Search
By uphiago
Skills
Sort:BestMost starsTrending todayTrending this weekTrending this monthNewestRecently updatedName
| # | Skill | Repository | Stars | Used in | Tokens | Auto-check | Licence | Updated |
|---|---|---|---|---|---|---|---|---|
| 1 | Flags API endpoints whose data or actions look like they should need a login but currently don't, as part of authorized security testing. | uphiago/ | 1.3k | — | ~2k | Automated safety check: Pass | MIT | 1 mo ago |
| 2 | Mine errorlog for creds, paths, SQL when leak hunt finds. An agent skill from uphiago/recon-skills. | uphiago/ | 1.3k | — | ~3.3k | Automated safety check: Pass | MIT | 1 mo ago |
| 3 | Analyze JS bundles and source maps for hardcoded secrets, API keys, JWTs, and internal endpoints | uphiago/ | 1.3k | — | ~2.6k | Automated safety check: Pass | MIT | 1 mo ago |
| 4 | A skill your agent uses when starting or restructuring an authorized external web and API assessment. | uphiago/ | 1.3k | — | ~1.9k | Automated safety check: Pass | MIT | 1 mo ago |
| 5 | Sensitive file scanning, path traversal bypass, vHost enum, .env extract, log mining, Varnish detect | uphiago/ | 1.3k | — | ~2.8k | Automated safety check: Notes | MIT | 1 mo ago |
| 6 | A skill your agent uses when protected HTTP routes return 401 or 403. | uphiago/ | 1.3k | — | ~3.1k | Automated safety check: Pass | MIT | 1 mo ago |
| 7 | Map organization IP infrastructure via ASN, CIDR, TLD expansion, and reverse DNS. | uphiago/ | 1.3k | — | ~1.6k | Automated safety check: Pass | MIT | 1 mo ago |
| 8 | Identify CMS, frameworks, and server technology stacks on live hosts. | uphiago/ | 1.3k | — | ~2k | Automated safety check: Pass | MIT | 1 mo ago |
| 9 | Exchange/OWA NTLM AD leak, spray attack when mail subdomain. | uphiago/ | 1.3k | — | ~2.6k | Automated safety check: Pass | MIT | 1 mo ago |
| 10 | High-precision Google dorks for exposed configs, secrets, and credentials -- real-world validated | uphiago/ | 1.3k | — | ~1.1k | Automated safety check: Notes | MIT | 1 mo ago |
| 11 | Spoof HTTP/2 SETTINGS frames and pseudo-header order per browser profile. | uphiago/ | 1.3k | — | ~2.4k | Automated safety check: Pass | MIT | 1 mo ago |
| 12 | Human-like mouse, keyboard and scroll behavior for behavioral bot bypass. | uphiago/ | 1.3k | — | ~2.2k | Automated safety check: Pass | MIT | 1 mo ago |
| 13 | Attack cameras via RTSP, ONVIF, Axis config when 554 open. An agent skill from uphiago/recon-skills. | uphiago/ | 1.3k | — | ~2.3k | Automated safety check: Pass | MIT | 1 mo ago |
| 14 | Discover origin IPs behind CDN/WAF via favicon hash, DNS history, and SSL certs. | uphiago/ | 1.3k | — | ~1.7k | Automated safety check: Pass | MIT | 1 mo ago |
| 15 | Mass scan for exposed env files, backups, and git configs. An agent skill from uphiago/recon-skills. | uphiago/ | 1.3k | — | ~2.2k | Automated safety check: Notes | MIT | 1 mo ago |
| 16 | Launch stealth Chromium with C++ fingerprint patches for anti-bot bypass. | uphiago/ | 1.3k | — | ~2.2k | Automated safety check: Pass | MIT | 1 mo ago |
| 17 | Map subdomains via crt.sh and subfinder at recon kickoff. An agent skill from uphiago/recon-skills. | uphiago/ | 1.3k | — | ~3.3k | Automated safety check: Pass | MIT | 1 mo ago |
| 18 | Detect and verify subdomain takeover via dangling CNAME to unclaimed services. | uphiago/ | 1.3k | — | ~1.5k | Automated safety check: Pass | MIT | 1 mo ago |
| 19 | Spoof TLS ClientHello and JA4 fingerprints for browser impersonation. | uphiago/ | 1.3k | — | ~2.1k | Automated safety check: Pass | MIT | 1 mo ago |
| 20 | Discover hidden virtual hosts via Host header fuzzing and SSL certificate parsing. | uphiago/ | 1.3k | — | ~1.4k | Automated safety check: Notes | MIT | 1 mo ago |
| 21 | 21.Visual Recon Screenshot all live hosts for rapid visual triage and technology fingerprinting. | uphiago/ | 1.3k | — | ~1.5k | Automated safety check: Pass | MIT | 1 mo ago |
| 22 | Zimbra SOAP user enum, CVE-2022-37042, SSRF when webmail. An agent skill from uphiago/recon-skills. | uphiago/ | 1.3k | — | ~2.2k | Automated safety check: Pass | MIT | 1 mo ago |
| 23 | Find leaked API keys, tokens, and credentials in public GitHub repositories. | uphiago/ | 1.3k | — | ~1.8k | Automated safety check: Warn | MIT | 1 mo ago |
