hunt-ldap
Hunt LDAP Injection and XPath Injection
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-28 00:17
Security & auditing
7,611 results
hunt-lfi
Hunt Local File Inclusion (LFI), Remote File Inclusion (RFI), and Path Traversal
hunt-mfa-bypass
Hunt MFA / 2FA bypass
identity-federation
Authorized assessment of federated identity systems: SAML, OIDC, OAuth2 flows, SSO misconfiguration, and token-confusion issues.
mid-engagement-ir-detection
Methodology for detecting client SOC patches, attacker activity, and security-state changes that occur DURING a red-team engagement
model-supply-chain-security
Secure the AI model supply chain with artifact signing, provenance attestation, SBOM workflows, dependency controls, and trusted model promotion.
patch-diff-exploit
Locate vulnerability fixes in vendor patches, diff binaries across versions, and build N-day PoCs. Attack-side complement to binary-diff for authorized…
pci-dss-compliance
Implement PCI DSS requirements for payment card data. Configure cardholder data environment and security controls. Use when processing payment cards.
redteam-mindset
Red-team operator discipline
redteam-report-template
Client-facing red-team deliverable format
supply-chain-attack-recon
Authorized read-only review of public software supply-chain exposure
vmware-vcenter-attack
VMware vSphere / vCenter Server external attack matrix
web2-recon
Web2 recon pipeline
wifi-wireless
Authorized wireless security assessment: Wi-Fi capture, WPA handshake analysis, rogue AP detection research, and lab-only deauthentication testing.
sinch-authentication
Configures Sinch API credentials and authentication. Use when setting up OAuth2, Basic auth, application signing, or API keys for any Sinch product including…
sinch-number-lookup-api
Looks up phone number details via Sinch Number Lookup API. Use when checking carrier, line type, porting status, SIM swap, VoIP detection, or reassigned number…
sinch-verification-api
Verify phone numbers via SMS, Flashcall, Phone Call, Data (seamless carrier-level), or WhatsApp with Sinch Verification API. Use when implementing user phone…
adversary
Show CocoAdversary reviewer configuration and latest challenge results.
adversary-audit
Audit CocoAdversary configuration and reviewer separation.
adversary-gap
Record or show known CocoAdversary coverage gaps.
adversary-run
Run CocoAdversary challenge review against a target.
adversary-show
Show CocoAdversary findings.
audit-ci
V2-native deterministic contract for the owning CocoPlus feature. Executes the behavior formerly delegated to audit-ci skill without registered runtime scripts.
audit-events
V2-native deterministic contract for the owning CocoPlus feature. Executes the behavior formerly delegated to audit-events skill without registered runtime…