メニュー
[exploit] Generate a current 6-digit TOTP (RFC 6238) from a provided MFA secret, to complete logins for in-scope test accounts that have 2FA enabled. Reach for it during authenticated-session setup, not as an attack.
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
[exploit] Inspect and attack JSON Web Tokens — alg:none, key confusion (RS256→HS256), weak-secret cracking, claim tampering. Reach for it whenever the app authenticates with JWTs to test signature and verification flaws.
[recon] Fast SYN/CONNECT port scanner for hosts/CIDRs (Go, libpcap). Reach for it to find open ports across many hosts quickly, then hand the open services to nmap for deep fingerprinting.
[static-analysis] All-in-one scanner over the connected repo: dependency CVEs across MANY ecosystems (npm, NuGet/.NET, Maven, Go, pip, RubyGems…), plus IaC/Dockerfile/Kubernetes misconfig and a filesystem secret sweep. Reach for it in pre-recon/vuln-analysis for SCA on stacks osv-scanner under-covers and for deeper infra-misconfig than generic SAST.
[static-analysis] Static code analysis (SAST) over the connected repo — taint/pattern rules per vuln category, no live traffic. Reach for it in vuln-analysis to locate vulnerable code at file:line that DAST then confirms.
[static-analysis] Find secrets in a repo/history/filesystem and LIVE-VERIFY them against the issuing provider. Reach for it in vuln-analysis when you need to separate truly-active leaked credentials from dead noise.
[static-analysis] Scan a repo's files and full git history for hardcoded secrets (keys, tokens, credentials). Reach for it in vuln-analysis to find committed secrets, including ones removed from HEAD but live in history.
| name | generate-totp |
| description | [exploit] Generate a current 6-digit TOTP (RFC 6238) from a provided MFA secret, to complete logins for in-scope test accounts that have 2FA enabled. Reach for it during authenticated-session setup, not as an attack. |
Shor's bundled generate-totp CLI (RFC 6238 TOTP / RFC 4226 HOTP). It turns a
base32 MFA seed — supplied for an in-scope test account in the project's auth
config — into the current 6-digit code so the agent can finish a 2FA-gated login
and obtain an authenticated session. This is a login helper, not an exploit.
$totp).generate-totp --secret <BASE32_SECRET> — secret must be base32 (A-Z, 2-7);
other characters are stripped. Prints JSON to stdout:
{"status":"success","totpCode":"123456","expiresIn":17} where expiresIn is
seconds until the code rotates. On bad input: {"status":"error","message":...}.# Generate the current code for an in-scope test account's MFA seed
generate-totp --secret JBSWY3DPEHPK3PXP
# -> {"status":"success","totpCode":"492039","expiresIn":11}
# Parse: TOTP=$(generate-totp --secret "$SEED" | jq -r .totpCode)
expiresIn is very low, regenerate to avoid a stale-code login failure.