All authors

Claude Skills by do-whilefor
github.com/do-whilefor6 skills0 installs8 views
- Web VulnhuntAuthorized security testing methodology for web apps, APIs, multi-tenant SaaS, Spring Boot / Cloud Gateway stacks, FIDO/WebAuthn passwordless auth, mobile backends, and OAuth/SSO integrations. Use whenever the user asks to test, probe, scan, find vulnerabilities in, or pentest any web service — including bug bounty engagements, authorized pentests, CTF challenges, post-patch re-verification, CVSS scoring, subdomain/asset discovery, WAF/auth-filter bypass, **authorization bypass / IDOR / broke...Votes: 0GitHub stars: 8
- FlounderOperates Flounder, an autonomous white-hat security auditor. Use when a user asks for a security audit, bug-bounty review, vulnerability investigation, or exploit proof for a public-source or authorized repository, source tree, package, smart contract, Solidity/EVM project, ZK or proof-system code, deployed address, transaction, project link, or prior Flounder run; to run Flounder prepare, map, dig, audit, verify, confirm, or report workflows; to configure Flounder server, daemon, provider pr...Votes: 0GitHub stars: 8
- Src Report将截图、PoC、请求响应和笔记整理为指定 SRC 的 Markdown 漏洞报告,包含证据筛选、CVSS 3.1 Base 评估、报告撰写、补证和平台转换。证据不足时输出线索记录;不执行 PoC、主动测试或提交漏洞。Votes: 0GitHub stars: 8
- Api Recon收集网站API接口时调用该skill。Votes: 0GitHub stars: 8
- Scopesentry通过 ScopeSentry MCP 管理安全扫描平台(项目、任务、模板、资产、节点)。在用户提到 ScopeSentry、MCP、API Key、扫描任务、资产查询时使用。Votes: 0GitHub stars: 8
- Tsec Actions在 tsec CTF/智能渗透比赛中,当需要对某道题提交 flag 时使用Votes: 0GitHub stars: 8