القائمة
Use the built-in SecLists wordlists for authorized discovery, fuzzing, credential audits, and payload selection.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
Use agent-browser-cli to perceive and control the supervised Chrome browser inside the sandbox, interact with pages, capture screenshots/PDFs, inspect cookies/CDP/network/console state, and troubleshoot only when needed.
Use OWASP Amass for authorized asset discovery, domain enumeration, and DNS intelligence on in-scope targets.
Use apktool for authorized Android APK resource decoding, manifest review, smali inspection, rebuild checks, and static mobile artifact triage.
Use file, 7z, unzip, tar-compatible tools, hashes, and bounded shell inspection for safe triage of provided archives and unknown files.
Use binwalk for authorized firmware, binary blob, archive, filesystem, and embedded-content triage with bounded extraction and evidence handling.
Use the pwntools-provided checksec CLI for authorized ELF hardening review, mitigation checks, and binary triage evidence.
| name | seclists |
| description | Use the built-in SecLists wordlists for authorized discovery, fuzzing, credential audits, and payload selection. |
Use the built-in SecLists copy as the default wordlist source for authorized discovery and fuzzing tasks. Treat it as the archive snapshot bundled at image build time.
SecLists is installed at:
/opt/seclists
/usr/share/seclists
Use /usr/share/seclists in commands unless a task needs the canonical install path.
ffuf, gobuster, hydra, or custom scripts only within the authorized scope.SECLISTS_REF.Select wordlists at runtime from the relevant SecLists area instead of assuming specific filenames are stable across upstream snapshots:
/usr/share/seclists/Discovery/Web-Content
/usr/share/seclists/Discovery/DNS
/usr/share/seclists/Usernames
/usr/share/seclists/Passwords
/usr/share/seclists/Fuzzing
/usr/share/seclists/Payloads
Pick candidate files at runtime with broad, task-oriented patterns and verify the selected path before a long run:
find /usr/share/seclists/Discovery/Web-Content -maxdepth 2 -type f | sort | sed -n '1,40p'
wordlist="$(find /usr/share/seclists/Discovery/Web-Content -maxdepth 2 -type f -iname '*small*' | sort | sed -n '1p')"
test -n "$wordlist"
test -f "$wordlist"
Report the selected wordlist path, why it fits the task, and any tool command that consumed it.