Skip to main content
affpapa.org
RU EN
skill

red-team-tools — Claude Code skill: what it does, how to install

Reconnaissance, fuzzing, and vulnerability scanning workflows for bug bounty hunting and penetration tests in Claude Code.

Install into Claude Code · claude-code-templates All methods and platforms ↓ 
npx claude-code-templates@latest --skill security/red-team-tools
Open on GitHub

What red-team-tools does

This skill equips Claude Code with structured offensive security steps based on bug bounty practices. It covers passive and active subdomain collection using amass and subfinder, host checking via httprobe or httpx, and technology fingerprinting through whatweb and nuclei.

The guide includes terminal command chains for content fuzzing with ffuf, historical URL scraping via waybackurls and gau, XSS automation with paramspider and dalfox, plus API route discovery.

Commands expect a Linux environment like Kali or Ubuntu alongside working Go, Python, and Ruby setups. Third-party data lookups fail without active API keys for Shodan or Censys.

What it helps with

  • enumerate target subdomains and filter responsive hosts
  • extract historical URLs and query parameters for fuzzing
  • run automated XSS checks on discovered parameters
  • scan hosts for known CVEs using Nuclei templates
  • discover hidden API routes and HTTP methods

Example prompts for the agent

  • Enumerate subdomains for target.com using amass and subfinder
  • Test extracted URL parameters for XSS vulnerabilities with dalfox
  • Build an ffuf command to discover hidden API endpoints

How to install red-team-tools

1claude-code-templates

npx claude-code-templates@latest --skill security/red-team-tools

2Skills CLI (Vercel)

npx skills add davila7/claude-code-templates --skill red-team-tools -a claude-code

3Manually: put the files in place

~/.claude/skills/red-team-tools/SKILL.md

Copy the whole skill folder; for one project use .claude/skills/red-team-tools/

Step by step, with commands for each platform: How to install skills in Claude Code: five ways

Questions about red-team-tools

How to install red-team-tools in Claude Code?

Run npx claude-code-templates@latest --skill security/red-team-tools or npx skills add davila7/claude-code-templates --skill red-team-tools -a claude-code. You can also place the file directly at ~/.claude/skills/red-team-tools/SKILL.md.

What does the red-team-tools skill do?

It provides offensive workflows and command references for target reconnaissance, endpoint fuzzing, and automated vulnerability scanning.

What prerequisites are needed to run these workflows?

You need a Linux system such as Ubuntu or Kali, installed runtimes for Go, Python, and Ruby, plus API credentials for services like Shodan and Censys.

Similar skills

All skills for Security →
git-guardrails-claude-code Matt Pocock This skill adds a Claude Code hook that stops risky Git commands before they run. Use it when an agent must not push or discard working-tree changes. 499,069installs ponytail-review DietrichGebert ponytail-review reviews a change beyond the diff, checking connected code, bugs, risks, load, tests, speed, and unnecessary code. Use it for PRs and commits. CX Codex +1 57,000installs ponytail-audit DietrichGebert It audits a repository and ranks bugs, risks, and redundant code in a one-shot report. Use it when you need a review without code changes. CX Codex +1 45,400installs security-audit cloudflare Reviews codebases and APIs for vulnerabilities using safe sandboxing. Fits pre-release security reviews, pen-test triage, and architecture checks. CX Codex +1 54,800installs security-and-hardening addyosmani Guides threat modeling and security checks for code that handles user input, authentication, sessions, or external services. Use it when building a feature that accepts untrusted data or reviewing code before release. CX Codex +1 70,200installs supabase official supabase Guides the agent through database configuration and strict RLS policies in Supabase. CX Codex GP ChatGPT 8installs

From the same set804

The whole set →
shell-wrapper-guard Checks Bash commands for destructive actions concealed in shell wrappers. It helps catch bypasses that direct command checks can miss. 212installs implement-graphql-api A slash command that builds a GraphQL API: schema, resolvers, subscriptions and N+1 protection. Useful when you need a real backend, not a sketch. 212installs desktop-notification-on-stop This hook sends a desktop alert when Claude Code finishes a response. Use it to catch the handoff while working in another window. 211installs gpt-5-beast-mode Autonomous subagent engineered to resolve stubborn coding tasks through terminal execution, targeted code search, and automated test loops. 210installs vercel-deploy Deploys websites and web apps to Vercel directly from Claude Code, returning instant preview links. 209installs remove Removes a task from the orchestration system and updates every reference to it. Useful when a task is obsolete or duplicated. 209installs commit-guardian Runs a 10-point automated inspection on staged git files and stops the commit if tests fail, secrets appear, or rules break. 208installs ascii-ui-mockup-generator This subagent sketches UI concepts as ASCII mockups, giving you several layout, form and dashboard options before any code is written. 207installs

Project sponsors

Companies that keep this analytics open
Gold sponsor
Nutra.Club

Impressions, clicks and code copies — open statistics. We keep the numbers public for the same reason NeBlask itself is public. Become a sponsor