Download

Skill UI

Browse and discover 19345+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Recon , found 275 results

Default Newest Most Downloaded

Mobile Pentest Methodology

offensive-mobile

SnailSploit/Claude-Red

A practical offensive methodology for Android and iOS app testing. It covers static analysis, Frida/Objection instrumentation, SSL pinning bypass, exported component abuse, insecure storage review, and mobile API reconnaissance for pentest and bug bounty work.

Wi-Fi Reconnaissance

offensive-wifi-recon

SnailSploit/Claude-Red

Methodology for passive Wi-Fi reconnaissance: choose compatible adapters, enable monitor mode, set regulatory domains, sweep 2.4/5/6 GHz bands, identify hidden SSIDs, clients, vendors, and encryption before active wireless attacks.

API Reconnaissance and Documentation Review

api-recon-and-docs

yaklang/hack-skills

A comprehensive playbook for API reconnaissance and documentation review. Use this skill early in the testing process to enumerate all reachable endpoints, extract schemas, identify hidden versions (e.g., v1, v2, mobile), and discover undocumented parameters or fields across REST, GraphQL, and mobile APIs. Essential for mapping the full attack surface before deeper exploitation.

API Security Testing Router

yaklang/hack-skills

This skill serves as the central entry point for comprehensive API security testing. It guides testers to systematically categorize and prioritize potential vulnerabilities by focusing on core dimensions such as documentation review (Recon), object-level authorization (BOLA), token integrity (JWT), and complex data structures (GraphQL/Hidden Params). Use this as the initial step when assessing a new REST or GraphQL endpoint.

GraphQL And Undocumented Parameter Testing

graphql-and-hidden-parameters

yaklang/hack-skills

A comprehensive playbook for advanced API security testing targeting GraphQL and REST APIs. It guides users through schema introspection, discovering hidden or undocumented fields, analyzing batching capabilities, and identifying authorization gaps (like IDORs). Essential for deep reconnaissance and identifying privilege escalation vectors.

Advanced Memory Forensics Playbook

memory-forensics-volatility

yaklang/hack-skills

A comprehensive guide for advanced memory forensics using Volatility 2 and 3. This playbook covers artifact extraction, including hidden process detection, network connections, credential dumping, DLL analysis, and code injection detection (malfind). It is essential for incident response, malware analysis, and reconstructing attack timelines from memory dumps.

OSINT Methodology For External Red Teaming

osint-methodology

elementalsouls/Claude-OSINT

A comprehensive methodology for executing external Open Source Intelligence (OSINT) reconnaissance and authorized red-team operations. It guides users through a multi-stage attack surface assessment pipeline, covering asset discovery, confidence scoring, vulnerability prioritization, breach correlation, and structured client reporting for professional security assessments.

Expert Bug Bounty Reconnaissance Methodology

recon-and-methodology

yaklang/hack-skills

A comprehensive playbook for professional bug bounty hunting and penetration testing. This guide covers systematic reconnaissance, from initial asset discovery (subdomains, IPs) and technology fingerprinting to advanced endpoint and source code mining. Learn the structured methodology used by top hunters to maximize coverage and find high-severity vulnerabilities.

Recon and Methodology Router

yaklang/hack-skills

Entry-level reconnaissance router for new targets and unknown attack surfaces. Helps map scope, discover assets, fingerprint technology, inventory endpoints, and choose the first high-value security testing path.

VM Bytecode Reverse Engineering Playbook

vm-and-bytecode-reverse

yaklang/hack-skills

This playbook provides expert techniques for reverse engineering custom virtual machines and proprietary bytecode. It guides users through identifying dispatchers (switch/table), mapping unknown opcodes, reconstructing custom ISAs, and writing dedicated disassemblers. Essential for solving complex CTF challenges, analyzing protected software, or tackling custom runtime environments.

Building Robust Kubernetes Operators

kubernetes-operator

alirezarezvani/claude-skills

A specialized skill for building and auditing Kubernetes Operators. It focuses on the core principle of the declarative reconcile loop, helping developers identify and fix common operational bugs such as status drift, missing finalizers, and incorrect RBAC. Includes tools to validate CRD specifications, lint controller code, and audit capability levels against industry best practices.

Multi-Model Board Memo Review

alirezarezvani/claude-skills

Runs a board memo or strategy brief through Claude, Codex, and Gemini for independent cross-review, reconciling consensus and divergence before high-stakes irreversible decisions like fundraises, M&A, layoffs, or pivots.

Prev 1 2 3...7 8 91011 12 13...21 22 23 Next

Language