무료GitHub에 공개

arsenal

Wiki-first "what do I use" lookup - pick the automated TOOL (wiki/tools/), then the PAYLOAD/technique (wiki/payloads/ + wiki/cheatsheets/), for a surface/service/vuln-class BEFORE hand-rolling or working from memory. Use for "tool for <service>", "automated tools for web/<service>", "what should I run on <surface>", "which tool for <X>", "payloads for <X>", "payload arsenal", "cheatsheet for <X>", "how do I exploit <tech/class>", "exploit/attack chain for <X>", "arsenal", any SSRF/XSS/SQLi/SSTI/LFI/JWT/XXE/IDOR/NoSQL/deserialization/CSRF/CORS/CRLF/GraphQL/smuggling/web-cache/OAuth/SAML/MFA/crypto/LDAP/XPath/WebAuthn/file-upload/IMDS/prompt-injection/Modbus ask, plus "privesc arsenal", "CVE arsenal", "default creds", "nuclei templates", "sqlmap/hydra/nmap/bloodhound", "password attacks".

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Encod3d-Sec/TORCH

설치 방법 보기

포함된 파일(1)

SKILL.md3.9 KB

SKILL.md(원문)

설치하기 전에 에이전트에게 전달되는 지시 내용을 확인할 수 있습니다.

Arsenal

Wiki-first router. On any surface/service/vuln, get the documented TOOL and PAYLOAD from the wiki BEFORE hand-rolling or recalling from memory. The lookup itself is delegated to the fast parallel engine:

-> Skill(wiki-arsenal) - quick by default (one qmd search across all four areas, cheap, fire it constantly); say "deep" / "full arsenal" for the 4-parallel-agent synthesized + cached card. It covers wiki/tools + wiki/payloads + wiki/techniques + wiki/cheatsheets and returns the tool + payload + technique + commands.

The tables below are the at-a-glance index of what wiki-arsenal pulls from - use them to sanity-check its result, not as a substitute for the lookup. Order: automated tool -> technique -> capture.

1. Tool first (from `wiki/tools/` - don't improvise)

A service/surface is fingerprinted -> reach for the tool we already document for it. Have a tool for the service? Use it; do not hand-roll a curl/socket loop. ls wiki/tools/ for all 64.

Surface / service	Automated tools (`wiki/tools/<name>.md`)
Web HTTP(S)	httpx, whatweb, nikto -> ffuf/feroxbuster/gobuster (content) -> katana/gau (crawl) -> arjun (params) -> nuclei (CVE/misconfig) -> dalfox (XSS) -> wpscan (WP); gowitness, burp-suite/burp-mcp
Ports / host	nmap, rustscan, naabu
DNS / subdomains	subfinder, amass, dnsx, gau
SMB / Windows / AD	netexec, responder, impacket, bloodhound/powerview, kerbrute, certipy/rubeus, evil-winrm
Login / creds	hydra, medusa (brute) -> hashcat, john (crack) -> jwt_tool (JWT) -> swaks (SMTP)
Post-shell privesc	pspy + linpeas/peass (ALWAYS, first)
Pivot / tunnel	chisel, ligolo-ng
Cloud	pacu, scoutsuite, roadtools, trivy
Binary / RE / pwn	ghidra, radare2, gdb-gef, pwntools, angr, binwalk, jadx, apktool, frida
Secrets / SAST / forensics	trufflehog, trivy, semgrep, codeql, volatility, tshark

Read the tool page for the exact flags before running; no page -> qmd_query/Skill(wiki).

2. Then technique / payload (`wiki/payloads/` + `wiki/cheatsheets/`)

Vuln class -> wiki/payloads/<class>.md: sqli, xss, ssrf, ssti, xxe, idor, nosql, jwt, deserialization, command-injection, lfi-path-traversal, csrf, cors, crlf, graphql, api, auth-bypass, session, race-conditions, prototype-pollution, open-redirect, host-header, smuggling, web-cache, oauth-saml, mfa-bypass, crypto, ldap, xpath, webauthn-passkey, file-upload, imds-cloud-metadata, llm-prompt-injection, modbus, cicd.
Exploitation / privesc / chains -> wiki/cheatsheets/*: privesc-exploit-arsenal, cve-arsenal, attack-chains, linux-privesc / windows-privesc, default-credentials, nuclei-arsenal, sqlmap, password-attacks.

Read the matching page(s) BEFORE hand-rolling a payload/exploit. The full class-specific methodology lives in the matching hunt-* skill - hand off to it.

3. Capture the moment

Something lands (a confirmed vuln, creds, a shell, a flag) -> capture it AS it lands, not at the end. Capture is manual and live: run capture.sh (or Skill(screenshot)) into poc/ the moment a flag/shell lands, for the deliberate exploited/authed state so it can be manually reviewed.

리뷰

아직 리뷰가 없습니다. 사용해 본 소감을 남겨 주세요.

로그인 없이 쓸 수 있습니다. 사용 후기, 질문, 작동하지 않은 환경 등을 편하게 남겨 주세요.

아직 댓글이 없습니다. 첫 댓글을 남겨 보세요.

같은 저장소의 스킬

bb-workflow

무료

Autonomous bug-bounty campaign driver. Runs a full programme end to end with no operator approvals - the deterministic driver (scripts/campaign.py) owns pass state, generates the killchain board from recon, and prints the exact next action (including which Skill and tool to run) every turn. Use when starting or resuming a bug-bounty engagement, "run the bb workflow", "hunt this program", "9-pass campaign", or when handed a *.scope wildcard to test for TIER1 findings. Single agent, refuter-verified, wiki-first, tool-first.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Encod3d-Sec/TORCH3332026년 9월 1일 업데이트

campaign-health

무료

Health check for the bb/pt/ctf workflow driver subsystem - verifies everything is in place so every machine runs the same. Checks vault-content consistency (scripts present, JSON valid, routing wired, all 69 tool pages carry phase:, the tool index resolves, the hook edits are in place) AND per-machine wiring (the three workflow skills symlinked, hooks registered, imports work), then runs a live init->board->next smoke test. Use when setting up the workflow on a new machine, after a vault sync, when the driver misbehaves, or on "bb-health", "campaign health", "is the workflow set up", "check hooks and scripts", "why is the board not working".

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Encod3d-Sec/TORCH3332026년 9월 1일 업데이트

chrome-devtools-browser

무료

Bring up a REAL, visible, interactive chromium on the Kali VM that the operator logs into (Smart-ID / Mobile-ID / any manual auth or MFA/CAPTCHA), while the agent drives and observes it live through the chrome-devtools MCP (navigate, DOM snapshot, network capture, screenshots, console, evaluate). Use whenever a target needs a MANUAL login the agent cannot complete headlessly, when you need to capture an authenticated session / the real API calls a page makes, or to confirm/screenshot a DOM-XSS. Triggers - "open a browser", "log in manually", "smart-id / mobile-id / national id login", "mfa / 2fa login", "solve the captcha", "drive the browser", "capture the authenticated session / network".

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Encod3d-Sec/TORCH3332026년 9월 1일 업데이트

claude-md-improver

무료

OFFLINE FALLBACK for the claude-md-management plugin - prefer that plugin when it is installed. Audit and improve CLAUDE.md files - scan for CLAUDE.md files, evaluate quality against templates, output a report, then make targeted updates. Invoke explicitly (/claude-md-improver) when the plugin is unavailable.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Encod3d-Sec/TORCH3332026년 9월 1일 업데이트

coverage

무료

Show per-asset vuln-class coverage gaps for the active engagement so nothing in scope is skipped. Use when asked "coverage", "what haven't we tested", "test gaps", "are we thorough", or before calling an engagement done.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Encod3d-Sec/TORCH3332026년 9월 1일 업데이트

ctf-box

무료

Boot-to-root methodology for a full machine (THM/HTB/PG/CTF box, "get user.txt+root.txt", "root the box", "foothold to root"). Enforces basic-tool recon (nmap, nc, ffuf, nuclei, dig) before anything custom, wiki-first lookups, and ALWAYS pspy + linpeas/winpeas for privesc. Use when handed a box/IP to own end-to-end.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Encod3d-Sec/TORCH3332026년 9월 1일 업데이트

Encod3d-Sec의 스킬 모두 보기

이 스킬의 문제 신고

설치

명령으로 설치

npx skills add https://github.com/Encod3d-Sec/TORCH --skill arsenal

터미널에 붙여 넣고 실행합니다(Node.js 필요). Claude Code, Codex 등 설치할 에이전트를 고를 수 있습니다.

에이전트에게 부탁하기

다음 Agent Skill을 설치해 주세요.
https://github.com/Encod3d-Sec/TORCH/tree/main/skills/workflow/arsenal

먼저 SKILL.md와 첨부 파일의 내용을 확인해 수상한 처리(외부 전송, 인증 정보 읽기 등)가 없는지 확인한 뒤 Claude Code는 ~/.claude/skills/arsenal/, Codex는 ~/.agents/skills/arsenal/ 에 배치해 주세요.

이 문장을 그대로 Claude Code나 Codex에 보내면 내용을 확인한 뒤 설치해 줍니다.

GitHub에서 소스 보기

저장소: Encod3d-Sec/TORCH
스타: 333
포크: 48
카테고리: 업무 효율화
라이선스: MIT
원문 언어: 영어
최종 업데이트: 2026년 9월 1일

스킬은 에이전트를 위한 지시와 스크립트의 묶음입니다. cccskills는 내용의 안전성을 보증하지 않습니다. 설치하기 전에 내용을 확인하세요.

포함된 파일(1)

SKILL.md(원문)

Arsenal

1. Tool first (from wiki/tools/ - don't improvise)

2. Then technique / payload (wiki/payloads/ + wiki/cheatsheets/)

3. Capture the moment

리뷰

댓글

같은 저장소의 스킬

bb-workflow

campaign-health

chrome-devtools-browser

claude-md-improver

coverage

ctf-box

1. Tool first (from `wiki/tools/` - don't improvise)

2. Then technique / payload (`wiki/payloads/` + `wiki/cheatsheets/`)