Spray — Security skill for Claude Code
Password spray with hard guards — typed-hostname confirmation, lockout warning, audit log.
How to install Spray
Installs to ~/.claude/commands/m1rr0r199501-agent-pentest-framework-spray.md
mkdir -p ~/.claude/commands && curl -fsSL https://raw.githubusercontent.com/m1rr0r199501/agent-pentest-framework/HEAD/.claude/commands/spray.md -o ~/.claude/commands/m1rr0r199501-agent-pentest-framework-spray.md Restart Claude Code, or start a new session, for it to be picked up.
What Spray does
description: Password spray with hard guards — typed-hostname confirmation, lockout warning, audit log. Modes: http-form (custom login page), oauth (password grant), o365 + okta (via TREVORspray). Default delay 30min/round + 60s jitter. Usage /spray --mode --users --passes
/spray
Live credential spray against an authentication endpoint. **The most dangerous tool in this plugin.** Read the guards section before using.
Modes
| Mode | Use case | Engine |
Alternatives in Security
- Promptmap — Security scanner for custom LLM apps 1.2k ★
- ThinkWatch — Self-hosted AI API and MCP gateway for organizations: SSO and RBAC, per-user identity for MCP tool calls, PII 817 ★
- Maestro Odyssey — Long-running iterative cycle — one entry, seven modes (debug improve planex review security defensive ui) 530 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Auth Security UX Specialist
Use when a login or security flow feels either unsafe or full of friction. Signup, password reset, 2FA and pas
Agentlinter
ESLint for AI Agents — AGENTS.md/CLAUDE.md 채점·진단·자동수정 Position Risk Warning · Token Efficiency · Security Chec
Tenable Scan Sweep
Find which Tenable Vulnerability Management or Security Center scans target an IP, range, hostname, tag or ass
Home Network Audit En
Claude Code skill: check your home network against NSA best practices - list connected devices, audit the rout
Spec Audit
Spec-vs-code compliance audit — extracts requirements from a spec / whitepaper / RFC and matches each to the i
Meta Audit
You are now the meta-audit coordinator. The user just typed /meta-audit. Your sole responsibility is to spawn
Related Agents
Auth Tester
Authentication and session management testing agent. Use for login bypass, session fixation, password reset fl
Ad User Admin
Active Directory user administration — look up users, read attributes and password-expiry, and perform attribu