Recon Plugin
- Updated June 3, 2026
- Chid0k/claude-marketplace
recon-plugin assists in web application reconnaissance and penetration testing. It helps security practitioners map an application's attack surface and probe for weaknesses as part of hardening a web app before release.
Key points
- Web app reconnaissance
- Penetration testing
- Attack-surface mapping
Recon Plugin by the numbers
- Data as of Jul 7, 2026 (Skillselion catalog sync)
/plugin marketplace add Chid0k/claude-marketplace/plugin install recon-plugin@pentest-marketplace-by-chidokAdd your badge
Show developers this skill is listed on Skillselion. Paste this into your README.
| Last updated | June 3, 2026 |
|---|---|
| Repository | Chid0k/claude-marketplace ↗ |
What it does
Assist in web application reconnaissance and penetration testing to find weaknesses before attackers do.
README.md
Claude Pentest Skills Suite 🛡️🤖
Một bộ công cụ mạnh mẽ được thiết kế dành riêng cho Claude AI, biến mô hình ngôn ngữ thành một trợ lý Penetration Testin thực thụ.
Tổng quan dự án
Dự án này cung cấp các endpoint và công cụ tinh chỉnh để Claude có thể tương tác, phân tích dữ liệu tĩnh và động từ các mục tiêu, giảm thiểu thời gian đọc hiểu mã nguồn và hỗ trợ pentester ra quyết định nhanh chóng.
Chi tiết các Plugin
[1.2.5] recon-plugin: skill for infomation gathering
- client-side-assessment: HTML/JS analysis, browser storage assessment, detect hidden endpoint/param/function
- js-recon: JS analysis, explanation auth flow, encryption analysis,
[2.1.2] vuln-detect-plugin: skill for vulnerabilities assesment / pentest
- Crawler: Mapping web application entry point
- sqli-detect (testing ...)
- nosqli-detect (testing ...)
- gen-report (testing ...)
- xss-detect: Find XSS vulnerability
- ssti-detect: Find SSTI vulnerability
- xxe-detect (Updating ...)
Thêm marketplace
claude plugin marketplace add Chid0k/claude-marketplace
Big update: Change struct of skill: add "Expanded attack surface"
Related skills
Entra App RegistrationCorrectly register an application in Microsoft Entra ID, configure OAuth 2.0 flows, request the right API permissions, and generate working MSAL authentication snippets484k1.3kAzure ComplianceRun automated Azure compliance scans, security posture checks, and Key Vault expiration audits before deploying.484k1.3k
Openclaw Secure Linux CloudDeploy and harden an OpenClaw agent instance on a Linux cloud server following battle-tested security defaults.270k72
Better Auth Best PracticesCorrectly configure Better Auth for secure authentication with database adapters, sessions, OAuth, email/password, and plugins in TypeScript projects.80.9k206
Firebase Security Rules AuditorAutomatically audit Firebase Firestore security rules for bypass vulnerabilities and logic gaps before deploying.80.4k397
Audit WebsiteRun comprehensive audits that surface SEO, performance, security, technical, and content issues with LLM-optimized reports and health scores.65.6k85