<Devsly/>
NotebookLM Watermark Remover
Remove the NotebookLM watermark from PDF slide exports — free, unlimited, and 100% in your browser.
View
NotebookLM Video Watermark Remover
Remove the NotebookLM watermark from every frame of your MP4 and auto-trim the end card — free and unlimited.
View
Gemini Watermark Remover
Remove the Gemini (Veo) sparkle watermark from every frame of your AI-generated MP4 — free and unlimited.
View
MCP https://devsly.io/mcp MCP Tools Best Skills API Docs
Devsly

Keyboard Shortcuts

Navigation

Quick Search
⌘ / Ctrl + K
Toggle Dark Mode
⌘ / Ctrl + D
Close Dialogs
Esc

Tool Actions

Execute / Process
⌘ / Ctrl + Enter
Clear Input
⌘ / Ctrl + Shift + C
Copy Output
⌘ / Ctrl + Shift + X

Editor

Select All
⌘ / Ctrl + A
Undo
⌘ / Ctrl + Z
Redo
⌘ / Ctrl + Shift + Z

Updated 4mo ago

by crazyMarky

pentest-skills

💬 🚀 告别繁琐命令行，用自然语言驱动专业级渗透测试。 ⚡ 让安全测试从未如此简单、高效。Forget complex command lines. 🛡️ Professional penetration testing, powered by natural language.

  • Multi-agent — Targets three or more agents
Works with
  • Claude
  • Codex
  • Gemini
  • OpenCode
View on GitHub (opens in a new tab)

334 GitHub stars (334)

+10 in 16 days

Stars gained per day · daily snapshots since Sep 30
Stars gained per day, Sep 30 to Oct 16: +10 in total; the busiest day was Oct 10 with +2 stars.Oct 1: 0 starsOct 2: +1 starsOct 3: 0 starsOct 4: 0 starsOct 5: +1 starsOct 6: +1 starsOct 7: +1 starsOct 8: +1 starsOct 9: 0 starsOct 10: +2 starsOct 11: 0 starsOct 12: −1 starsOct 13: 0 starsOct 14: +2 starsOct 15: +1 starsOct 16: +1 stars
Stars gained between daily snapshots
PeriodNew stars
Oct 10
Oct 2+1
Oct 30
Oct 40
Oct 5+1
Oct 6+1
Oct 7+1
Oct 8+1
Oct 90
Oct 10+2
Oct 110
Oct 12−1
Oct 130
Oct 14+2
Oct 15+1
Oct 16+1
  • 10 skills (10 skills found in its SKILL.md files)
  • 35 forks (35 forks)
  • 4mo ago last update (Last updated 4mo ago)

Install

Skills CLI

npx skills add crazyMarky/pentest-skills

Asks which skills and agents to install. Just one: npx skills add crazyMarky/pentest-skills --skill exploit-file-download — add -g for every project.

Claude Code

git clone https://github.com/crazyMarky/pentest-skillscp -r "pentest-skills/exploit-file-download" ~/.claude/skills/

Copies the exploit-file-download skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project). Repeat for the other skills listed below.

Plugin

/plugin marketplace add crazyMarky/pentest-skills

Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.

Skills can run code on your machine — read the SKILL.md first.

What it does

In the author's own words, from each skill's SKILL.md.

  • exploit-file-download

    任意文件下载与本地文件包含 (LFI) 漏洞检测和利用工具。使用 curl、ffuf、wget 等工具测试文件下载漏洞，支持路径遍历、伪协议利用、敏感文件读取。当用户需要测试文件下载功能、检测 LFI 漏洞、读取服务器敏感文件时使用此技能。

    exploit-file-download/SKILL.md on GitHub (opens in a new tab)

  • exploit-lfi

    本地文件包含 (LFI) 漏洞检测和利用工具。使用 curl、ffuf 等工具测试 LFI 漏洞，支持路径遍历、PHP 伪协议利用、日志投毒 RCE、敏感文件读取。当用户需要检测 LFI 漏洞、利用文件包含漏洞读取服务器文件时使用此技能。

    exploit-lfi/SKILL.md on GitHub (opens in a new tab)

  • exploit-sqli

    SQL injection detection and exploitation using sqlmap, manual techniques, and custom payloads. Use this skill when user needs to test for SQL injection vulnerabilities, extract database information, or exploit SQLi in parameters, headers, or cookies.

    exploit-sqli/SKILL.md on GitHub (opens in a new tab)

  • exploit-xss

    Cross-site scripting (XSS) vulnerability detection and exploitation. Supports reflected XSS, stored XSS, DOM-based XSS, and blind XSS testing. Use this skill when user mentions XSS, cross-site scripting, script injection, or needs to test JavaScript injection in parameters, forms, headers, or DOM sources.

    exploit-xss/SKILL.md on GitHub (opens in a new tab)

  • pentest-report

    按照标准格式生成渗透测试报告，包含项目信息表、漏洞发现清单、漏洞详情（含属性表、描述、复现步骤、证据截图、修复建议）、附录（风险等级定义、CVSS说明、词汇表）。当用户要求生成渗透测试报告、安全测试报告、漏洞报告时使用此技能。严格遵循项目模板目录中的标准格式。

    pentest-report/SKILL.md on GitHub (opens in a new tab)

  • recon-dir-scan

    Directory and file enumeration using ffuf, gobuster, dirsearch, and feroxbuster. Use this skill when user needs to discover hidden directories, enumerate files, find backup files, or map application structure through path fuzzing.

    recon-dir-scan/SKILL.md on GitHub (opens in a new tab)

  • recon-fingerprint

    Web fingerprinting and WAF detection using wafw00f, whatweb, nuclei, and httpx. Use this skill when user needs to identify web technologies, detect WAF/CDN, analyze server headers, or fingerprint web applications and frameworks.

    recon-fingerprint/SKILL.md on GitHub (opens in a new tab)

  • recon-port-scan

    Port scanning and service identification using nmap, masscan, and rustscan. Use this skill when user needs to discover open ports, identify running services, detect service versions, or fingerprint operating systems on target hosts.

    recon-port-scan/SKILL.md on GitHub (opens in a new tab)

  • recon-subdomain

    Subdomain enumeration and DNS reconnaissance using subfinder, amass, dnsx, and other tools. Use this skill when user needs to discover subdomains, perform DNS enumeration, gather DNS records, or find hidden subdomains of a target domain.

    recon-subdomain/SKILL.md on GitHub (opens in a new tab)

  • results-storage

    SQLite-based persistent storage and reporting system for penetration testing results. Use this skill when user needs to store scan results, query vulnerabilities, generate reports, or manage pentest data across sessions.

    results-storage/SKILL.md on GitHub (opens in a new tab)

Review before you install

A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.