recon-skills
Security testing toolkit covering vulnerability detection for CORS, XSS, SQLi, and more.
- Type
- Agent Skill
- Open source
- Yes
- GitHub Stars
- ★ 1.0k
- Source
- skill-github
- Repository
- github.com/uphiago/recon-skills
Overview
recon-skills is a battle-tested security testing toolkit designed for authorized penetration testing and vulnerability scanning. It includes multiple attack techniques such as CORS, XSS, SQLi, SSRF, and supports various scenarios including WordPress, cloud services, and subdomain takeover. These skills are provided as native terminal commands, making them easy to integrate into automation tools. Suitable for security researchers and red team members.
Capabilities
- ▪CORS vulnerability detection
- ▪XSS vulnerability detection
- ▪SQL injection detection
- ▪SSRF vulnerability detection
- ▪RCE vulnerability detection
- ▪WordPress security detection
Use cases
Setup
git clone https://github.com/uphiago/recon-skills.git
This information was compiled by AI from public sources and may contain inaccuracies — please refer to the source.
FAQ
Yes, it's open source under the MIT license.
Yes, MIT license.
How do I get started?
Clone the repository and follow the instructions in the README.
Related skills
mantis
Provides security review capabilities for AI coding agents, automatically discovering, reproducing, and fixing vulnerabilities.
sast-skills
Transform your AI coding assistant into a SAST scanner to automatically detect vulnerabilities in code.
Lightswind-UI-Library
AI-native CLI-first React component library with MCP Server support.
scientific-agent-skills
Transform any AI agent into a scientific assistant with 147 ready-to-use research skills.
susi_alexa_skill
A skill that enables question-and-answer interactions between Alexa and Susi AI.
claude-context
Provides code search capabilities for Claude Code, turning the entire codebase into context.