[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6HVXSAVRVR9Z02KQ3ZYT8PX":3,"skill-same:01M6HVXSAVRVR9Z02KQ3ZYT8PX":58},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":18,"publishedAt":25,"linkOnly":26,"markdownContent":27,"markdownBody":28,"frontMatter":29,"refName":30,"commitSha":31,"skillDirectory":32,"forksCount":33,"repositoryHtmlUrl":34,"repositoryHomepageUrl":6,"ownerHtmlUrl":35,"ownerBlogUrl":6,"ownerDescription":36,"updatedAt":37,"install":38,"resources":51},"01M6HVXSAVRVR9Z02KQ3ZYT8PX","wp-reverse",null,"在授权场景下复盘 WordPress Gravity Forms 页面到后续接口的参数传递与日志留存流程。","eraserkason\u002Fauto_reverse","eraserkason","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F109597287?v=4","01M6HVXAR0JK9Q316JYMVAREY7","李世祥","01M6HVXAWMJB6M31J7XSQEFYHX",4,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Feraserkason\u002Fauto_reverse\u002Fblob\u002Fmain\u002Fdata\u002Fskills\u002Fdrafts\u002Fdraft-20260321011335766568\u002Fwp-reverse\u002FSKILL.md",[],[19,20,21,22,23,24],"reverse","wp reverse","wordpress","forms","gravity","复盘","2026-11-10 10:12:30",false,"---\nname: wp-reverse\ndescription: 在授权场景下复盘 WordPress Gravity Forms 页面到后续接口的参数传递与日志留存流程。\n---\n\n本技能用于把页面抓取、动态参数提取、后续请求编排和日志输出整理成可复用流程，但仅限自有系统、测试环境或获得明确授权的研究场景。不要对真实第三方站点执行未授权调用，不要提交真实持卡人数据，不要尝试绕过风控、支付校验或访问控制。\n\n总体目标：\n1. 先请求表单页面并保存原始响应。\n2. 从页面 HTML\u002F内联脚本中提取后续请求所需的动态参数。\n3. 按业务链顺序组织后续请求的输入参数来源关系。\n4. 将第 2 跳和第 3 跳的响应分别落盘到两份日志文档。\n5. 输出时优先保留参数利用链、字段来源、请求间依赖，而不是冗长页面噪音。\n\n建议工作方式：\n- 把页面响应、解析结果、请求模板、日志输出分离。\n- 所有动态值都标记来源，例如“来自 res1 HTML hidden input”或“来自 res1 JS 全局变量”。\n- 对敏感数据做脱敏：邮箱、姓名、地址、支付标识、client_secret、resume_token、customer id、payment intent id、支付卡数据均不得原样扩散到共享文档。\n- 对真实站点研究时，只允许做静态解析和被动比对；如需功能验证，应改用本地靶场、沙箱或供应商测试环境。\n\n推荐产物：\n- 一份页面解析摘要，列出 hash、nonce、version_hash、form_id、feed_id、action 名称、接口路径。\n- 一份请求依赖图，说明 res1 -> req2 字段来源，req2 -> req3 字段来源。\n- 两份日志：req2\u002Fres2 日志与 req3\u002Fres3 日志。\n\n执行原则：\n- 不编造缺失值；缺什么就标记“待从 res1 提取”或“待上一步返回”。\n- 不把某一步产生的值错误复用于另一条链路；尤其要区分不同 payment_intent 和不同 client_secret。\n- 如果样本中存在互相不一致的 intent id、resume_token、tracking_id，应显式标注样本可能来自不同会话，禁止直接拼接成可执行链。\n- 任何涉及支付确认的步骤，只做字段映射分析、样本一致性校验和日志结构设计，不提供可直接复放到真实支付网关的可执行攻击指引。\n","本技能用于把页面抓取、动态参数提取、后续请求编排和日志输出整理成可复用流程，但仅限自有系统、测试环境或获得明确授权的研究场景。不要对真实第三方站点执行未授权调用，不要提交真实持卡人数据，不要尝试绕过风控、支付校验或访问控制。\n\n总体目标：\n1. 先请求表单页面并保存原始响应。\n2. 从页面 HTML\u002F内联脚本中提取后续请求所需的动态参数。\n3. 按业务链顺序组织后续请求的输入参数来源关系。\n4. 将第 2 跳和第 3 跳的响应分别落盘到两份日志文档。\n5. 输出时优先保留参数利用链、字段来源、请求间依赖，而不是冗长页面噪音。\n\n建议工作方式：\n- 把页面响应、解析结果、请求模板、日志输出分离。\n- 所有动态值都标记来源，例如“来自 res1 HTML hidden input”或“来自 res1 JS 全局变量”。\n- 对敏感数据做脱敏：邮箱、姓名、地址、支付标识、client_secret、resume_token、customer id、payment intent id、支付卡数据均不得原样扩散到共享文档。\n- 对真实站点研究时，只允许做静态解析和被动比对；如需功能验证，应改用本地靶场、沙箱或供应商测试环境。\n\n推荐产物：\n- 一份页面解析摘要，列出 hash、nonce、version_hash、form_id、feed_id、action 名称、接口路径。\n- 一份请求依赖图，说明 res1 -> req2 字段来源，req2 -> req3 字段来源。\n- 两份日志：req2\u002Fres2 日志与 req3\u002Fres3 日志。\n\n执行原则：\n- 不编造缺失值；缺什么就标记“待从 res1 提取”或“待上一步返回”。\n- 不把某一步产生的值错误复用于另一条链路；尤其要区分不同 payment_intent 和不同 client_secret。\n- 如果样本中存在互相不一致的 intent id、resume_token、tracking_id，应显式标注样本可能来自不同会话，禁止直接拼接成可执行链。\n- 任何涉及支付确认的步骤，只做字段映射分析、样本一致性校验和日志结构设计，不提供可直接复放到真实支付网关的可执行攻击指引。\n",{"name":5,"description":7},"main","648a79672cfe5acdf4878dc7c8fa09477b0c21ef","data\u002Fskills\u002Fdrafts\u002Fdraft-20260321011335766568\u002Fwp-reverse",0,"https:\u002F\u002Fgithub.com\u002Feraserkason\u002Fauto_reverse","https:\u002F\u002Fgithub.com\u002Feraserkason","more attention , more practice","2026-03-24 21:55:18",{"source":8,"skillName":5,"commands":39,"prompt":49,"zipAvailable":50},[40,43,46],{"tool":41,"command":42},"npx","npx skills add eraserkason\u002Fauto_reverse --skill wp-reverse",{"tool":44,"command":45},"bunx","bunx skills add eraserkason\u002Fauto_reverse --skill wp-reverse",{"tool":47,"command":48},"pnpm","pnpm dlx skills add eraserkason\u002Fauto_reverse --skill wp-reverse","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Feraserkason\u002Fauto_reverse\u002Fblob\u002Fmain\u002Fdata\u002Fskills\u002Fdrafts\u002Fdraft-20260321011335766568\u002Fwp-reverse\u002FSKILL.md",true,[52],{"path":53,"resourceType":54,"resourceTypeDesc":55,"sizeBytes":56,"sourceHtmlUrl":57},"references\u002Foverview.md","REFERENCE","参考文档",1238,"https:\u002F\u002Fgithub.com\u002Feraserkason\u002Fauto_reverse\u002Fblob\u002Fmain\u002Fdata\u002Fskills\u002Fdrafts\u002Fdraft-20260321011335766568\u002Fwp-reverse\u002Freferences\u002Foverview.md",[59,68,78,88,95,103],{"skillNo":60,"name":61,"nameZh":6,"description":62,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":63,"categories":64,"keywords":65,"publishedAt":25},"01M6HVYRHN517WK3R2QH4ZNV6D","stripe-confirm","使用 Stripe 参数确认支付并判定成功、拒付或 3DS 挑战结果。","https:\u002F\u002Fgithub.com\u002Feraserkason\u002Fauto_reverse\u002Fblob\u002Fmain\u002Fdata\u002Fskills\u002Fpublished\u002Fskills-20260323125814591951\u002Fwp-donate\u002Fstripe-confirm\u002FSKILL.md",[],[66,67],"stripe","stripe confirm",{"skillNo":69,"name":70,"nameZh":6,"description":71,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":72,"categories":73,"keywords":74,"publishedAt":25},"01M6HVYN942KDGF3Z06CB02C16","payment-intent","向带签名的 donateUrl 提交捐赠请求并获取 Stripe 支付意图信息。","https:\u002F\u002Fgithub.com\u002Feraserkason\u002Fauto_reverse\u002Fblob\u002Fmain\u002Fdata\u002Fskills\u002Fpublished\u002Fskills-20260323125814591951\u002Fwp-donate\u002Fpayment-intent\u002FSKILL.md",[],[75,76,77,66],"intent","payment","payment intent",{"skillNo":79,"name":80,"nameZh":6,"description":81,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":82,"categories":83,"keywords":84,"publishedAt":25},"01M6HVYKG4YGC41W8NN8JXZ580","form-view","请求 donation-form-view 并解析支付表单元数据。","https:\u002F\u002Fgithub.com\u002Feraserkason\u002Fauto_reverse\u002Fblob\u002Fmain\u002Fdata\u002Fskills\u002Fpublished\u002Fskills-20260323125814591951\u002Fwp-donate\u002Fform-view\u002FSKILL.md",[],[85,86,87],"view","form","form view",{"skillNo":89,"name":90,"nameZh":6,"description":91,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":92,"categories":93,"keywords":94,"publishedAt":25},"01M6HVYGJG28JPPQF7SQCJEG1F","discovery","访问 donate 入口页并提取后续流程所需的基础参数。","https:\u002F\u002Fgithub.com\u002Feraserkason\u002Fauto_reverse\u002Fblob\u002Fmain\u002Fdata\u002Fskills\u002Fpublished\u002Fskills-20260323125814591951\u002Fwp-donate\u002Fdiscovery\u002FSKILL.md",[],[90],{"skillNo":96,"name":97,"nameZh":6,"description":98,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":99,"categories":100,"keywords":101,"publishedAt":25},"01M6HVYEH8AFJ5TJGQR3P3MG3C","wp-donate","分析并执行 donate 平台从入口页到 Stripe 确认支付的完整流程。","https:\u002F\u002Fgithub.com\u002Feraserkason\u002Fauto_reverse\u002Fblob\u002Fmain\u002Fdata\u002Fskills\u002Fpublished\u002Fskills-20260323125814591951\u002Fwp-donate\u002FSKILL.md",[],[102,66],"wp donate",{"skillNo":104,"name":105,"nameZh":6,"description":106,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":107,"categories":108,"keywords":109,"publishedAt":25},"01M6HVYC5BSHJSFVETMAVSMYWD","request-sequence","执行捐赠流程的三个顺序 HTTP 请求","https:\u002F\u002Fgithub.com\u002Feraserkason\u002Fauto_reverse\u002Fblob\u002Fmain\u002Fdata\u002Fskills\u002Fdrafts\u002Fdraft-20260321014207011588\u002Fwp-reverse\u002Frequest-sequence\u002FSKILL.md",[],[110,111],"request sequence","http"]