offensive-tools/forensic/tesseract/SKILL.md
Auth/lab ref: Tesseract OCR engine for extracting text from images and scanned documents.
npx skillsauth add aeondave/malskill tesseractInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
OCR for when the flag is technically visible but insists on pretending it is art.
Use Tesseract when you need to:
# OCR to stdout
tesseract image.png stdout
# OCR to a text file prefix
tesseract image.png output
# Specify language and page segmentation mode
tesseract image.png stdout -l eng --psm 6
--psm changes behavior a lot; single-line, sparse-text, and full-page inputs want different modes.exiftool for metadata and with image preprocessing outside the OCR step when results are poor.No bundled scripts/, references/, or assets/.
Use the official Tesseract docs for language packs, OCR engine modes, and advanced config files.
development
White-box auditing methodology for AI-generated ('vibe-coded') applications. Focuses on modern stack misconfigurations (Supabase, Next.js, Vercel).
development
Hybrid AI/Deterministic SAST methodology for discovering zero-day vulnerabilities in source code. Orchestrates structural search with AI-driven data flow and sink validation.
development
Auth assessment: hardware/embedded methodology; UART/JTAG/SWD/SPI/I2C, firmware extraction, boot/debug paths, embedded OS evidence.
devops
Container methodology: Identifying containerization limits, Docker/K8s misconfigurations, and executing escapes to the host node.