Security & Testing Claudeスキル

IDOR Vulnerability Testing

Conducts systematic security audits to identify and mitigate Insecure Direct Object Reference (IDOR) vulnerabilities in web applications and APIs.

Active Directory Penetration Testing

Provides comprehensive methodologies and command workflows for assessing security vulnerabilities within Microsoft Active Directory environments.

Privilege Escalation Techniques for Security Testing

Facilitates the identification and testing of privilege escalation paths on Linux and Windows systems for authorized security audits.

API Security & Bug Bounty Fuzzing

Provides comprehensive techniques and automated workflows for identifying vulnerabilities in REST, GraphQL, and SOAP APIs.

Broken Authentication Security Testing

Conducts comprehensive security audits for authentication mechanisms and session management to identify vulnerabilities like credential stuffing and session fixation.

Web Vulnerability Reference

Provides comprehensive definitions, root causes, and remediation strategies for the top 100 web application security flaws.

Pentest Planning & Security Checklist

Provides a structured methodology and comprehensive checklist for planning, executing, and remediating penetration tests.

Red Team Tools & Security Research

Automates reconnaissance, vulnerability discovery, and security auditing using industry-standard red team methodologies.

SMTP Penetration Testing

Conducts comprehensive security audits of SMTP servers to identify vulnerabilities like open relays, user enumeration, and weak authentication.

AWS Penetration Testing

Conducts thorough security assessments and ethical hacking operations within Amazon Web Services environments.

WordPress Penetration Testing

Performs comprehensive security assessments and vulnerability scanning on WordPress installations to identify and mitigate risks.

Ethical Hacking Methodology

Guides users through the complete penetration testing lifecycle with domain-specific techniques for authorized security assessments.

Windows Privilege Escalation

Provides systematic methodologies and commands for discovering and exploiting privilege escalation vulnerabilities on Windows systems.

Metasploit Framework Security Guide

Conducts comprehensive penetration testing and vulnerability assessments using the Metasploit Framework.

Wireshark Network Traffic Analysis

Analyzes network traffic, captures packets, and troubleshoots connectivity using advanced Wireshark filtering and protocol analysis techniques.

XSS & HTML Injection Testing

Conducts comprehensive security audits to identify, exploit, and remediate client-side injection vulnerabilities in web applications.

File Path Traversal Testing

Identifies and tests for directory traversal vulnerabilities to ensure secure filesystem access in web applications.

SSH Penetration Testing Toolset

Conducts comprehensive SSH security assessments including enumeration, credential testing, and vulnerability exploitation.

SQLMap Database Penetration Testing

Automates SQL injection vulnerability detection and database exploitation using industry-standard SQLMap methodologies.

Linux Privilege Escalation

Identifies and exploits security misconfigurations, kernel vulnerabilities, and system weaknesses to elevate user privileges on Linux systems.

Test Case Generator

Generates comprehensive, requirement-driven test cases from PRD documents and user requirements to ensure complete software quality coverage.

Skill Installer & Security Scanner

Installs Claude skills from GitHub repositories while performing automated security scans to protect your environment from malicious code.

Package Upgrade Auditor

Audits npm package version upgrades by performing source-level diffs and tracing call sites to ensure project compatibility.

Broken Authentication Security Testing

Identifies and evaluates vulnerabilities in web application authentication and session management systems using industry-standard penetration testing methodologies.

Privilege Escalation Methods

Provides comprehensive methodologies and command-line techniques for escalating user privileges on Linux and Windows systems during security assessments.

API Security Fuzzing & Bug Bounty

Conducts comprehensive API security assessments and vulnerability discovery using industry-standard fuzzing and exploitation techniques.

SQL Injection Security Testing

Performs comprehensive SQL injection vulnerability assessments to identify, demonstrate, and validate database security flaws in web applications.

HTML Injection Security Testing

Identifies and tests HTML injection vulnerabilities in web applications to prevent content defacement and phishing attacks.

Next.js Authentication Patterns

Implements secure authentication and authorization workflows for Next.js applications using industry-standard libraries and patterns.

Web Application Testing

Automates and tests local web applications using Playwright scripts with built-in server lifecycle management.