Menú
Use the built-in SecLists wordlists for authorized discovery, fuzzing, credential audits, and payload selection.
Instalar con Codex o Claude Copia este prompt, pégalo en Codex, Claude u otro asistente, y deja que revise la página de la skill y la instale por ti.
Use agent-browser-cli to perceive and control the supervised Chrome browser inside the sandbox, interact with pages, capture screenshots/PDFs, inspect cookies/CDP/network/console state, and troubleshoot only when needed.
Use OWASP Amass for authorized asset discovery, domain enumeration, and DNS intelligence on in-scope targets.
Use apktool for authorized Android APK resource decoding, manifest review, smali inspection, rebuild checks, and static mobile artifact triage.
Use file, 7z, unzip, tar-compatible tools, hashes, and bounded shell inspection for safe triage of provided archives and unknown files.
Use binwalk for authorized firmware, binary blob, archive, filesystem, and embedded-content triage with bounded extraction and evidence handling.
Use the pwntools-provided checksec CLI for authorized ELF hardening review, mitigation checks, and binary triage evidence.
| name | seclists |
| description | Use the built-in SecLists wordlists for authorized discovery, fuzzing, credential audits, and payload selection. |
Use the built-in SecLists copy as the default wordlist source for authorized discovery and fuzzing tasks. Treat it as the archive snapshot bundled at image build time.
SecLists is installed at:
/opt/seclists
/usr/share/seclists
Use /usr/share/seclists in commands unless a task needs the canonical install path.
ffuf, gobuster, hydra, or custom scripts only within the authorized scope.SECLISTS_REF.Select wordlists at runtime from the relevant SecLists area instead of assuming specific filenames are stable across upstream snapshots:
/usr/share/seclists/Discovery/Web-Content
/usr/share/seclists/Discovery/DNS
/usr/share/seclists/Usernames
/usr/share/seclists/Passwords
/usr/share/seclists/Fuzzing
/usr/share/seclists/Payloads
Pick candidate files at runtime with broad, task-oriented patterns and verify the selected path before a long run:
find /usr/share/seclists/Discovery/Web-Content -maxdepth 2 -type f | sort | sed -n '1,40p'
wordlist="$(find /usr/share/seclists/Discovery/Web-Content -maxdepth 2 -type f -iname '*small*' | sort | sed -n '1p')"
test -n "$wordlist"
test -f "$wordlist"
Report the selected wordlist path, why it fits the task, and any tool command that consumed it.