Cybermes

Autonomous Offensive Security, Bug Bounty & Red Teaming Agent Framework powered by...

npx skills add Zyrexnn/Cybermes -g -y

40 skills

Hack

Entry P0 primary router for HackSkills.

Zyrexnn/Cybermes987

Http Parameter Pollution

HTTP Parameter Pollution (HPP): duplicate query/body keys parsed differently by...

Zyrexnn/Cybermes987

Hunt Nosqli

Hunt NoSQL Injection, MongoDB operator injection ($where, $regex, $gt, $ne), CouchDB...

Zyrexnn/Cybermes987

Hunt Ntlm Info

Hunt NTLM/Negotiate information disclosure on internet-reachable IIS/SharePoint/Exchange.

Zyrexnn/Cybermes987

Hunt Oauth

Hunting skill for oauth vulnerabilities.

Zyrexnn/Cybermes987

Hunt Open Redirect

Hunt Open Redirect, all types including low-impact, chained to OAuth token theft →...

Zyrexnn/Cybermes987

Hunt Race Condition

Hunting skill for race condition vulnerabilities.

Zyrexnn/Cybermes987

Hunt Rag Vector

Hunt vector-store / embedding-layer weaknesses in RAG pipelines (OWASP LLM08 Vector and...

Zyrexnn/Cybermes987

Hunt Saml

Hunt SAML / SSO attacks.

Zyrexnn/Cybermes987

Hunt Session

Hunt Session Management vulnerabilities, session fixation (no regeneration on login)...

Zyrexnn/Cybermes987

Hunt Shadow API

Hunt shadow / zombie / undocumented API surface (OWASP API9 Improper Inventory...

Zyrexnn/Cybermes987

Hunt Sharepoint

Hunt Microsoft SharePoint Server (2013/2016/2019/Subscription Edition) on-prem farms, ...

Zyrexnn/Cybermes987

Hunt Source Leak

Hunt source code and build artifact leakage, JavaScript source maps (.js.map)...

Zyrexnn/Cybermes987

Hunt Spa API

Discover a single-page-app's hidden backend API from its public JS bundle, then test...

Zyrexnn/Cybermes987

Hunt Springboot

Hunt Spring Boot specific vulnerabilities, Actuator endpoints (heapdump, env, loggers...

Zyrexnn/Cybermes987

Hunt Sqli

Hunting skill for sqli vulnerabilities.

Zyrexnn/Cybermes987

Hunt Ssrf

Hunting skill for ssrf vulnerabilities.

Zyrexnn/Cybermes987

Hunt Ssti

Hunt server-side template injection (SSTI) across Jinja2 (Flask/Django), Twig...

Zyrexnn/Cybermes987

Hunt Subdomain

Hunting skill for subdomain takeover vulnerabilities.

Zyrexnn/Cybermes987

Hunt Tls Network

Hunt TLS/SSL and DNS misconfigurations, missing HSTS (downgrade attack), weak cipher...

Zyrexnn/Cybermes987

Hunt Websocket

Hunt WebSocket vulnerabilities, Cross-Site WebSocket Hijacking (CSWSH), missing/weak...

Zyrexnn/Cybermes987

Hunt Xss

Hunting skill for xss vulnerabilities.

Zyrexnn/Cybermes987

Hunt Xxe

Hunting skill for xxe vulnerabilities.

Zyrexnn/Cybermes987

Kernel Exploitation

Linux kernel exploitation playbook.

Zyrexnn/Cybermes987

M365 Entra Attack

Microsoft 365 / Entra ID red-team attack chain, current 2026 reality.

Zyrexnn/Cybermes987

Meme Coin Audit

Meme coin and token security audit, rug pull detection (honeypot, hidden mint, fee...

Zyrexnn/Cybermes987

Mid Engagement Ir Detection

Methodology for detecting client SOC patches, attacker activity, and security-state...

Zyrexnn/Cybermes987

Network Protocol Attacks

Network protocol attack playbook.

Zyrexnn/Cybermes987

Offensive Osint

Operational arsenal for authorized external red-team and bug-bounty recon.

Zyrexnn/Cybermes987

Okta Attack

Okta-as-IdP red-team attack chain, tenant discovery, user enumeration (multiple...

Zyrexnn/Cybermes987

Open Redirect

Open redirect playbook.

Zyrexnn/Cybermes987

Osint Methodology

Comprehensive OSINT methodology for external red-team operations and authorized...

Zyrexnn/Cybermes987

Prototype Pollution Advanced

Advanced prototype pollution playbook, server-side RCE, client-side gadgets, filter...

Zyrexnn/Cybermes987

Recon Scope Triage

Triage ASM/recon output for ownership before testing, separate the target's real...

Zyrexnn/Cybermes987

Redteam Mindset

Red-team operator discipline, the mindset corrections that separate offensive testing...

Zyrexnn/Cybermes987

Redteam Report Template

Client-facing red-team deliverable format, codifies the Subject / Observations /...

Zyrexnn/Cybermes987

Report Writing

Bug bounty report writing for H1/Bugcrowd/Intigriti/Immunefi, report templates, human...

Zyrexnn/Cybermes987

Security Arsenal

Security payloads, bypass tables, wordlists, gf pattern names, always-rejected bug...

Zyrexnn/Cybermes987

Supply Chain Attack Recon

External recon for software supply-chain attack surface, package-namespace squatting...

Zyrexnn/Cybermes987

Vmware Vcenter Attack

VMware vSphere / vCenter Server external attack matrix, version fingerprinting, the...

Zyrexnn/Cybermes987