面向 Claude Code 的专业渗透测试技能模块。严格遵循 PTES 标准，覆盖信息收集、漏洞利用、后渗透与免杀规避全阶段。后续不在更新skill，如需使用建议二开。
☆259Sep 29, 2026Updated 3 weeks ago
Alternatives and similar repositories for SecSkills
Users that are interested in SecSkills are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 收集整理渗透测试、漏洞扫描、代码审计、CTF、逆向、安全研究 等网络安全相关的 Skills和MCP☆1,196Sep 14, 2026Updated last month
- 网站渗透测试 Skill — 目标识别、CDN/WAF检测、指纹架构、API发现、端口扫描、未授权与漏洞验证☆32Jun 8, 2026Updated 4 months ago
- SecKnowledge - Web与AI安全测试知识技能☆435Jun 17, 2026Updated 4 months ago
- 实战 SRC / 众测 / Bug bounty 漏洞挖掘 Claude Code skill — 19 个攻击类 playbook、305 个结构化 payload、263 个 WAF/EDR 绕过、2887 份 HackerOne 真实案例、88,636 WooYun …☆639May 24, 2026Updated 4 months ago
- 🛡️ 自动化渗透测试调度平台 — Claude Code 生态. AI 驱动 / 多目标并发 / 动态 skill 加载 / 实时观测☆34Jul 8, 2026Updated 3 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- 💬 🚀 告别繁琐命令行，用自然语言驱动专业级渗透测试。 ⚡ 让安全测试从未如此简单、高效。Forget complex command lines. 🛡️ Professional penetration testing, powered by natural lan…☆342Jun 4, 2026Updated 4 months ago
- 一个针对业务系统功能的全自动化平台☆61Jun 10, 2026Updated 4 months ago
- 渗透测试实战工作流 skill for Claude Code - 5阶段方法论/19类攻击playbook/2887份H1真实案例/国产组件指纹库☆38Sep 14, 2026Updated last month
- Vibe Pentest 是一款模拟人类安全专家思维挖掘漏洞的 AI 渗透测试工具，采用多 Agent 并行执行架构，能够对 Web 应用、API、管理后台等进行全面的渗透测试（包括业务逻辑漏洞评估），输出稳定可靠的安全报告，并提供可落地的整改建议。☆361Sep 21, 2026Updated last month
- 综合漏洞后渗透利用工具☆1,786Dec 11, 2025Updated 10 months ago
- Professional file upload vulnerability testing tool with 263+ bypass techniques, proxy capture, dynamic scanning（专业的文件上传漏洞检测工具，支持263+绕过技术…☆264Aug 16, 2026Updated 2 months ago
- 自动化 SRC 漏洞挖掘系统：FOFA 资产测绘 + LLM 多 worker 自主挖掘/审核/情报沉淀。Powered By StanleyNull☆503Oct 12, 2026Updated last week
- 🛡️ 网络安全/AI Agent Skills 集合 | Cybersecurity Security Skills Collection☆345Jun 25, 2026Updated 3 months ago
- LeakDetector 是一款专为红队渗透测试人员和安全研究员设计的自动化信息泄露侦察工具。☆123Jun 9, 2026Updated 4 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- 自用yakit规则分享☆50Apr 18, 2025Updated last year
- 开源项目，所有项目仅供参考学习，禁止用于任何违法行为，任何违法行为需使用者本人自己承担相应法律责任。☆94Jan 17, 2026Updated 9 months ago
- 红队浏览器插件-检 测VUE站点未授权漏洞☆944May 7, 2026Updated 5 months ago
- 掘地三尺（DigDeep）：覆盖云安全 、小程序、APP、web等常见敏感信息泄露类型，一键挖掘源码中的密码/密钥/手机号/身份证/云服务AK、SK等近百类敏感数据。☆95Apr 12, 2026Updated 6 months ago
- OneScan扩展，原项目已停更，此项目为二开项目,插件ID精简为OST☆55Sep 3, 2026Updated last month
- Hengge team develops JavaScript specifically for loading Webpack for batch reading☆340Jun 11, 2026Updated 4 months ago
- PHP-Code-Audit-Skill是一个专注于PHP代码审计的Skill☆406Mar 25, 2026Updated 6 months ago
- JDumpSpiderGUI 是一个用于 Java 堆转储文件分析的工具，支持命令行和 JavaFX 图形界面两种模式。该工具主要是在原工具上添加了图形化的界面☆181May 5, 2025Updated last year
- Android 应用安全漏洞自动检测系统☆33Jun 15, 2026Updated 4 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- 基于已收集指纹库进行识别网站指纹的浏览器插件☆122Jul 30, 2025Updated last year
- Nuclei POC 管理与漏洞验证工具-Nuclei GUI☆547Apr 24, 2026Updated 5 months ago
- WAFBypass 是一款高级Web应用防火墙（WAF）检测与绕过工具，旨在回答一个问题："目标真的有WAF防护吗？" 它能够检测目标Web应用是否受到防火墙保护，并自动尝试寻找有效的绕过方法。☆21Sep 26, 2026Updated 3 weeks ago
- GYscan是一款基于Go语言开发的现代化综合渗透测试工具，专为安全研究人员、渗透测试工程师和红队成员设计。项目采用模块化架构，包含C2服务器端和客户端组件，支持Windows和Linux平台，提 供系统安全分析和漏洞扫描功能。☆84Oct 16, 2026Updated last week
- Modern attack-surface reconnaissance & asset monitoring platform — rebuilt from classic ARL with async decoupled scheduling, enterprise a…☆470Updated this week
- 🚀 AI-Powered Red Team & Pentest Toolkit | 赋能红队与渗透测试的 AI 工具集☆121Jan 6, 2026Updated 9 months ago
- A Burp Suite extension that puts an LLM-driven vulnerability scan behind a right-click — or behind Proxy auto-scan (off by default), whic…☆100Sep 27, 2026Updated 3 weeks ago
- Web黑盒渗透测试技能☆139Jun 27, 2026Updated 3 months ago
- Burpsuite存储桶配置不当漏洞检测插件☆200Jul 16, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Chrome 浏览器插件-企业弱口令字典生成工具☆48May 21, 2026Updated 5 months ago
- ☆127Dec 16, 2025Updated 10 months ago
- 一款综合性网络安全检测和运维工具，旨在快速资产发现、识别、检测，构建基础资产信息库，协助甲方安全团队或者安全运维人员有效侦察和检索资产，发现存在的薄弱点和攻击面。☆4,450Updated this week
- 致命精准的红队作战兵器。模块化集成资产发现、漏扫与利用，重新定义渗透测试工作流 (Workflow) 的新一代安全平台。☆408Jun 29, 2026Updated 3 months ago
- 专注于代码审计skill，最小化轻量化skill，只负责安全边界。☆1,037Jun 16, 2026Updated 4 months ago
- TsoJanScan Burp Plugins Secondary Development☆104Jan 15, 2026Updated 9 months ago
- 微信小程序全自动安全审计 Skill，基于 Claude Code Agent Teams。7 Agent 协作，覆盖敏感信息、API接口、加密分析、漏洞分析四大维度。采用脚本+LLM双层架构，脚本保证覆盖率，LLM保证准确率。☆411Apr 3, 2026Updated 6 months ago