Leaderboard/Security/recon-skills
Last commit on September 1, 2026·Created on June 24, 2026

uphiago/recon-skills

A structured library of methodologies for security reconnaissance and authorized attack paths.
Combined rank
#237
across all skills
In Security
#14
category rank
Stars
1.2k
7d change unavailable
Forks
212
Watchers
7
Traction scoreGitHub stars can be faked, so popularity alone can be misleading. Traction Score looks for broader signs of real attention, adoption, and active maintenance.
TL;DR

This collection provides detailed technical procedures for identifying and exploiting vulnerabilities across authentication systems, containerized infrastructure, and complex attack chains. It assists security researchers in moving from initial discovery to high-impact findings through validated techniques.

The repository organizes specific workflows for tasks such as escaping Docker containers to host root, attacking SAML SSO implementations, and synthesizing multiple verified findings into cohesive attack paths.

WHO IT'S FOR
Bug bounty hunters
chaining verified findings into high-impact attack paths
Penetration testers
attacking SAML SSO and identity providers
Red team operators
escaping Docker containers to achieve host root
Offensive security engineers
analyzing WordPress paths for server control
Repository contents

146 skill files

Compatible AgentsThe repository documents support for these agents. The skills may also work with other agents that can load SKILL.md files, but they may need some setup or small changes.
Want to install it?
Clone to Claude · Git Clone · Manual CopyRepository instructions