Browse Skills — Page 143

pdca-fast-track

popup-studio-ai/bkit-claude-code

|

pdca-watch

popup-studio-ai/bkit-claude-code

|

pddl-skills

elizaOS/eliza

Automated Planning utilities for loading PDDL domains and problems, generating plans using classical planners, validating plans, and saving plan outputs. Supports standard PDDL parsing, plan synthesis, and correctness verification.

anthropics/pdf

anthropics/skills

Use this skill whenever the user wants to do anything with PDF files. This includes reading or extracting text/tables from PDFs, combining or merging multiple PDFs into one, splitting PDFs apart, rotating pages, adding watermarks, creating new PDFs, filling PDF forms, encrypting/decrypting PDFs, extracting images, and OCR on scanned PDFs to make them searchable. If the user mentions a .pdf file or asks to produce one, use this skill.

ComposioHQ/pdf

ComposioHQ/awesome-claude-skills

Comprehensive PDF manipulation toolkit for extracting text and tables, creating new PDFs, merging/splitting documents, and handling forms. When Claude needs to fill in a PDF form or programmatically process, generate, or analyze PDF documents at scale.

openai/pdf

openai/skills

"Use when tasks involve reading, creating, or reviewing PDF files where rendering and layout matter; prefer visual checks by rendering pages (Poppler) and use Python tools such as `reportlab`, `pdfplumber`, and `pypdf` for generation and extraction."

nextlevelbuilder/pdf

nextlevelbuilder/goclaw

Use this skill whenever the user wants to do anything with PDF files. This includes reading or extracting text/tables from PDFs, combining or merging multiple PDFs into one, splitting PDFs apart, rotating pages, adding watermarks, creating new PDFs, filling PDF forms, encrypting/decrypting PDFs, extracting images, and OCR on scanned PDFs to make them searchable. If the user mentions a .pdf file or asks to produce one, use this skill.

PDF Accessibility

Community-Access/accessibility-agents

PDF document accessibility specialist. Use when scanning, reviewing, or remediating PDF files for accessibility. Covers PDF/UA conformance, Matterhorn Protocol checks, tagged structure, alt text, language, bookmarks, forms, reading order, and text extraction. Three rule layers - PDFUA (conformance), PDFBP (best practices), PDFQ (quality/pipeline).

PDF Processing

run-llama/vibe-llama

Invoke this skill BEFORE implementing any text extraction/parsing logic to learn how to use LlamaParse to process any document accurately. Requires llama_cloud_services package and LLAMA_CLOUD_API_KEY as an environment variable.

PDF Remediator

Community-Access/accessibility-agents

PDF accessibility remediator. Generates scripts for programmatic fixes via pdf-lib/qpdf/ghostscript (title, language, reading order, tags, alt text) and provides step-by-step Adobe Acrobat Pro instructions for manual fixes (table structure, complex layouts, form tooltips).

pdf-analyzer

TerminalSkills/skills

>-

pdf-api-io-automation

ComposioHQ/awesome-claude-skills

"Automate PDF API IO tasks via Rube MCP (Composio). Always search tools first for current schemas."

pdf-bericht-erzeugen

Klotzkette/claude-fuer-deutsches-recht

Erstellt einen pruefbaren PDF-Bericht aus dem 3D-Wuerfel. Struktur: Deckblatt mit Projekt Mandant Stichtag Wuerfel-Ampel; Management-Summary mit Hotspots und blockierenden Roten; pro Arbeitsblatt-Perspektive ein Abschnitt mit Aggregat und Top-Findings; Anhang mit vollstaendigen Tabellen pro Arbeitsblatt; Beleganhang mit zitierten Quellen und Datei-Hashes; Audit-Anhang mit Prompt-Versionen Modell-Version und Reviewlauf-Metadaten. Bedingte Formatierung fuer Ampelfarben. Gerichtsfaehig in dem Sinne dass jede Aussage rueckverfolgbar ist.

pdf-brain

joelhooks/joelclaw

"Research and library synthesis from the docs/PDF corpus, mapped to joelclaw system philosophy and concrete operational actions (especially k8s reliability). Trigger on: 'research this', 'from the library', 'from the books', 'pdf brain', 'correlate this', 'synthesize', or any request to derive practical architecture/ops guidance from the docs corpus. This skill is analysis-only; for ingestion/backfill workflows use pdf-brain-ingest."

pdf-brain-ingest

joelhooks/joelclaw

"Ingest PDF/Markdown/TXT files into joelclaw's docs memory pipeline with Inngest durability, durable NAS artifacts, and OTEL verification. Use when adding docs, running batch reindex, reconciling coverage, or recovering stuck runs. Triggers on: 'ingest pdf', 'ingest markdown', 'docs add', 'pdf-brain ingest', 'backfill books', 'docs reconcile', 'reindex docs', 'batch reindex'."

pdf-co-automation

ComposioHQ/awesome-claude-skills

"Automate PDF co tasks via Rube MCP (Composio). Always search tools first for current schemas."

pdf-creator

daymade/claude-code-skills

Convert markdown files to professional PDF documents with proper Chinese font support, theme system, and visual self-check. Use whenever the user asks to create PDFs, convert markdown to PDF, generate printable documents, or needs documents formatted for print or mobile reading. This skill MUST be used instead of manual pandoc/Chrome invocations — it handles CJK typography, Chrome header/footer suppression, and mandatory visual verification that manual approaches miss. **Scope — markdown → PDF only.** For Word (.docx) output use `minimax-docx`; this skill does not produce docx and the two pipelines are intentionally orthogonal.

pdf-editing

elizaOS/eliza

Complete guide for reading and editing PDF documents with PyMuPDF.

pdf-extract

aipoch/medical-research-skills

Extract PDF selectable text and full-page or segmented page images (including tables) into Markdown with per-page headings and image links; use when you need both readable text and page visuals for PPT creation, review, or analysis.

pdf-extract-experimental-materials

aipoch/medical-research-skills

Extract experimental materials and instrument information from PDFs (or PDF-derived text/Markdown) into three CSV tables; use when a paper/report contains sections like Materials and Methods, Key Resources Table, Reagents, Antibodies, Consumables, Software, Equipment, Instruments, or Reagent Preparation.

pdf-extractor

guia-matthieu/clawfu-skills

"Extract text, tables, and images from PDFs. Use when: extracting data from reports; converting PDF tables to CSV; pulling images from presentations; processing research papers; batch converting PDFs to text"

pdf-merge-split

TerminalSkills/skills

>-

pdf-ocr

TerminalSkills/skills

>-

pdf-official

diegosouzapw/awesome-omni-skills

PDF Processing Guide workflow skill. Use this skill when the user needs This guide covers essential PDF processing operations using Python libraries and command-line tools. For advanced features, JavaScript libraries, and detailed examples, see reference.md. If you need to fill out a PDF form, read forms.md and follow its instructions and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.

pdf-official-v2

diegosouzapw/awesome-omni-skills

PDF Processing Guide workflow skill. Use this skill when the user needs This guide covers essential PDF processing operations using Python libraries and command-line tools. For advanced features, JavaScript libraries, and detailed examples, see reference.md. If you need to fill out a PDF form, read forms.md and follow its instructions and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.

pdf-official-v3

diegosouzapw/awesome-omni-skills

PDF Processing Guide workflow skill. Use this skill when the user needs This guide covers essential PDF processing operations using Python libraries and command-line tools. For advanced features, JavaScript libraries, and detailed examples, see reference.md. If you need to fill out a PDF form, read forms.md and follow its instructions and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.

pdf-ppt

aipoch/medical-research-skills

Create literature-report PPTX decks from PDF papers. Use when you must extract a paper’s metadata, summarize the study, interpret Results/Figures/Tables, and generate slides with 1:1 figure-to-text alignment and layout rules (triggered by requests like “PDF to PPT”, “literature report slides”, or “turn this paper into a presentation”).

pdf-processor

aipoch/medical-research-skills

Perform basic local PDF operations (merge, split, extract pages/text/tables, create) when users request offline PDF processing without external services.

pdf-report

indranilbanerjee/digital-marketing-pro

Generate branded PDF reports. Use when: creating executive summaries, campaign reports, or client deliverables.

pdf-scan-config

Community-Access/accessibility-agents

PDF accessibility scan configuration manager. Use to create, edit, validate, or explain .a11y-pdf-config.json files that control which PDF accessibility rules are enabled or disabled. Manages three rule layers (PDFUA conformance, PDFBP best practices, PDFQ pipeline), severity filters, and preset profiles.

pdf-to-html

daymade/claude-code-skills

Converts a PDF into one self-contained, readable HTML file that preserves images, tables, charts and reading order — optionally translating it into another language while keeping every figure. Uses structured extraction (PyMuPDF), font-size-driven layout, compressed base64-inlined images (a single portable file), and mandatory headless-Chrome visual verification. Use whenever someone wants to READ a PDF as a web page or clean document, turn a PDF into HTML, or translate a PDF into another language while keeping its images/tables/charts intact — e.g. "PDF 转 HTML", "把这个 PDF 转成中文网页版", "make this report readable", "translate this PDF but don't lose the charts", "I just want to read this PDF on my phone". Distinct from doc-to-markdown (plain Markdown text) and pdf-creator (Markdown→PDF) — this one produces a styled, image-faithful HTML reading experience.

pdf-to-ppt-pack

aipoch/medical-research-skills

Convert research paper PDFs into literature-report PPTX decks using a fully offline workflow (extract text/figures, map captions, summarize findings, and generate slides). Use when you need to turn a PDF into a presentation deck, especially for scientific articles with figures and tables.

pdf4me

vm0-ai/vm0-skills

PDF4me API for PDF operations. Use when user mentions "PDF4me", "convert

pdf4me-automation

ComposioHQ/awesome-claude-skills

"Automate Pdf4me tasks via Rube MCP (Composio). Always search tools first for current schemas."

pdfco

vm0-ai/vm0-skills

PDF.co API for PDF processing. Use when user mentions "PDF.co", "extract

pdfkit

TerminalSkills/skills

>-

pdfless-automation

ComposioHQ/awesome-claude-skills

"Automate Pdfless tasks via Rube MCP (Composio). Always search tools first for current schemas."

pdfmonkey-automation

ComposioHQ/awesome-claude-skills

"Automate Pdfmonkey tasks via Rube MCP (Composio). Always search tools first for current schemas."

pdforge

vm0-ai/vm0-skills

PDForge API for PDF generation. Use when user mentions "PDForge", "generate

pdftk-server

github/awesome-copilot

'Skill for using the command-line tool pdftk (PDFtk Server) for working with PDF files. Use when asked to merge PDFs, split PDFs, rotate pages, encrypt or decrypt PDFs, fill PDF forms, apply watermarks, stamp overlays, extract metadata, burst documents into pages, repair corrupted PDFs, attach or extract files, or perform any PDF manipulation from the command line.'

pediatric_drug_safety

InternScience/scp

Pediatric Drug Safety Review - Evaluate pediatric drug safety: pediatric use info, child safety, dosage forms, and overdosage info from FDA. Use this skill for pediatric pharmacology tasks involving get pediatric use info by drug name get child safety info by drug name get dosage forms and strengths by drug name get overdosage info by drug name. Combines 4 tools from 1 SCP server(s).

peekaboo

openclaw/openclaw

Capture and automate macOS UI with the Peekaboo CLI.

peer-review

K-Dense-AI/scientific-agent-skills

Structured manuscript/grant review with checklist-based evaluation. Use when writing formal peer reviews with specific criteria methodology assessment, statistical validity, reporting standards compliance (CONSORT/STROBE), and constructive feedback. Best for actual review writing, manuscript revision. For evaluating claims/evidence quality use scientific-critical-thinking; for quantitative scoring frameworks use scholar-evaluation.

peer-review-response-drafter

aipoch/medical-research-skills

Assist in drafting professional peer review response letters. Trigger.

peft

mkurman/zorai

Parameter-Efficient Fine-Tuning (PEFT) library. LoRA, QLoRA, AdaLoRA, IA3, Prefix Tuning, P-Tuning, Prompt Tuning. Fine-tune large models with minimal memory overhead. Hugging Face ecosystem integration.

peft-fine-tuning

NousResearch/hermes-agent

Parameter-efficient fine-tuning for LLMs using LoRA, QLoRA, and 25+ methods. Use when fine-tuning large models (7B-70B) with limited GPU memory, when you need to train <1% of parameters with minimal accuracy loss, or for multi-adapter serving. HuggingFace's official library integrated with transformers ecosystem.

pencil

partme-ai/full-stack-skills

"用于通过 Pencil MCP 读取/修改 .pen 设计文件并校验布局。用户提到 pencil/.pen/设计稿编辑、需要列出工具或执行 batch_get/batch_design 时调用。"

pencil-design-from-stitch-html

partme-ai/full-stack-skills

"When you need to turn Stitch page HTML (or a Stitch URL) into a Pencil .pen design. Parses DOM and Tailwind, applies HTML→Pencil mapping and execution order, outputs sequential batch_design for layout and style fidelity (background, color, size, margin, padding, shadow). Supports multi-framework tokens."

pencil-mcp-batch-design

partme-ai/full-stack-skills

"Batch execute insert, update, replace, move, and delete operations on Pencil .pen design nodes via the batch_design MCP tool. Use when the user explicitly mentions Pencil and needs to draw, insert, change, remove, or move elements on the canvas."

pencil-mcp-batch-get

partme-ai/full-stack-skills

Batch search and read node information. The Agent's 'Eyes'. Use to find specific components e.g. all nodes named 'Button' or get child structure within a container.

pencil-mcp-find-empty-space-on-canvas

partme-ai/full-stack-skills

Smartly find empty canvas space. Use to automatically plan artboard placement to avoid overlap and keep the canvas organized.

pencil-mcp-get-editor-state

partme-ai/full-stack-skills

Get current design environment context. Use when you need to understand what is currently selected, canvas position, and environment state before any task.

pencil-mcp-get-guidelines

partme-ai/full-stack-skills

Get design system guidelines. Use to read and understand specifications e.g. Material Design iOS HIG or custom specs before designing.

pencil-mcp-get-screenshot

partme-ai/full-stack-skills

"Capture a visual screenshot of a specific node in a Pencil .pen file via the get_screenshot MCP tool. Use when the user explicitly mentions Pencil and needs to visually verify a design operation, check for alignment or spacing issues, or review a component after batch_design changes."

pencil-mcp-get-style-guide

partme-ai/full-stack-skills

"Retrieve detailed style guide metadata (color palettes, typography rules, visual specs) by tags or ID from Pencil via the get_style_guide MCP tool. Use when the user explicitly mentions Pencil and needs to apply a specific visual style, retrieve theme colors and fonts, or look up a style guide by keyword tags."

pencil-mcp-get-style-guide-tags

partme-ai/full-stack-skills

Explore design style tags. Use to get design inspiration, such as 'Modern', 'Dark Mode', 'SaaS' directions.

pencil-mcp-get-variables

partme-ai/full-stack-skills

"Read design token variables (colors, fonts, spacing) from a Pencil .pen file via the get_variables MCP tool. Use when the user explicitly mentions Pencil and needs to list design tokens, check the current theme, or retrieve variable IDs for use in batch_design operations."

pencil-mcp-open-document

partme-ai/full-stack-skills

Open or create a design document. Use when you need to initialize design tasks, create new files, or switch to specific designs.

pencil-mcp-replace-all-matching-properties

partme-ai/full-stack-skills

"Batch replace matching style properties (colors, fonts, sizes) across nodes in a Pencil .pen file via the replace_all_matching_properties MCP tool. Use when the user explicitly mentions Pencil and needs to globally swap colors, update font families, migrate to a new brand style, or batch-adjust spacing across frames."

pencil-mcp-search-all-unique-properties

partme-ai/full-stack-skills

"Search and list all unique values for specific properties (fills, fonts, spacing) across nodes in a Pencil .pen file via the search_all_unique_properties MCP tool. Use when the user explicitly mentions Pencil and needs to audit design consistency, find all colors or font sizes used, or identify inconsistent styles."

pencil-mcp-set-variables

partme-ai/full-stack-skills

Set or update design variables. Use to establish or maintain a Design Token system.

pencil-mcp-snapshot-layout

partme-ai/full-stack-skills

"Capture a structural snapshot of the node tree in a Pencil .pen file via the snapshot_layout MCP tool, optionally filtering to only show layout problems. Use when the user explicitly mentions Pencil and needs to analyze page hierarchy, check for clipped or overlapping elements, or prepare for layout adjustments."

pencil-skill-creator

partme-ai/full-stack-skills

Factory skill for creating new pencil-ui-design-system-* skills. Use when you need to add support for a new design system layui antd bootstrap element uview uviewpro vant ucharts echarts etc. to the Pencil ecosystem.

pencil-ui-design-spec-generator

partme-ai/full-stack-skills

"Translates high-level user requirements into a PENCIL_PLAN: a strict sequence of Pencil MCP tool calls (open_document, set_variables, batch_design, get_screenshot). Use when the user explicitly mentions Pencil and wants to plan a design task, generate a step-by-step design spec, or create a login form, dashboard, or design system initialization plan."

pencil-ui-design-system-antd

partme-ai/full-stack-skills

"Initialize Ant Design (antd) design tokens and component overview frames in a Pencil .pen file. Use when the user mentions Pencil with Ant Design or antd, needs to set up antd color palette and typography variables, or wants to create component library frames for Button, Form, Table, Modal, and other antd components."

pencil-ui-design-system-bootstrap

partme-ai/full-stack-skills

"Initialize Bootstrap design tokens and component overview frames in a Pencil .pen file. Use when the user mentions Pencil with Bootstrap, needs to set up Bootstrap color palette and typography variables, or wants to create component library frames for Grid, Card, Modal, Navbar, and other Bootstrap components."

pencil-ui-design-system-echarts

partme-ai/full-stack-skills

"Initialize ECharts chart theme tokens and data visualization placeholder frames in a Pencil .pen file. Use when the user mentions Pencil with ECharts, needs to set up chart color palette and axis tokens, or wants to create placeholder frames for Line, Bar, Pie, Radar, and other ECharts chart types."

pencil-ui-design-system-element

partme-ai/full-stack-skills

"Initialize Element Plus design tokens and component overview frames in a Pencil .pen file. Use when the user mentions Pencil with Element Plus or Element UI, needs to set up Element color palette and typography variables, or wants to create component library frames for Button, Table, Form, Dialog, and other Element components."

pencil-ui-design-system-layui

partme-ai/full-stack-skills

"Initialize Layui design tokens and component overview frames in a Pencil .pen file. Use when the user mentions Pencil with Layui or layui-vue, needs to set up Layui color palette and typography variables, or wants to create component library frames for Button, Table, Form, Menu, and other Layui components."

pencil-ui-design-system-ucharts

partme-ai/full-stack-skills

"Initialize uCharts chart theme tokens and data visualization placeholder frames in a Pencil .pen file. Use when the user mentions Pencil with uCharts or qiun-data-charts, needs to set up chart series colors and axis tokens, or wants to create placeholder frames for Line, Bar, Pie, Radar, and other uCharts chart types."

pencil-ui-design-system-uview

partme-ai/full-stack-skills

"Initialize uView 2.x design tokens and component overview frames in a Pencil .pen file. Use when the user mentions Pencil with uView 2.x (not uView Pro), needs to set up uView color palette and typography variables, or wants to create component library frames for Button, Form, Cell, Tabs, and other uView components."

pencil-ui-design-system-uviewpro

partme-ai/full-stack-skills

"Initialize uView Pro design tokens and component overview frames in a Pencil .pen file. Use when the user mentions Pencil with uView Pro or uviewpro, needs to set up uView Pro color palette and typography variables, or wants to create component library frames for Button, Form, Tabs, Navbar, and other uView Pro components."

pencil-ui-design-system-vant

partme-ai/full-stack-skills

"Initialize Vant 4 design tokens and component overview frames in a Pencil .pen file. Use when the user mentions Pencil with Vant or Vant 4, needs to set up Vant color palette and typography variables, or wants to create component library frames for Button, Cell, Form, Dialog, and other Vant components."

pencil-ui-designer

partme-ai/full-stack-skills

"Orchestrates Pencil design system initialization by routing framework requests to the correct pencil-ui-design-system-* skill. Use when the user explicitly mentions Pencil and wants to initialize a design system (antd, Bootstrap, Element Plus, Layui, uView, Vant, uCharts, ECharts), set up component libraries, or create design tokens in a .pen file."

pennylane

K-Dense-AI/scientific-agent-skills

Hardware-agnostic quantum ML framework with automatic differentiation. Use when training quantum circuits via gradients, building hybrid quantum-classical models, or needing device portability across IBM/Google/Rigetti/IonQ. Best for variational algorithms (VQE, QAOA), quantum neural networks, and integration with PyTorch/JAX/TensorFlow. For hardware-specific optimizations use qiskit (IBM) or cirq (Google); for open quantum systems use qutip.

penpot-uiux-design

github/awesome-copilot

'Comprehensive guide for creating professional UI/UX designs in Penpot using MCP tools. Use this skill when: (1) Creating new UI/UX designs for web, mobile, or desktop applications, (2) Building design systems with components and tokens, (3) Designing dashboards, forms, navigation, or landing pages, (4) Applying accessibility standards and best practices, (5) Following platform guidelines (iOS, Android, Material Design), (6) Reviewing or improving existing Penpot designs for usability. Triggers: "design a UI", "create interface", "build layout", "design dashboard", "create form", "design landing page", "make it accessible", "design system", "component library".'

pension-buyout-strukturierung-und-de-risking

Klotzkette/claude-fuer-deutsches-recht

Pension Buyout und De-Risking: Buy-in Buy-out Longevity Swap Versichererauswahl Term Sheets regulatorische BaFin-Genehmigung VAG-Paragraphen-236-242 Transaktionsstrukturierung fuer Direktzusagen-Abloesung und Risikominimierung im Duesseldorfer Boutique-Stil.

pensionsmodelle-fuenf-durchfuehrungswege

Klotzkette/claude-fuer-deutsches-recht

Vergleich und Auswahl der fuenf Durchfuehrungswege der betrieblichen Altersversorgung (Direktzusage Unterstuetzungskasse Pensionskasse Pensionsfonds Direktversicherung) mit Entscheidungsmatrix Bilanz- und Risiko-Tradeoffs sowie Auswirkungen auf IFRS/HGB fuer Konzerne im Stil von Treuenfels Yamamoto.

pentagi

TerminalSkills/skills

>-

pentest

HoangNguyen0403/agent-skills-standard

PTES-aligned adversarial security audit for backend, frontend, and mobile applications. Produces a CVSS-scored Hacker Report with verified PoCs and phased remediation.

pentest-checklist

diegosouzapw/awesome-omni-skills

Pentest Checklist workflow skill. Use this skill when the user needs Provide a comprehensive checklist for planning, executing, and following up on penetration tests. Ensure thorough preparation, proper scoping, and effective remediation of discovered vulnerabilities and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.

pentest-checklist-v2

diegosouzapw/awesome-omni-skills

Pentest Checklist workflow skill. Use this skill when the user needs Provide a comprehensive checklist for planning, executing, and following up on penetration tests. Ensure thorough preparation, proper scoping, and effective remediation of discovered vulnerabilities and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.

pentest-commands

diegosouzapw/awesome-omni-skills

Pentest Commands workflow skill. Use this skill when the user needs Provide a comprehensive command reference for penetration testing tools including network scanning, exploitation, password cracking, and web application testing. Enable quick command lookup during security assessments and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.

pentest-commands-v2

diegosouzapw/awesome-omni-skills

Pentest Commands workflow skill. Use this skill when the user needs Provide a comprehensive command reference for penetration testing tools including network scanning, exploitation, password cracking, and web application testing. Enable quick command lookup during security assessments and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.

pentesting-ajp

xalgord/xalgorix

Testing Apache JServ Protocol (AJP13) connectors (default 8009/TCP) for the Ghostcat LFI/RCE vulnerability (CVE-2020-1938), trusted-request-attribute abuse, AJP secret brute forcing, and reaching the Tomcat Manager via an nginx/Apache AJP proxy during authorized engagements.

pentesting-couchdb

xalgord/xalgorix

Testing Apache CouchDB document databases (default HTTP port 5984, HTTPS 6984) for unauthenticated/admin-party access, database dumping over the REST API, default/weak credentials, the CVE-2017-12635 privilege-escalation admin-creation bug and CVE-2017-12636/CVE-2018-8007 remote-code-execution paths, plus Erlang EPMD cookie abuse during authorized engagements.

pentesting-dns

xalgord/xalgorix

Testing DNS services (default 53/TCP+UDP, 5353/UDP mDNS) for zone transfers (AXFR), version/banner disclosure, subdomain and reverse-lookup enumeration, open recursion/amplification, DNSSEC and CAA misconfiguration, and Active Directory SRV record discovery during authorized engagements.

pentesting-docker

xalgord/xalgorix

Testing the Docker Engine remote API (default 2375/TCP plaintext, 2376/TCP TLS) for unauthenticated access leading to instant host takeover by mounting the host filesystem into a privileged container, plus secret/credential extraction and container-escape pivoting during authorized engagements.

pentesting-docker-registry

xalgord/xalgorix

Testing Docker Registry / Distribution services (default 5000/TCP, HTTP or HTTPS) for unauthenticated catalog access, image and blob/manifest extraction, weak basic-auth, and supply-chain image backdooring (push poisoned WordPress/SSH images) during authorized engagements.

pentesting-elasticsearch

xalgord/xalgorix

Testing Elasticsearch search/analytics clusters (default HTTP port 9200, transport 9300) for disabled authentication and full index dumping, default/weak credentials, write access to indices, and the historical Groovy/MVEL dynamic-scripting remote-code-execution CVEs (CVE-2015-1427, CVE-2014-3120) during authorized engagements.

pentesting-freeipa

xalgord/xalgorix

Enumerating and attacking FreeIPA domains during authorized engagements — anonymous and authenticated LDAP

pentesting-ftp

xalgord/xalgorix

Testing FTP services (default port 21, plus FileZilla admin 14147) for anonymous access, default/weak credentials, FTP bounce port scanning and protocol relay, writable webroot uploads, and dangerous vsFTPd/ProFTPD configuration during authorized engagements.

pentesting-imap

xalgord/xalgorix

Testing IMAP services (default ports 143 cleartext, 993 IMAPS) for weak/default credentials and brute force, NTLM info disclosure, cleartext credential exposure, capability enumeration, and authenticated mailbox access/data extraction via raw IMAP commands and curl during authorized engagements.

pentesting-ipmi

xalgord/xalgorix

Testing IPMI / BMC out-of-band management interfaces (default 623/UDP, sometimes TCP) for the cipher-zero authentication bypass, RAKP password-hash retrieval, anonymous/default BMC credentials, cleartext password storage, and host takeover via KVM/SOL during authorized engagements.

pentesting-kerberos

xalgord/xalgorix

Testing the Kerberos authentication service (88/tcp and 88/udp) in Active Directory during authorized

pentesting-ldap

xalgord/xalgorix

Testing LDAP / LDAPS directory services (389, 636, and Global Catalog 3268/3269) including Active Directory

pentesting-memcached

xalgord/xalgorix

Testing Memcached distributed memory caching servers (default port 11211 TCP/UDP) for unauthenticated stats/version access, slab-based key dumping and cached-data exfiltration, cache poisoning, and the UDP reflection/amplification DDoS primitive during authorized engagements.

pentesting-mongodb

xalgord/xalgorix

Testing MongoDB document databases (default ports 27017 and 27018) for no-auth/unauthenticated access, weak credentials, database and collection dumping, predictable ObjectID enumeration, config-based auth bypass, and the MongoBleed unauthenticated memory-disclosure CVE during authorized engagements.

pentesting-msrpc

xalgord/xalgorix

Testing the Microsoft RPC (MSRPC / DCE-RPC) endpoint mapper and exposed RPC interfaces during authorized

pentesting-mssql

xalgord/xalgorix

Testing Microsoft SQL Server (default port 1433, UDP 1434 browser) for default/weak SA credentials, Windows-auth and NTLM relay/coercion, xp_cmdshell OS command execution, linked-server lateral movement, and OLE/BULK file read-write primitives during authorized engagements.