apiscan
API security audit — REST, GraphQL, JWT analysis, parameter discovery
View and search the techniques & reports database
> /plugin marketplace add ogrodev/fsociety > /plugin install fsociety@ogrodev-fsociety
How it fires
How this command gets triggered: by you, by Claude, or both.
/techniquesContext preview
What this command does when you run it.
View and search the techniques & reports database
description: View and search the techniques & reports database allowed-tools: Bash, Read, Grep argument-hint: [search-term] [--result success|partial|blocked|failed|clean] [--tool <name>] [coverage] [reports]
You are querying the Elliot techniques database (`techniques-db.jsonl`). Use the techniques-tracker.js script to retrieve and display results.
The tracker script is located at: `${CLAUDE_PLUGIN_ROOT}/scripts/techniques-tracker.js`
Parse the user's arguments from `$ARGUMENTS`:
1. **No arguments**: Run `node "${CLAUDE_PLUGIN_ROOT}/scripts/techniques-tracker.js" list` first to show the table, then `node "${CLAUDE_PLUGIN_ROOT}/scripts/techniques-tracker.js" summary` for the stats.
2. **`--result <type>`**: Run `node "${CLAUDE_PLUGIN_ROOT}/scripts/techniques-tracker.js" list --result <type>`
3. **`--tool <name>`**: Run `node "${CLAUDE_PLUGIN_ROOT}/scripts/techniques-tracker.js" list --tool <name>`
4. **`coverage`**: Run `node "${CLAUDE_PLUGIN_ROOT}/scripts/techniques-tracker.js" coverage`
5. **`reports`**: Run `node "${CLAUDE_PLUGIN_ROOT}/scripts/techniques-tracker.js" reports`
6. **Any other text** (search term): Run `node "${CLAUDE_PLUGIN_ROOT}/scripts/techniques-tracker.js" search <term>`
7. **`--html`** (anywhere in arguments): Run `node "${CLAUDE_PLUGIN_ROOT}/scripts/techniques-tracker.js" html` with any additional filters (`--result`, `--tool`) passed through. The script writes an HTML file and prints the path. Show the path to the user.
Present the results clearly. For coverage output, highlight gaps prominently. For reports, list file paths so the user can quickly access them.
If no techniques are logged yet, explain that techniques are auto-recorded after Hexstrike scans and can also be manually added.
Multi-plugin marketplace for Claude Code offensive security plugins
Repo: ogrodev/fsociety
API security audit — REST, GraphQL, JWT analysis, parameter discovery
Archive or list previous engagement snapshots
Password brute force and hash cracking against target services
Resume or execute an attack campaign with progress tracking
Show running scans, system health, and engagement status