Agent Skills by Dave
Showing 115 vetted skills indexed across 1 GitHub repositories.
nikto
Scan web servers for known vulnerabilities, outdated software, and misconfigurations.
burpsuite
Intercept and modify HTTP/S traffic for web application security testing.
openvas
Run OpenVAS vulnerability scans against internal networks and generate compliance reports.
nuclei
Scan web applications and networks for known vulnerabilities using nuclei templates.
wpscan
Scan WordPress websites for vulnerabilities, users, plugins, and known CVEs.
lfisuite
Automate LFI vulnerability testing and exploitation to achieve remote code execution.
corsy
Scan web applications for exploitable CORS misconfigurations.
sqlmap
Automate SQL injection detection and exploitation across database backends.
tplmap
Automate SSTI detection and exploitation across template engines like Jinja2, Twig, and Smarty.
zap
Automate web application security scanning and vulnerability detection with OWASP ZAP.
commix
Detect and exploit OS command injection vulnerabilities in web applications.
dotdotpwn
Fuzz directory traversal and LFI vulnerabilities across HTTP, FTP, and TFTP services.
xsstrike
Detect and exploit XSS vulnerabilities in web applications with context-aware payloads.
cain-and-abel
Recovers Windows passwords by sniffing network traffic and cracking hash types.
john
Crack password hashes offline using CPU resources and multiple attack modes.
hashcat
Crack over 300 hash types with GPU-accelerated wordlist and mask attacks.
hydra
Perform online brute-force and password spraying attacks against over 50 network protocols.
cloakify
Encode files into innocuous strings using Cloakify ciphers for data exfiltration.
beef
Hook browsers via XSS and inject JavaScript for client-side attacks.
searchsploit
Search the local Exploit-DB database for exploits by software, version, or CVE.
donut
Convert .NET assemblies and Win32 executables into position-independent shellcode.
nim-shellcode-fluctuation
Encrypts in-memory shellcode with XOR or RC4 between C2 callbacks.
shellcode-fluctuation
Encrypt injected shellcode in memory during C2 sleep intervals.
shellter
Inject custom shellcode into Windows PE executables to evade antivirus detection.