连接

Offensive OSINT

elementalsoulsbyelementalsouls
•
3.0k
•
安全与测试

Accelerates external attack surface discovery and red-team reconnaissance with curated wordlists, dorks, probes, and secret-detection patterns.

Offensive OSINT equips Claude Code with an operational reconnaissance arsenal designed for authorized external red-team engagements and bug bounty assessments. It provides over 100 concrete probe paths, an 80-pattern secret-regex catalog covering modern AI and cloud APIs, 80+ search engine dorks, verified credential validation workflows, mobile APK static-analysis pipelines, and identity-fabric discovery routines. Ideal for penetration testers, bug bounty hunters, and security teams, this skill standardizes asset discovery, endpoint scoring, and leak identification with copy-paste terminal probes and rigorous evidence hygiene.

主要功能

01Mobile APK static-analysis pipeline for extracting exported components, deep links, and embedded secrets
02Curated dork corpus spanning GitHub code search, Google, Shodan, and public SaaS platforms
03Extensive probe paths and wordlists for Swagger, GraphQL, cloud buckets, and identity fabrics
042,955 GitHub stars
0580-pattern secret-regex catalog covering modern AI keys, cloud providers, and SaaS tokens
06Read-only credential validators and post-discovery enumeration workflows for AWS, Slack, and GitHub

使用场景

01Proactive credential leak triage and organizational exposure assessments
02Authorized external red-team reconnaissance and attack surface mapping
03Bug bounty asset discovery, endpoint enumeration, and API profiling