crtvrffnrt/skills

1

pentest-xss XSS assessment skill for reflected XSS, stored XSS, DOM XSS, blind XSS, CSP bypass, WAF bypass, source-to-sink analys…

crtvrffnrt/skills

84

2

pentest-exploit-execution-payload-control Deterministic exploit execution and payload control from validated primitives. Use for exploit implementation, payloa…

crtvrffnrt/skills

59

3

pentest-business-logic-abuse Business logic and workflow abuse assessment for state-machine manipulation, race conditions, replay, quota abuse, or…

crtvrffnrt/skills

57

4

pentest-recon-surface-analysis Reconnaissance and attack-surface mapping for endpoint discovery, asset inventory, service enumeration, technology fi…

crtvrffnrt/skills

57

5

pentest-hacktricks-finder Support skill for HackTricks technique research, payload ideas, bypasses, prerequisites, caveats, and edge-case behav…

crtvrffnrt/skills

55

6

pentest-web-application-logic-mapper Web application logic mapper for spidering, crawling, hidden API discovery, workflow mapping, state-machine analysis,…

crtvrffnrt/skills

55

7

pentest-gemini-az Azure, Microsoft 365, Microsoft Graph, and Entra ID operator skill using the current Azure CLI session and `az rest` …

crtvrffnrt/skills

50

8

pentest-authentication-authorization-review Authentication and authorization security assessment for sessions, tokens, MFA, account takeover, IDOR, BOLA, BFLA, p…

crtvrffnrt/skills

49

9

pentest-evidence-structuring-report-synthesis Evidence structuring and report synthesis for confirmed findings, severity ranking, remediation guidance, executive s…

crtvrffnrt/skills

49

10

pentest-outbound-interaction-oob-detection Outbound interaction and OOB validation for SSRF callbacks, blind XSS beacons, webhook abuse, XXE/OOB behavior, DNS/H…

crtvrffnrt/skills

49

11

pentest-input-protocol-manipulation Input validation and protocol manipulation assessment for injection, parser differential testing, request smuggling, …

crtvrffnrt/skills

48

12

pentest-gemini-sub-htb Controlled lab skill for Hack The Box, CTF, and private lab workflows from reconnaissance, enumeration, vulnerability…

crtvrffnrt/skills

35

13

pentest-cve-vulnerability-research-helper CVE and vulnerability research skill for exact CVE lookup, product/version applicability, exploit maturity, KEV/PoC s…

crtvrffnrt/skills

34

14

incident-response-bec BEC and AiTM incident-response skill for suspicious sign-ins, mailbox abuse, forwarding, inbox rules, session theft, …

crtvrffnrt/skills

26

15

incident-response-main Defensive incident-response companion for Microsoft Entra ID, Microsoft 365, Defender, and mixed identity or endpoint…

crtvrffnrt/skills

20

16

incident-response-report Incident-response reporting skill for decision-ready summaries, timelines, containment records, executive handoff, re…

crtvrffnrt/skills

20

17

pentest-osint-linkedin Authenticated LinkedIn OSINT helper using local `cookies.txt` and bundled scripts for people, company, role, certific…

crtvrffnrt/skills

20

18

pentest-advanced-access-control-auditor Focused authorization assessment for access control, IDOR, BOLA, BFLA, RBAC, object ownership, function authorization…

crtvrffnrt/skills

13

19

pentest-htb-lab-specialist Controlled lab skill for Hack The Box, CTF, and private lab workflows from reconnaissance, enumeration, vulnerability…

crtvrffnrt/skills

13

20

pentest-cve-reverse-engineer Manual vulnerability research skill for finding advisories, downloading affected and fixed artifacts, diffing patches…

crtvrffnrt/skills

12

21

pentest-shodan-helper Shodan CLI-only search workflow for query design, filter selection, count/stats validation, and search-result retriev…

crtvrffnrt/skills

12

22

ib_trade-osint OSINT Intelligence Cycle & Prefilter skill. Transforms raw public information into actionable, trade-relevant intelli…

crtvrffnrt/skills

9

23

incident-response-fileanalyser Static malware reverse-engineering and threat-intelligence triage for unknown files, Windows EXE/PE binaries, scripts…

crtvrffnrt/skills

9

24

ib_trade-analysis AI-Supercycle Stock Analysis & Strategy skill. Generates high-conviction directional forecasts (8-day) for AI infrast…

crtvrffnrt/skills

8

25

ib_trade-execution Risk & Trade Execution skill. Governs capital allocation, risk management, and final order proposals for NeonTrade ba…

crtvrffnrt/skills

7

26

pentest-web-enumeration Authorized web enumeration for one or many websites or web applications, including live-target normalization, HTTP an…

crtvrffnrt/skills

7

27

ms-incident-response Microsoft incident-response skill for Entra ID, Microsoft 365, Defender for Endpoint, Defender for Identity, and Defe…

crtvrffnrt/skills

5

28

cloudflare-api-helper Minimal Cloudflare operational helper for Codex/Gemini CLI. Use for Cloudflare DNS, zones, proxy settings, WAF/rulese…

crtvrffnrt/skills

1