checking before rollout.Review: The SKILL.md excerpt does not include explicit setup instructions (e.g., how to…

Safety gateUsable candidate, but the agent should surface permission and audit notes before installation.

Scenario GitHub automation · I need my agent to triage GitHub issues, review pull requests, and summarize repository changes.

Claude Code + CLI · 4 targets

by elementalsoulsDetailsQuick view

hunt-cors

STRONG · 83TRUST · 81SAFE · REVIEWEDCODING

Hunt CORS Misconfiguration — origin-reflection with credentials, null-origin trust, subdomain-regex bypass (unanchored vs unescaped-dot vs prefix-only), pre-flight (OPTI…

$ npx skills add elementalsouls/Claude-BugHunter --skill hunt-cors

4.1K stars49 quality81 trustReviewed with permission notesClaude Code + Browser agents5d since pushNeeds review

QualitySolid option that is likely worth shortlisting for production workflows.

TrustGood trust signals with a few areas worth checking before rollout.Review: Financial research output is not financial advice; require human review before…

Safety gateUsable candidate, but the agent should surface permission and audit notes before installation.

Scenario Testing and QA · I need my agent to test a web app, reproduce bugs, and verify fixes.

Claude Code + Browser agents · 4 targets

by elementalsoulsDetailsQuick view

hunt-api-misconfig

STRONG · 83TRUST · 72SAFE · REVIEWEDCODING

Hunt API security misconfiguration — mass assignment, prototype pollution, HTTP verb tampering. Mass assignment: send {is_admin:true, role:admin, verified:true} on profi…

$ npx skills add elementalsouls/Claude-BugHunter --skill hunt-api-misconfig

4.1K stars49 quality72 trustReviewed with permission notesClaude Code + Browser agents5d since pushNeeds review

QualitySolid option that is likely worth shortlisting for production workflows.Check: SKILL.md includes JWT crypto attacks (alg:none, RS256→HS256 confusion) despite…

TrustGood trust signals with a few areas worth checking before rollout.Review: SKILL.md includes JWT crypto attacks (alg:none, RS256→HS256 confusion) despite…

Safety gateUsable candidate, but the agent should surface permission and audit notes before installation.

Scenario Testing and QA · I need my agent to test a web app, reproduce bugs, and verify fixes.

Claude Code + Browser agents · 4 targets

by elementalsoulsDetailsQuick view

Garud

STRONG · 70TRUST · 76SAFE · EXPERIMENTALCODING

An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and scans for some low hanging vuln…

$ npx skills add R0X4R/Garud

809 stars47 quality76 trustExperimental4mo since pushNeeds review

QualitySolid option that is likely worth shortlisting for production workflows.

TrustGood trust signals with a few areas worth checking before rollout.Review: Quality score needs review

Safety gateSparse or mixed signals. Useful for discovery, but not for autonomous installation.

Scenario Testing and QA · I need my agent to test a web app, reproduce bugs, and verify fixes.

CLI + Codex · 4 targets

shellsecurity

by R0X4RDetailsQuick view

God Eye

PROMISING · 67TRUST · 76SAFE · REVIEWEDCODING

AI-powered subdomain enumeration tool with local LLM analysis via Ollama - 100% private, zero API costs

$ npx skills add Vyntral/god-eye

514 stars50 quality76 trustReviewed with permission notes2mo since pushNeeds review

QualityUseful candidate, but compare it with alternatives before adopting.

TrustGood trust signals with a few areas worth checking before rollout.Review: License is unclear

Safety gateUsable candidate, but the agent should surface permission and audit notes before installation.

Scenario Testing and QA · I need my agent to test a web app, reproduce bugs, and verify fixes.

CLI + Codex · 4 targets

gosecurity

by VyntralDetailsQuick view

Cscan

STRONG · 77TRUST · 78SAFE · REVIEWEDCODING

Enterprise-grade Distributed Asset & Vulnerability Scanner. Features: Port Scanning, Subdomain Brute-force, Fingerprinting, and PoC Detection. Built on Go-Zero & Vue3. 高…

$ npx skills add tangxiaofeng7/cscan

371 stars49 quality78 trustReviewed3mo since pushSafe to try

QualitySolid option that is likely worth shortlisting for production workflows.

TrustGood trust signals with a few areas worth checking before rollout.Review: Quality score needs review

Safety gateGood audit and safety signals with no high-risk permission hints in public metadata.

Scenario Testing and QA · I need my agent to test a web app, reproduce bugs, and verify fixes.

CLI + Codex · 4 targets

gosecurity

by tangxiaofeng7DetailsQuick view

BCHackTool

PROMISING · 61TRUST · 71SAFE · EXPERIMENTALCODING

🔥 Professional Penetration Testing Framework v4.0 - Automated subdomain enumeration, vulnerability scanning with Nuclei, port scanning, and comprehensive HTML reports.…

$ npx skills add ByCh4n/BCHackTool

529 stars42 quality71 trustExperimental8mo since pushNeeds review

QualityUseful candidate, but compare it with alternatives before adopting.

TrustPotentially useful, but at least one trust signal needs human inspection.Review: License is unclear

Safety gateSparse or mixed signals. Useful for discovery, but not for autonomous installation.

Scenario Testing and QA · I need my agent to test a web app, reproduce bugs, and verify fixes.

CLI + Codex · 4 targets

shellsecurity

by ByCh4nDetailsQuick view

Live registry search

Results for “subdomain-takeover”

Exact name and slug matches are checked against the live registry before ranked alternatives.

Clear search

Decision filters

Choose by scenario, quality, and trust signals.

Use casePlatform fitQuality tierTrust profileSafety gateGitHub adoption

Showing 1-12 of 12 ranked candidates matching "subdomain-takeover"

Best blend of relevance, quality, freshness, and verified outcomes

Subdover

NEEDS REVIEW · 36TRUST · 67SAFE · BLOCKEDLEGAL

Subdover is a MultiThreaded Subdomain Takeover Vulnerability Scanner Written In Python3

$ npx skills add PushpenderIndia/subdover

111 stars33 quality67 trustBlocked for auto-install3y since pushRisky

QualityInspect the repository carefully before adding it to an agent workflow.Check: Repository looks stale

TrustPotentially useful, but at least one trust signal needs human inspection.Review: License is unclear

Safety gateThis skill should not be selected by an agent without explicit human security review.

Scenario Security and compliance · I need my agent to scan a project for security risks and summarize what needs attention.

CLI + Codex · 4 targets

pythonsecurity

by PushpenderIndiaDetailsQuick view

Reconnaissance & OSINT Automation

STRONG · 71TRUST · 72SAFE · REVIEWEDCODING

Passive and active reconnaissance, subdomain enumeration, DNS analysis, technology fingerprinting, and OSINT data correlation for authorized security assessments

$ npx skills add Masriyan/Claude-Code-CyberSecurity-Skill --skill Reconnaissance & OSINT Automation

397 stars45 quality72 trustReviewed with permission notesClaude Code4d since pushNeeds review

QualitySolid option that is likely worth shortlisting for production workflows.Check: Active scanning capabilities (e.g., nmap) could be misused if authorization is…

TrustGood trust signals with a few areas worth checking before rollout.Review: Active scanning capabilities (e.g., nmap) could be misused if authorization is…

Safety gateUsable candidate, but the agent should surface permission and audit notes before installation.

Scenario Coding agents · I need a coding agent that can understand a repository, edit code, and review pull requests.

Claude Code + CLI · 4 targets

by MasriyanDetailsQuick view

PentestER Fully Automatic Scanner

NEEDS REVIEW · 41TRUST · 65SAFE · BLOCKEDCODING

DNS Subdomain● Brute force ● Web Spider ● Nmap Scan ● etc

$ npx skills add RASSec/pentestER-Fully-automatic-scanner

375 stars37 quality65 trustBlocked for auto-install3y since pushRisky

QualityInspect the repository carefully before adding it to an agent workflow.Check: Repository looks stale

TrustPotentially useful, but at least one trust signal needs human inspection.Review: License is unclear

Safety gateThis skill should not be selected by an agent without explicit human security review.

Scenario Testing and QA · I need my agent to test a web app, reproduce bugs, and verify fixes.

CLI + Codex · 4 targets

pythonsecurity

by RASSecDetailsQuick view

hunt-ato

STRONG · 83TRUST · 72SAFE · REVIEWEDCODING

Hunt account takeover taxonomy — 9 distinct paths to ATO, plus chains. Paths: (1) password reset flaws (host-header injection redirects token, predictable/numeric token,…

$ npx skills add elementalsouls/Claude-BugHunter --skill hunt-ato

4.1K stars49 quality72 trustReviewed with permission notesClaude Code5d since pushNeeds review

QualitySolid option that is likely worth shortlisting for production workflows.Check: No explicit setup or environment preparation section, though the skill is self-…

TrustGood trust signals with a few areas worth checking before rollout.Review: No explicit setup or environment preparation section, though the skill is self-…

Safety gateUsable candidate, but the agent should surface permission and audit notes before installation.

Scenario Testing and QA · I need my agent to test a web app, reproduce bugs, and verify fixes.

Claude Code + CLI · 4 targets

by elementalsoulsDetailsQuick view

ScopeSentry

VERIFIEDEXCELLENT · 86TRUST · 84SAFE · REVIEWEDLEGAL

ScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning, sensitive information discovery, vulnerability scanning, distributed nodes

$ npx skills add Autumn-27/ScopeSentry

1.5K stars61 quality84 trustReviewed3mo since pushSafe to try

QualityHigh-confidence pick with strong adoption and healthy maintenance signals.

TrustGood trust signals with a few areas worth checking before rollout.Review: License is unclear

Safety gateGood audit and safety signals with no high-risk permission hints in public metadata.

Scenario Security and compliance · I need my agent to scan a project for security risks and summarize what needs attention.

CLI + Codex · 4 targets

gocrawler

by Autumn-27DetailsQuick view

hunt-csrf

STRONG · 83TRUST · 72SAFE · REVIEWEDCODING

Hunting skill for csrf vulnerabilities. Built from 15 public bug bounty reports including modern variants — SameSite=Lax sibling-subdomain bypass (Argo CD CVE-2024-22424…

$ npx skills add elementalsouls/Claude-BugHunter --skill hunt-csrf

4.3K stars49 quality72 trustReviewed with permission notesClaude Code1d since pushNeeds review

QualitySolid option that is likely worth shortlisting for production workflows.Check: The SKILL.md excerpt does not include explicit setup instructions (e.g., how to…

TrustGood trust signals with a few areas worth checking before rollout.Review: The SKILL.md excerpt does not include explicit setup instructions (e.g., how to…

Safety gateUsable candidate, but the agent should surface permission and audit notes before installation.

Scenario GitHub automation · I need my agent to triage GitHub issues, review pull requests, and summarize repository changes.

Claude Code + CLI · 4 targets

by elementalsoulsDetailsQuick view

hunt-cors

STRONG · 83TRUST · 81SAFE · REVIEWEDCODING

Hunt CORS Misconfiguration — origin-reflection with credentials, null-origin trust, subdomain-regex bypass (unanchored vs unescaped-dot vs prefix-only), pre-flight (OPTI…

$ npx skills add elementalsouls/Claude-BugHunter --skill hunt-cors

4.1K stars49 quality81 trustReviewed with permission notesClaude Code + Browser agents5d since pushNeeds review

QualitySolid option that is likely worth shortlisting for production workflows.

TrustGood trust signals with a few areas worth checking before rollout.Review: Financial research output is not financial advice; require human review before…

Safety gateUsable candidate, but the agent should surface permission and audit notes before installation.

Scenario Testing and QA · I need my agent to test a web app, reproduce bugs, and verify fixes.

Claude Code + Browser agents · 4 targets

by elementalsoulsDetailsQuick view

hunt-api-misconfig

STRONG · 83TRUST · 72SAFE · REVIEWEDCODING

Hunt API security misconfiguration — mass assignment, prototype pollution, HTTP verb tampering. Mass assignment: send {is_admin:true, role:admin, verified:true} on profi…

$ npx skills add elementalsouls/Claude-BugHunter --skill hunt-api-misconfig

4.1K stars49 quality72 trustReviewed with permission notesClaude Code + Browser agents5d since pushNeeds review

QualitySolid option that is likely worth shortlisting for production workflows.Check: SKILL.md includes JWT crypto attacks (alg:none, RS256→HS256 confusion) despite…

TrustGood trust signals with a few areas worth checking before rollout.Review: SKILL.md includes JWT crypto attacks (alg:none, RS256→HS256 confusion) despite…

Safety gateUsable candidate, but the agent should surface permission and audit notes before installation.

Scenario Testing and QA · I need my agent to test a web app, reproduce bugs, and verify fixes.

Claude Code + Browser agents · 4 targets

by elementalsoulsDetailsQuick view

Garud

STRONG · 70TRUST · 76SAFE · EXPERIMENTALCODING

An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and scans for some low hanging vuln…

$ npx skills add R0X4R/Garud

809 stars47 quality76 trustExperimental4mo since pushNeeds review

QualitySolid option that is likely worth shortlisting for production workflows.

TrustGood trust signals with a few areas worth checking before rollout.Review: Quality score needs review

Safety gateSparse or mixed signals. Useful for discovery, but not for autonomous installation.

Scenario Testing and QA · I need my agent to test a web app, reproduce bugs, and verify fixes.

CLI + Codex · 4 targets

shellsecurity

by R0X4RDetailsQuick view

God Eye

PROMISING · 67TRUST · 76SAFE · REVIEWEDCODING

AI-powered subdomain enumeration tool with local LLM analysis via Ollama - 100% private, zero API costs

$ npx skills add Vyntral/god-eye

514 stars50 quality76 trustReviewed with permission notes2mo since pushNeeds review

QualityUseful candidate, but compare it with alternatives before adopting.

TrustGood trust signals with a few areas worth checking before rollout.Review: License is unclear

Safety gateUsable candidate, but the agent should surface permission and audit notes before installation.

Scenario Testing and QA · I need my agent to test a web app, reproduce bugs, and verify fixes.

CLI + Codex · 4 targets

gosecurity

by VyntralDetailsQuick view

Cscan

STRONG · 77TRUST · 78SAFE · REVIEWEDCODING

Enterprise-grade Distributed Asset & Vulnerability Scanner. Features: Port Scanning, Subdomain Brute-force, Fingerprinting, and PoC Detection. Built on Go-Zero & Vue3. 高…

$ npx skills add tangxiaofeng7/cscan

371 stars49 quality78 trustReviewed3mo since pushSafe to try

QualitySolid option that is likely worth shortlisting for production workflows.

TrustGood trust signals with a few areas worth checking before rollout.Review: Quality score needs review

Safety gateGood audit and safety signals with no high-risk permission hints in public metadata.

Scenario Testing and QA · I need my agent to test a web app, reproduce bugs, and verify fixes.

CLI + Codex · 4 targets

gosecurity

by tangxiaofeng7DetailsQuick view

BCHackTool

PROMISING · 61TRUST · 71SAFE · EXPERIMENTALCODING

🔥 Professional Penetration Testing Framework v4.0 - Automated subdomain enumeration, vulnerability scanning with Nuclei, port scanning, and comprehensive HTML reports.…

$ npx skills add ByCh4n/BCHackTool

529 stars42 quality71 trustExperimental8mo since pushNeeds review

QualityUseful candidate, but compare it with alternatives before adopting.

TrustPotentially useful, but at least one trust signal needs human inspection.Review: License is unclear

Safety gateSparse or mixed signals. Useful for discovery, but not for autonomous installation.

Scenario Testing and QA · I need my agent to test a web app, reproduce bugs, and verify fixes.

CLI + Codex · 4 targets

shellsecurity

by ByCh4nDetailsQuick view

AI Agent Skills Directory

Results for “subdomain-takeover”

Choose by scenario, quality, and trust signals.

Subdover

Reconnaissance & OSINT Automation

PentestER Fully Automatic Scanner

hunt-ato

ScopeSentry

hunt-csrf

hunt-cors

hunt-api-misconfig

Garud

God Eye

Cscan

BCHackTool

AI Agent Skills Directory

Results for “subdomain-takeover”

Choose by scenario, quality, and trust signals.

Subdover

Reconnaissance & OSINT Automation

PentestER Fully Automatic Scanner

hunt-ato

ScopeSentry

hunt-csrf

hunt-cors

hunt-api-misconfig

Garud

God Eye

Cscan

BCHackTool