recon-skills
Security testing toolkit covering vulnerability detection for CORS, XSS, SQLi, and more.
- Type
- Agent Skill
- Open source
- Yes
- GitHub Stars
- ★ 1.0k
- Source
- skill-github
- Repository
- github.com/uphiago/recon-skills
Overview
recon-skills is a battle-tested security testing toolkit designed for authorized penetration testing and vulnerability scanning. It includes multiple attack techniques such as CORS, XSS, SQLi, SSRF, and supports various scenarios including WordPress, cloud services, and subdomain takeover. These skills are provided as native terminal commands, making them easy to integrate into automation tools. Suitable for security researchers and red team members.
Capabilities
- ▪CORS vulnerability detection
- ▪XSS vulnerability detection
- ▪SQL injection detection
- ▪SSRF vulnerability detection
- ▪RCE vulnerability detection
- ▪WordPress security detection
Use cases
Setup
git clone https://github.com/uphiago/recon-skills.git
This information was compiled by AI from public sources and may contain inaccuracies — please refer to the source.
FAQ
Yes, it's open source under the MIT license.
Yes, MIT license.
How do I get started?
Clone the repository and follow the instructions in the README.
Related skills
gemini-cli
Gemini CLI is an open-source AI agent that brings Gemini's powerful capabilities directly into the terminal.
sast-skills
Transform your AI coding assistant into a SAST scanner to automatically detect vulnerabilities in code.
crabbox
Crabbox is a remote software testing and execution control plane that supports running commands on cloud or remote hosts.
scientific-agent-skills
Transform any AI agent into a scientific assistant with 147 ready-to-use research skills.
susi_alexa_skill
A skill that enables question-and-answer interactions between Alexa and Susi AI.
claude-context
Provides code search capabilities for Claude Code, turning the entire codebase into context.