NeVibeCode · 1,340 items
Skills for Security
Skills for Security: what each one does, an install command and example prompts.
format-string-exploitation skill Walks through exploiting printf-family calls that take a user-controlled format string: stack reads, writes via %n, GOT overwrites. Built for CTF work and binary review.
CX Codex +1
3,600installs
kernel-exploitation skill A Linux kernel security research playbook for AI coding assistants. It covers QEMU debugging environments and mitigation mechanisms like KASLR and SMEP.
CX Codex +1
3,600installs
request-smuggling skill This skill tests HTTP desynchronization between front proxies and origin servers. Use it for CL.TE, TE.CL, HTTP/2-to-HTTP/1, and client-side desync checks.
CX Codex +1
3,600installs
file-access-vuln skill A routing skill for testing download endpoints, file paths, LFI and upload flows. It points the agent at the right topic skill.
CX Codex +1
3,600installs
xxe-xml-external-entity skill Guides your agent through XXE vulnerability auditing across XML, SVG, SOAP, and Office document parsing pipelines.
CX Codex +1
3,600installs
graphql-and-hidden-parameters skill A playbook for GraphQL and hidden parameter testing: introspection, batching, undocumented fields and authorization gaps.
CX Codex +1
3,600installs
ssti-server-side-template-injection skill An SSTI playbook: find server-side template injection, fingerprint the engine, and follow the chain to command execution.
CX Codex +1
3,600installs
binary-protection-bypass skill A skill that walks through ELF binary protections and the bypass for each one. Useful for CTF work and exploit analysis.
CX Codex +1
3,700installs
cmdi-command-injection skill This skill helps find command injection where user input reaches shells, process execution, converters, import pipelines, or blind OOB sinks.
CX Codex +1
3,700installs
anti-debugging-techniques skill Anti-debugging detection and bypass playbook for protected Linux and Windows binaries. Helps reverse engineers handle ptrace, PEB flags, execution timing checks, and thread hiding.
CX Codex +1
3,700installs
analyzing-ethereum-smart-contract-vulnerabilities skill Runs static and symbolic analysis on Solidity smart contracts using Slither and Mythril. Catches reentrancy, integer overflows, and access flaws before deployment.
CX Codex +1
393installs
trailmark-review-gate skill The skill runs structural security gates on branches or pull requests using Trailmark graph diffs. It flags removed auth checks, newly reachable sinks, and expanded attack surfaces.
CX Codex +1
1,300installs
trailmark-variant-neighborhood skill This skill expands a suspected vulnerability into related code locations for review. Use it before variant analysis, Semgrep, static analysis, or a manual audit.
CX Codex +1
1,300installs
trailmark-finding-triage skill Builds a graph evidence packet for a single security finding: reachability, entrypoint paths, taint and blast radius. Useful before you spend time on a PoC.
CX Codex +1
1,300installs
open-sourcing skill Walks a repository through the pre-release checklist: secret audit, license, docs, CI and packaging.
CX Codex +1
1,300installs
macos-process-injection skill A macOS process injection playbook covering dylib hijacking, DYLD preload tricks, and XPC PID reuse attacks. Built for security auditing and binary analysis.
CX Codex +1
3,500installs
nosql-injection skill A skill for testing NoSQL injection in MongoDB, CouchDB, and Redis. Use it to inspect APIs, flexible filters, and authentication logic.
CX Codex +1
3,500installs
ntlm-relay-coercion skill A playbook for capturing and relaying NTLM authentication to SMB, LDAP, HTTP and MSSQL targets, with PetitPotam, PrinterBug and other coercion methods.
CX Codex +1
3,500installs
macos-security-bypass skill A playbook for bypassing TCC, Gatekeeper, SIP and the sandbox on macOS. Built for authorized pentests and red team work.
CX Codex +1
3,500installs
symmetric-cipher-attacks skill A playbook for attacking symmetric encryption: CBC padding oracle, ECB cut-and-paste, stream cipher key reuse. Built for CTFs and authorized testing.
CX Codex +1
3,500installs
windows-lateral-movement skill A playbook for moving between Windows hosts with PsExec, WMI, WinRM, DCOM, RDP, pass-the-hash and pass-the-ticket. Useful once you already hold one machine.
CX Codex +1
3,500installs
rsa-attack-techniques skill Selects RSA cryptanalysis methods for weak keys or small exponents. Useful for CTF challenges and cryptographic security reviews.
CX Codex +1
3,500installs
lattice-crypto-attacks skill A playbook for lattice cryptanalysis: Coppersmith, LLL/BKZ, DSA and ECDSA nonce recovery. Built for CTF work and weak implementations.
CX Codex +1
3,500installs
steganography-techniques skill A detection and extraction playbook for steganography across images, audio, files and text. Useful for CTFs and forensic work.
CX Codex +1
3,500installs
stack-overflow-and-rop skill Exploitation playbook for hijacking control flow via stack buffer overflows, ret2libc, ROP chains, ret2csu, and ret2dlresolve on Linux binaries.
CX Codex +1
3,500installs
smart-contract-vulnerabilities skill This skill guides Solidity/EVM audits for reentrancy, access control, delegatecall, flash loans, signature replay and MEV attack patterns.
CX Codex +1
3,500installs
prototype-pollution-advanced skill A playbook for advanced prototype pollution: server-side RCE through template engines, client-side gadgets, filter bypasses and detection.
CX Codex +1
3,500installs
tunneling-and-pivoting skill A tunneling and pivoting playbook that equips agents with exact commands for SSH forwarding, Chisel, Ligolo-ng, socat relays, and multi-layer pivots.
CX Codex +1
3,500installs
classical-cipher-analysis skill Helps identify and analyse classical ciphers and encoded text in CTF tasks. Use it when the cipher type is still unclear.
CX Codex +1
3,500installs
container-escape-techniques skill A playbook for escaping Docker, LXC and Kubernetes pods to the host: privileged mode, capabilities, docker.sock, cgroups.
CX Codex +1
3,600installs
linux-lateral-movement skill A Linux lateral movement playbook: SSH agent hijacking, key and credential harvesting, tunnels, D-Bus abuse and sudo session reuse.
CX Codex +1
3,600installs
windows-privilege-escalation skill This skill guides authorized reviews of Windows local privilege-escalation paths after a low-privilege shell is available. Use it to inspect system configuration and token context.
CX Codex +1
3,600installs
memory-forensics-volatility skill A memory forensics playbook for Volatility 2 and 3: hidden processes, code injection, credential extraction and incident timelines.
CX Codex +1
3,600installs
type-juggling skill Helps identify and bypass weak equality checks and magic hashes in PHP code paths. Useful for legacy authentication audits and CTF challenges.
CX Codex +1
3,600installs
xslt-injection skill This skill tests XSLT injection by fingerprinting the processor and checking XXE, document() SSRF, EXSLT, and platform extension surfaces.
CX Codex +1
3,600installs
windows-av-evasion skill A playbook skill for bypassing AV and EDR on Windows: AMSI, ETW, .NET assembly loading, shellcode execution, process injection.
CX Codex +1
3,600installs
network-protocol-attacks skill A playbook for network protocol attacks: ARP spoofing, LLMNR and NBT-NS poisoning, WPAD abuse, DHCPv6 takeover, VLAN hopping. Built for internal pentests.
CX Codex +1
3,600installs
defi-attack-patterns skill A DeFi security playbook for reviewing flash loans, oracle manipulation, MEV, rounding bugs, governance exploits, bridges, and token edge cases.
CX Codex +1
3,600installs
analyzing-malicious-pdf-with-peepdf skill This skill statically inspects suspicious PDFs with peepdf, pdfid.py, and pdf-parser.py. Use it to triage attachments, inspect exploit documents, and collect detection indicators.
CX Codex +1
387installs
testing-api-for-mass-assignment-vulnerability skill Tests APIs for mass assignment by adding undocumented request fields and checking whether they persist. Use it for profile, registration, and object-creation endpoints.
CX Codex +1
385installs
561–600 of 1,340
