SuperAPI AI DirectoryFind an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-22 00:14
7,294 results
RabbitMQ unauthorized access and exploitation. Use when a target is found with ports 5672/15672 open, the RabbitMQ Management API exposed, default credentials guest/guest unchanged, or when message data needs to be stolen from RabbitMQ. Covers default credential attacks, Management API enumeration, bulk export of queue messages, Exchange...
RDP service (port 3389) penetration testing methodology. Covers RDP service discovery, credential brute forcing, known vulnerabilities such as BlueKeep, RDP session hijacking, NLA bypass, and RDP man-in-the-middle attacks. When an Agent scan discovers that port 3389 is open, needs to test RDP authentication strength, enumerate domain information, or perform session hijacking, this Skill is triggered.
Redis service (port 6379) penetration testing methodology. Covers Redis service discovery, unauthorized access, information extraction, writing webshell, SSH key writing, master-slave replication RCE, Lua sandbox escape. When an Agent scan discovers port 6379 open, needs to test Redis unauthorized access, write files to the target, or use Redis to obtain RCE…
SonarQube code audit platform attack. Use when a target is found running a SonarQube instance (default port 9000), the default credentials admin/admin have not been changed, or project source code and vulnerability information need to be stolen from SonarQube. Covers default credential attacks, project source code theft, vulnerability/Issue enumeration (CRITICAL first), user credentials and Token…
SQL Server penetration testing and exploitation. Use when discovering a target with port 1433 open, SQL Server allowing remote connections (weak SA password), needing to extract data from the database, or achieving command execution. Covers unauthorized access, database enumeration and export, xp_cmdshell command execution, sp_OACreate COM object exploitation, BULK INSERT...
SSH service (port 22) penetration testing methodology. Covers SSH service discovery and version identification, authentication method enumeration, username enumeration (CVE-2018-15473), credential brute forcing (password/key), SSH tunneling and port forwarding, known vulnerability exploitation, SSH key theft and reuse. When an Agent scan finds port 22 open, needs to test SSH authentication strength, enumerate SSH users, or through...
Terraform state file and infrastructure-as-code attacks. Use when the target is found to use Terraform to manage infrastructure, a terraform.tfstate file is found, a remote state backend (S3/Consul/HTTP) is accessible, or the Terraform code repository can be modified. Covers state file credential extraction, remote state…
VNC service (ports 5900/5901) penetration testing methodology. Covers VNC service discovery, password brute-forcing, unauthenticated access, VNC password file decryption, and known vulnerability exploitation. When an Agent scan finds ports 5800/5900/5901 open, needs to test VNC authentication strength, attempts unauthenticated access, or decrypts VNC password files, this Skill is triggered.
Adversarial scenario analysis and threat modeling for Solidity smart contracts. Use when analyzing contracts from an attacker's perspective, identifying…
Authentication and authorization patterns. Use when implementing login flows, JWT tokens, session management, password security, OAuth 2.1, Passkeys/WebAuthn,…
This skill should be used when the user asks to "perform mobile application penetration testing", "test Android app security", "bypass SSL pinning", "analyze…
Generates a structured penetration testing report based on OWASP standards including OWASP Top 10, ASVS, and WSTG methodology. Scans code for vulnerabilities,…
Setup and manage Gemini CLI authentication methods including OAuth, API keys, and Vertex AI. Use when configuring Gemini access, switching auth methods, or…
Use this skill when implementing security measures or conducting security audits. Provides OWASP Top 10 mitigations, authentication patterns, input validation…
External research synthesis from Trail of Bits, SlowMist, ConsenSys, Immunefi, and Cyfrin. Use this for advanced audit methodology, Echidna/Medusa fuzzing…
Azure Cosmos DB security best practices: disabling local authentication (keys), managed identity with DefaultAzureCredential, network access restrictions, RBAC…
This skill should be used when the user asks to "encrypt message with BSV key", "decrypt with private key", "ECDH encryption", "AES-256-GCM BSV",…
Post notes, send encrypted messages, and interact with relays using the Nostr protocol.
Minimal smoke test for KMS skill. Validate auth and read-only key listing path.
Run an OWASP ZAP baseline security scan locally using Docker. Checks for the ZAP baseline script, executes the scan, and summarizes findings by risk level with…
Review and analyze authentication and authorization patterns for security vulnerabilities.
Security audit covering authentication, SQL injection, secret exposure, CSRF, and OWASP Top 10 vulnerabilities.
Use when conducting security reviews, investigating vulnerabilities, or creating security documentation - provides systematic methodology for code audits with…
This skill should be used when the user asks to "add a provider", "configure google oauth", "set up microsoft login", "azure ad authentication", "oauth…