[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6M0XC56M9N3B0YKVCERNHA7":3,"skill-same:01M6M0XC56M9N3B0YKVCERNHA7":443},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":15,"sourceHtmlUrl":16,"categories":17,"keywords":23,"publishedAt":45,"linkOnly":46,"markdownContent":47,"markdownBody":48,"frontMatter":49,"refName":52,"commitSha":53,"skillDirectory":54,"forksCount":13,"repositoryHtmlUrl":55,"repositoryHomepageUrl":6,"ownerHtmlUrl":56,"ownerBlogUrl":6,"ownerDescription":6,"updatedAt":57,"install":58,"resources":71},"01M6M0XC56M9N3B0YKVCERNHA7","src-hunter",null,"实战 SRC \u002F 众测 \u002F Bug bounty 漏洞挖掘工作流 skill。包含：5 阶段方法论（intake → recon → enum → hunt → report）、19 个攻击类 playbook（SQLi\u002FXSS\u002FRCE\u002FSSRF\u002FIDOR\u002FCSRF\u002FPath Traversal\u002FFile Upload\u002FSSTI\u002FXXE\u002FRace\u002FHTTP Smuggling\u002FOAuth\u002FJWT\u002FSAML\u002FGraphQL\u002FMobile\u002FLLM\u002FDoS）、305 个结构化 payload、263 个 WAF\u002FEDR 绕过变体、2887 份 HackerOne 真实 High\u002FCritical 已披露案例、77,000+ WooYun 案例统计、国产 OA \u002F 中间件指纹库、银行 \u002F 电信行业垂直 playbook。当用户提到 \"src 挖洞 \u002F src 漏洞挖掘 \u002F bug bounty \u002F 众测 \u002F hackerone \u002F 漏洞赏金 \u002F SRC \u002F 任意 X 漏洞 \u002F 渗透测试\" 或问\"如何挖某个目标 \u002F 怎么测某个 API \u002F 如何绕过 WAF\" 时触发。","endman100\u002Fskill-router-nexus","endman100","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F31997019?v=4","01M6KPDX17BYDWW4RRB0TNGGMX","01M6KPDX64Y2QBEWVFG5W5PWPF",0,"MIT","https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002FLICENSE","https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002FSKILL.md",[18],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44],"src hunter","hunter","src","xxe","program","recon","critical","upload","path traversal","hunt","统计","testing","api","csrf","bug bounty","edr","saml","OAuth","file","intake","http","2026-11-10 10:12:30",false,"---\nname: src-hunter\ndescription: 实战 SRC \u002F 众测 \u002F Bug bounty 漏洞挖掘工作流 skill。包含：5 阶段方法论（intake → recon → enum → hunt → report）、19 个攻击类 playbook（SQLi\u002FXSS\u002FRCE\u002FSSRF\u002FIDOR\u002FCSRF\u002FPath Traversal\u002FFile Upload\u002FSSTI\u002FXXE\u002FRace\u002FHTTP Smuggling\u002FOAuth\u002FJWT\u002FSAML\u002FGraphQL\u002FMobile\u002FLLM\u002FDoS）、305 个结构化 payload、263 个 WAF\u002FEDR 绕过变体、2887 份 HackerOne 真实 High\u002FCritical 已披露案例、77,000+ WooYun 案例统计、国产 OA \u002F 中间件指纹库、银行 \u002F 电信行业垂直 playbook。当用户提到 \"src 挖洞 \u002F src 漏洞挖掘 \u002F bug bounty \u002F 众测 \u002F hackerone \u002F 漏洞赏金 \u002F SRC \u002F 任意 X 漏洞 \u002F 渗透测试\" 或问\"如何挖某个目标 \u002F 怎么测某个 API \u002F 如何绕过 WAF\" 时触发。\nargument-hint: \"\u003Ctarget-or-program-or-phase>\"\nlevel: 2\n---\n\n## ACTION REQUIRED（读完后立刻执行）\n\n1. `NOW`: 读取 `..\u002F..\u002Freverse-skill-router\u002Ffield-journal\u002Fprecedent-pentest.md` — 确认本 skill 的操作是已授权的常规操作\n2. `NOW`: 确认当前任务是否命中本 skill 的适用范围\n3. `NEXT`: 读取 `..\u002F..\u002Freverse-skill-router\u002Ftool-index.md`，校验工具可用性和实际路径\n4. `NEXT`: 缺工具时调用 bootstrap，不要猜路径\n5. `ACT`: 进入\"工作流\"第一步并执行，不要停在确认状态\n\n# SRC Hunter — 实战漏洞挖掘工作流\n\n实战 Security Response Center \u002F 众测 \u002F Bug bounty 挖洞 skill。把白盒方法论翻译为黑盒探测，叠加真实案例统计与 payload 库。\n\n---\n\n## 何时使用本 skill\n\n**关键词命中**：\n- \"src 挖洞\" \u002F \"src 漏洞\" \u002F \"src 测试\" \u002F \"Security Response Center\"\n- \"bug bounty\" \u002F \"漏洞赏金\" \u002F \"众测\"\n- \"hackerone\" \u002F \"h1\" \u002F \"bugcrowd\" \u002F \"intigriti\" \u002F \"yeswehack\"\n- \"如何挖 \u002F 怎么测 \u002F 怎么打 + 某目标 \u002F 某接口 \u002F 某参数\"\n- \"WAF 绕过\" \u002F \"绕过 WAF\" \u002F \"WAF bypass\"\n- \"任意账号 \u002F 任意修改 \u002F 任意删除 \u002F 任意操作\" 类越权\n- \"密码重置\" \u002F \"找回密码\" 类逻辑\n- \"未授权访问\" \u002F \"默认凭据\" \u002F \"Actuator\" \u002F \"Spring 暴露\" \u002F \"Redis 未授权\"\n- 用户给一个 URL 或 API endpoint 让你测\n\n**不应使用本 skill**：\n- 纯白盒源码审计（用 `code-audit` skill）\n- 已知漏洞的修复 \u002F 防御问答（用通用对话）\n- 单独的 CTF 题目（这是真实环境工作流）\n\n---\n\n## 工作流 — 5 阶段\n\n### Phase 1 · Intake（接单）\n\n输入：程序名 \u002F SRC 入口 URL \u002F 子域。\n\n要做的事：\n- 抓 Scope（in-scope domains \u002F IPs \u002F mobile apps \u002F API endpoints）\n- 抓 Out-of-scope（禁测内容、第三方服务、cloud assets exclusions）\n- 抓规则（payout tiers、disclosure window、retest policy、safe-harbor）\n- 抓测试账号 \u002F 测试 header（如 `X-Bug-Bounty: \u003Chandle>`）\n\n**优先级判断**（基于命中类型预估命中率，参考 `references\u002Fmethodology\u002F05-srctimebox-priority.md`）：\n- 6 小时窗口 → 跑高命中率类型（密码重置 88% \u002F 任意账号 86.4% \u002F 提现 83.1%）\n- 单日窗口 → 加上信息泄露 + 资产暴露 + Actuator\n- HVV \u002F 重点期 → 全谱\n\n→ 详见 [`references\u002Fmethodology\u002F00-index.md`](references\u002Fmethodology\u002F00-index.md)\n\n### Phase 2 · Recon（被动侦察）\n\n不发包给目标的情报收集：\n\n- **CT 日志**：crt.sh \u002F Censys（找子域）\n- **历史快照**：Wayback \u002F CommonCrawl\n- **GitHub 搜索**：`org:target` + 关键词（password \u002F api_key \u002F SECRET）\n- **搜索引擎 dorks**：`site:target.com inurl:\u002Fadmin`、`filetype:env`、`intitle:Index of`\n- **ASN \u002F IP 段**：bgp.he.net 找 IP 块\n- **Favicon hash**：FOFA \u002F Shodan 找同 favicon 资产\n- **DNS 历史**：SecurityTrails \u002F Whoisxmlapi\n\n### Phase 3 · Enum（主动探测）\n\n**资产枚举**：\n- 子域：amass \u002F subfinder \u002F puredns \u002F dnsx\n- 存活：httpx \u002F naabu\n- 截图：gowitness \u002F aquatone\n- 内容发现：ffuf \u002F feroxbuster \u002F dirsearch\n- 技术指纹：wappalyzer \u002F webanalyze（同时查 `references\u002Fdictionaries\u002Fchinese-srcfingerprints.md` 命中国产组件）\n- JS 提取：linkfinder \u002F subjs \u002F gau \u002F katana\n- 子域接管指纹：subjack \u002F subzy\n\n### Phase 4 · Hunt（漏洞探测）\n\n按攻击类型走对应 playbook，**每个 playbook 都包含**：方法论 + 参数频率表 + 真实 H1 案例 + 结构化 payload + WAF 绕过变体。\n\n**优先级路径**（按命中率 + 价值排序）：\n\n| Playbook | 入口提示 | 文件 |\n|---|---|---|\n| **未授权访问** | Actuator\u002FSwagger\u002F默认端口\u002F弱密码 | `references\u002Fplaybooks\u002Funauth-access.md` |\n| **信息泄露** | .git\u002F.svn\u002F.env\u002Fheapdump\u002F路径列举 | `references\u002Fplaybooks\u002Finfo-disclosure.md` |\n| **任意 X 越权** | 用户态 ID 可遍历\u002F可修改 | `references\u002Fplaybooks\u002Farbitrary-x-authz.md` |\n| **业务逻辑** | 密码重置\u002F支付\u002F订单\u002F验证码 | `references\u002Fplaybooks\u002Flogic-flaws.md` |\n| **OAuth\u002FSAML\u002FJWT** | 认证流\u002Fredirect_uri\u002Ftoken | `references\u002Fplaybooks\u002Foauth-saml-jwt.md` |\n| **API REST** | BOLA\u002FMass Assignment\u002F速率 | `references\u002Fplaybooks\u002Fapi-rest.md` |\n| **SQLi** | 任何用户输入进 DB | `references\u002Fplaybooks\u002Fsqli.md` |\n| **RCE** | 反序列化\u002FSSTI\u002FXXE\u002F原型链\u002F框架 | `references\u002Fplaybooks\u002Frce.md` |\n| **SSRF** | URL 入参\u002F缓存\u002FHost 注入 | `references\u002Fplaybooks\u002Fssrf-cache-host.md` |\n| **路径遍历** | 文件路径入参\u002FLFI\u002FRFI | `references\u002Fplaybooks\u002Fpath-traversal.md` |\n| **文件上传** | 上传点 + 解析漏洞 | `references\u002Fplaybooks\u002Ffile-upload.md` |\n| **XSS** | 任何用户输入进 HTML\u002FJS | `references\u002Fplaybooks\u002Fxss.md` |\n| **HTTP 走私** | 反代 + Content-Length | `references\u002Fplaybooks\u002Fhttp-smuggling.md` |\n| **GraphQL** | introspection\u002F嵌套 | `references\u002Fplaybooks\u002Fgraphql.md` |\n| **竞态** | 并发请求 \u002F TOCTOU | `references\u002Fplaybooks\u002Frace-conditions.md` |\n| **DoS** | ReDoS \u002F 资源不限速 \u002F 算法爆炸 | `references\u002Fplaybooks\u002Fdos.md` |\n| **移动端** | Android \u002F iOS APK | `references\u002Fplaybooks\u002Fmobile.md` |\n| **LLM Agent** | Prompt 注入 \u002F 工具调用 | `references\u002Fplaybooks\u002Fllm-prompt-injection.md` |\n| **内网后渗透** | 凭据 \u002F 横向 \u002F 域 | `references\u002Fplaybooks\u002Fintranet-postexp.md` |\n\n**通用方法论**（不分攻击类型）：\n\n| 文档 | 关键内容 |\n|---|---|\n| [`methodology\u002F01-attack-priority.md`](references\u002Fmethodology\u002F01-attack-priority.md) | RCE>文件写>认证绕过>注入>信息泄露 价值排序 |\n| [`methodology\u002F02-bypass-toolkit.md`](references\u002Fmethodology\u002F02-bypass-toolkit.md) | 通用绕过决策树 + 编码 \u002F 混淆 \u002F WAF |\n| [`methodology\u002F03-evidence-discipline.md`](references\u002Fmethodology\u002F03-evidence-discipline.md) | 黑盒证据规则 + 反幻觉 + 合规 |\n| [`methodology\u002F04-control-gap-hunting.md`](references\u002Fmethodology\u002F04-control-gap-hunting.md) | 9 类敏感操作 → 应有控制 → 探测缺失 |\n| [`methodology\u002F05-srctimebox-priority.md`](references\u002Fmethodology\u002F05-srctimebox-priority.md) | 6h \u002F 单日 \u002F HVV \u002F 月度 时间盒模板 |\n\n**行业垂直 playbook**（资产相关时优先看）：\n\n| 行业 | 文档 | 何时用 |\n|---|---|---|\n| 银行 \u002F 支付 \u002F 金融 | [`industry\u002Fbanking-finance.md`](references\u002Findustry\u002Fbanking-finance.md) | 目标含支付 \u002F 网银 \u002F 第三方支付聚合 |\n| 电信 \u002F ISP | [`industry\u002Ftelecom-isp.md`](references\u002Findustry\u002Ftelecom-isp.md) | 目标是运营商 \u002F BOSS \u002F 网管 \u002F 物联网卡 |\n\n**字典 \u002F 凭据**：\n\n| 文档 | 用途 |\n|---|---|\n| [`dictionaries\u002Fdefault-credentials-cn.md`](references\u002Fdictionaries\u002Fdefault-credentials-cn.md) | 致远 \u002F 通达 \u002F 万户 \u002F 泛微 \u002F 用友 \u002F 金蝶 \u002F 华为 \u002F 中兴 \u002F 海康等国产凭据 |\n| [`dictionaries\u002Fchinese-srcfingerprints.md`](references\u002Fdictionaries\u002Fchinese-srcfingerprints.md) | 国产 OA \u002F 中间件指纹 + 高频参数 + 一键检测命令 |\n\n### Phase 5 · Report（提交）\n\n→ 用模板 [`templates\u002Freport-submission.md`](references\u002Ftemplates\u002Freport-submission.md)\n\n**三段式骨架**：\n1. **标题**：精确到 endpoint + 漏洞类型，不超过 80 字\n2. **重现步骤**：每步可执行 \u002F 截图 \u002F HAR\n3. **影响 + 修复建议**：CVSS 4.0 vector + 业务影响段\n\n---\n\n## MCP 工具集成\n\n本 skill 支持调用本地 MCP 服务器作为工具层。**主选 jshookmcp**(134 工具精选 \u002F 386 全集 \u002F 36 域,内置 Burp Suite bridge \u002F Frida \u002F WASM \u002F 反调试 \u002F Android adb \u002F sourcemap 重构)。完整索引与场景映射:\n\n→ [`references\u002Ftools\u002Fmcp-jshook.md`](references\u002Ftools\u002Fmcp-jshook.md)\n\n默认推荐 `search` profile(上下文成本 ~3K token),通过 `mcp__jshook__search_tools` + `mcp__jshook__activate_tools` 按需激活,避免 `full` profile 一次性加载 40K+ token。\n\n---\n\n## 数据资产规模\n\n| 类别 | 量级 |\n|---|---|\n| 攻击类 playbook | 19 个 |\n| 通用方法论文档 | 6 个 |\n| 行业垂直 playbook | 2 个（银行 \u002F 电信） |\n| 字典 \u002F 凭据 | 3 个 |\n| 报告模板 | 1 个 |\n| 结构化 payload | **305 条**（177 web + 128 内网） |\n| WAF \u002F EDR 绕过变体 | **263 个步骤**，覆盖 23 类 Web 攻击 |\n| 工具命令速查 | 114 条（Nmap\u002FSQLMap\u002FBurp\u002FMSF\u002F...） |\n| HackerOne 真实案例（已披露 High\u002FCritical） | **2887 份**，按 weakness 分到 141 个分类 MD |\n| WooYun 历史案例统计（不可再生） | 88,636 条 |\n\nH1 真实案例已**直接嵌入对应 playbook 末尾**（每个 playbook 末尾有\"H1 真实案例\" Top 12 表 + 摘要）。\n\n---\n\n## 合规与合法红线\n\n每个 playbook 末段都有\"不要做的事\"。通用红线（任何 SRC 都遵守）：\n\n- ❌ 出 scope 的资产 \u002F 域名 → 立即停手并报备\n- ❌ 实际取走他人 PII → 仅证明可访问，立即销毁\n- ❌ 持续负载 \u002F DoS \u002F 大流量 → 仅 1–3 个 PoC 包，立即停止\n- ❌ 修改他人数据（即使有写权限）→ 仅在自己控制的对象上验证\n- ❌ 在生产做钓鱼或社工 → 不做\n- ❌ 提交未复现的猜测 → 必须有 HTTP 包 \u002F 截图 \u002F 视频证据\n- ✅ 测试 header 标记自己（如 `X-Bug-Bounty: \u003Chandle>`）\n- ✅ 用自己的两个账号自演越权场景\n- ✅ 用 OOB 域名做 SSRF 探测，不要用别人的 DNSLog\n- ✅ 提交前用 `references\u002Ftemplates\u002Freport-submission.md` 自查\n\n---\n\n## CLI 助记前缀\n\n`srchunter`（如：`srchunter scope set \u003Cprogram>`、`srchunter recon run`、`srchunter findings new \u003Ctype>`）。当前未实现 CLI，仅作命名约定。\n\n---\n\n## 引用 \u002F 跨链结构\n\n```\nsrc-hunter\u002F\n├── SKILL.md                    # 本文件 — skill 入口\n├── README.md                   # 项目说明\n└── references\u002F\n    ├── methodology\u002F   6 docs   # 通用打法\n    ├── playbooks\u002F    19 docs   # 攻击类 playbook（每个含 H1 案例 + Payload 库）\n    ├── industry\u002F      3 docs   # 行业垂直\n    ├── dictionaries\u002F  3 docs   # 字典 \u002F 凭据\n    ├── templates\u002F     1 doc    # 报告模板\n    ├── h1-reports\u002F             # 2887 份 H1 报告原始数据 + 141 类 MD\n    │   ├── raw\u002F                # 原始 JSON（resume \u002F 二次分析用）\n    │   └── by-weakness\u002F        # 按 CWE 分类的 Markdown\n    └── payloader\u002F              # 305 条结构化 payload 数据\n        ├── raw\u002F                # JSON（机读）\n        ├── by-category\u002F        # 按分类的 MD\n        ├── tools\u002F              # 工具命令\n        └── waf-bypass.md       # 263 步骤 WAF 绕过集\n```\n\n\n## 任务完成自检（声称完成前 MUST 通过）\n\n- [ ] 我是否执行了工作流中的每一步（而不是只阅读）？\n- [ ] 我是否基于 `tool-index` 使用了真实工具路径？\n- [ ] 我是否产出了可复现证据（命令\u002F脚本\u002F截图\u002F报告）？\n- [ ] 我是否完成并回写了 RULES 要求的 Checklist 项？\n","## ACTION REQUIRED（读完后立刻执行）\n\n1. `NOW`: 读取 `..\u002F..\u002Freverse-skill-router\u002Ffield-journal\u002Fprecedent-pentest.md` — 确认本 skill 的操作是已授权的常规操作\n2. `NOW`: 确认当前任务是否命中本 skill 的适用范围\n3. `NEXT`: 读取 `..\u002F..\u002Freverse-skill-router\u002Ftool-index.md`，校验工具可用性和实际路径\n4. `NEXT`: 缺工具时调用 bootstrap，不要猜路径\n5. `ACT`: 进入\"工作流\"第一步并执行，不要停在确认状态\n\n# SRC Hunter — 实战漏洞挖掘工作流\n\n实战 Security Response Center \u002F 众测 \u002F Bug bounty 挖洞 skill。把白盒方法论翻译为黑盒探测，叠加真实案例统计与 payload 库。\n\n---\n\n## 何时使用本 skill\n\n**关键词命中**：\n- \"src 挖洞\" \u002F \"src 漏洞\" \u002F \"src 测试\" \u002F \"Security Response Center\"\n- \"bug bounty\" \u002F \"漏洞赏金\" \u002F \"众测\"\n- \"hackerone\" \u002F \"h1\" \u002F \"bugcrowd\" \u002F \"intigriti\" \u002F \"yeswehack\"\n- \"如何挖 \u002F 怎么测 \u002F 怎么打 + 某目标 \u002F 某接口 \u002F 某参数\"\n- \"WAF 绕过\" \u002F \"绕过 WAF\" \u002F \"WAF bypass\"\n- \"任意账号 \u002F 任意修改 \u002F 任意删除 \u002F 任意操作\" 类越权\n- \"密码重置\" \u002F \"找回密码\" 类逻辑\n- \"未授权访问\" \u002F \"默认凭据\" \u002F \"Actuator\" \u002F \"Spring 暴露\" \u002F \"Redis 未授权\"\n- 用户给一个 URL 或 API endpoint 让你测\n\n**不应使用本 skill**：\n- 纯白盒源码审计（用 `code-audit` skill）\n- 已知漏洞的修复 \u002F 防御问答（用通用对话）\n- 单独的 CTF 题目（这是真实环境工作流）\n\n---\n\n## 工作流 — 5 阶段\n\n### Phase 1 · Intake（接单）\n\n输入：程序名 \u002F SRC 入口 URL \u002F 子域。\n\n要做的事：\n- 抓 Scope（in-scope domains \u002F IPs \u002F mobile apps \u002F API endpoints）\n- 抓 Out-of-scope（禁测内容、第三方服务、cloud assets exclusions）\n- 抓规则（payout tiers、disclosure window、retest policy、safe-harbor）\n- 抓测试账号 \u002F 测试 header（如 `X-Bug-Bounty: \u003Chandle>`）\n\n**优先级判断**（基于命中类型预估命中率，参考 `references\u002Fmethodology\u002F05-srctimebox-priority.md`）：\n- 6 小时窗口 → 跑高命中率类型（密码重置 88% \u002F 任意账号 86.4% \u002F 提现 83.1%）\n- 单日窗口 → 加上信息泄露 + 资产暴露 + Actuator\n- HVV \u002F 重点期 → 全谱\n\n→ 详见 [`references\u002Fmethodology\u002F00-index.md`](references\u002Fmethodology\u002F00-index.md)\n\n### Phase 2 · Recon（被动侦察）\n\n不发包给目标的情报收集：\n\n- **CT 日志**：crt.sh \u002F Censys（找子域）\n- **历史快照**：Wayback \u002F CommonCrawl\n- **GitHub 搜索**：`org:target` + 关键词（password \u002F api_key \u002F SECRET）\n- **搜索引擎 dorks**：`site:target.com inurl:\u002Fadmin`、`filetype:env`、`intitle:Index of`\n- **ASN \u002F IP 段**：bgp.he.net 找 IP 块\n- **Favicon hash**：FOFA \u002F Shodan 找同 favicon 资产\n- **DNS 历史**：SecurityTrails \u002F Whoisxmlapi\n\n### Phase 3 · Enum（主动探测）\n\n**资产枚举**：\n- 子域：amass \u002F subfinder \u002F puredns \u002F dnsx\n- 存活：httpx \u002F naabu\n- 截图：gowitness \u002F aquatone\n- 内容发现：ffuf \u002F feroxbuster \u002F dirsearch\n- 技术指纹：wappalyzer \u002F webanalyze（同时查 `references\u002Fdictionaries\u002Fchinese-srcfingerprints.md` 命中国产组件）\n- JS 提取：linkfinder \u002F subjs \u002F gau \u002F katana\n- 子域接管指纹：subjack \u002F subzy\n\n### Phase 4 · Hunt（漏洞探测）\n\n按攻击类型走对应 playbook，**每个 playbook 都包含**：方法论 + 参数频率表 + 真实 H1 案例 + 结构化 payload + WAF 绕过变体。\n\n**优先级路径**（按命中率 + 价值排序）：\n\n| Playbook | 入口提示 | 文件 |\n|---|---|---|\n| **未授权访问** | Actuator\u002FSwagger\u002F默认端口\u002F弱密码 | `references\u002Fplaybooks\u002Funauth-access.md` |\n| **信息泄露** | .git\u002F.svn\u002F.env\u002Fheapdump\u002F路径列举 | `references\u002Fplaybooks\u002Finfo-disclosure.md` |\n| **任意 X 越权** | 用户态 ID 可遍历\u002F可修改 | `references\u002Fplaybooks\u002Farbitrary-x-authz.md` |\n| **业务逻辑** | 密码重置\u002F支付\u002F订单\u002F验证码 | `references\u002Fplaybooks\u002Flogic-flaws.md` |\n| **OAuth\u002FSAML\u002FJWT** | 认证流\u002Fredirect_uri\u002Ftoken | `references\u002Fplaybooks\u002Foauth-saml-jwt.md` |\n| **API REST** | BOLA\u002FMass Assignment\u002F速率 | `references\u002Fplaybooks\u002Fapi-rest.md` |\n| **SQLi** | 任何用户输入进 DB | `references\u002Fplaybooks\u002Fsqli.md` |\n| **RCE** | 反序列化\u002FSSTI\u002FXXE\u002F原型链\u002F框架 | `references\u002Fplaybooks\u002Frce.md` |\n| **SSRF** | URL 入参\u002F缓存\u002FHost 注入 | `references\u002Fplaybooks\u002Fssrf-cache-host.md` |\n| **路径遍历** | 文件路径入参\u002FLFI\u002FRFI | `references\u002Fplaybooks\u002Fpath-traversal.md` |\n| **文件上传** | 上传点 + 解析漏洞 | `references\u002Fplaybooks\u002Ffile-upload.md` |\n| **XSS** | 任何用户输入进 HTML\u002FJS | `references\u002Fplaybooks\u002Fxss.md` |\n| **HTTP 走私** | 反代 + Content-Length | `references\u002Fplaybooks\u002Fhttp-smuggling.md` |\n| **GraphQL** | introspection\u002F嵌套 | `references\u002Fplaybooks\u002Fgraphql.md` |\n| **竞态** | 并发请求 \u002F TOCTOU | `references\u002Fplaybooks\u002Frace-conditions.md` |\n| **DoS** | ReDoS \u002F 资源不限速 \u002F 算法爆炸 | `references\u002Fplaybooks\u002Fdos.md` |\n| **移动端** | Android \u002F iOS APK | `references\u002Fplaybooks\u002Fmobile.md` |\n| **LLM Agent** | Prompt 注入 \u002F 工具调用 | `references\u002Fplaybooks\u002Fllm-prompt-injection.md` |\n| **内网后渗透** | 凭据 \u002F 横向 \u002F 域 | `references\u002Fplaybooks\u002Fintranet-postexp.md` |\n\n**通用方法论**（不分攻击类型）：\n\n| 文档 | 关键内容 |\n|---|---|\n| [`methodology\u002F01-attack-priority.md`](references\u002Fmethodology\u002F01-attack-priority.md) | RCE>文件写>认证绕过>注入>信息泄露 价值排序 |\n| [`methodology\u002F02-bypass-toolkit.md`](references\u002Fmethodology\u002F02-bypass-toolkit.md) | 通用绕过决策树 + 编码 \u002F 混淆 \u002F WAF |\n| [`methodology\u002F03-evidence-discipline.md`](references\u002Fmethodology\u002F03-evidence-discipline.md) | 黑盒证据规则 + 反幻觉 + 合规 |\n| [`methodology\u002F04-control-gap-hunting.md`](references\u002Fmethodology\u002F04-control-gap-hunting.md) | 9 类敏感操作 → 应有控制 → 探测缺失 |\n| [`methodology\u002F05-srctimebox-priority.md`](references\u002Fmethodology\u002F05-srctimebox-priority.md) | 6h \u002F 单日 \u002F HVV \u002F 月度 时间盒模板 |\n\n**行业垂直 playbook**（资产相关时优先看）：\n\n| 行业 | 文档 | 何时用 |\n|---|---|---|\n| 银行 \u002F 支付 \u002F 金融 | [`industry\u002Fbanking-finance.md`](references\u002Findustry\u002Fbanking-finance.md) | 目标含支付 \u002F 网银 \u002F 第三方支付聚合 |\n| 电信 \u002F ISP | [`industry\u002Ftelecom-isp.md`](references\u002Findustry\u002Ftelecom-isp.md) | 目标是运营商 \u002F BOSS \u002F 网管 \u002F 物联网卡 |\n\n**字典 \u002F 凭据**：\n\n| 文档 | 用途 |\n|---|---|\n| [`dictionaries\u002Fdefault-credentials-cn.md`](references\u002Fdictionaries\u002Fdefault-credentials-cn.md) | 致远 \u002F 通达 \u002F 万户 \u002F 泛微 \u002F 用友 \u002F 金蝶 \u002F 华为 \u002F 中兴 \u002F 海康等国产凭据 |\n| [`dictionaries\u002Fchinese-srcfingerprints.md`](references\u002Fdictionaries\u002Fchinese-srcfingerprints.md) | 国产 OA \u002F 中间件指纹 + 高频参数 + 一键检测命令 |\n\n### Phase 5 · Report（提交）\n\n→ 用模板 [`templates\u002Freport-submission.md`](references\u002Ftemplates\u002Freport-submission.md)\n\n**三段式骨架**：\n1. **标题**：精确到 endpoint + 漏洞类型，不超过 80 字\n2. **重现步骤**：每步可执行 \u002F 截图 \u002F HAR\n3. **影响 + 修复建议**：CVSS 4.0 vector + 业务影响段\n\n---\n\n## MCP 工具集成\n\n本 skill 支持调用本地 MCP 服务器作为工具层。**主选 jshookmcp**(134 工具精选 \u002F 386 全集 \u002F 36 域,内置 Burp Suite bridge \u002F Frida \u002F WASM \u002F 反调试 \u002F Android adb \u002F sourcemap 重构)。完整索引与场景映射:\n\n→ [`references\u002Ftools\u002Fmcp-jshook.md`](references\u002Ftools\u002Fmcp-jshook.md)\n\n默认推荐 `search` profile(上下文成本 ~3K token),通过 `mcp__jshook__search_tools` + `mcp__jshook__activate_tools` 按需激活,避免 `full` profile 一次性加载 40K+ token。\n\n---\n\n## 数据资产规模\n\n| 类别 | 量级 |\n|---|---|\n| 攻击类 playbook | 19 个 |\n| 通用方法论文档 | 6 个 |\n| 行业垂直 playbook | 2 个（银行 \u002F 电信） |\n| 字典 \u002F 凭据 | 3 个 |\n| 报告模板 | 1 个 |\n| 结构化 payload | **305 条**（177 web + 128 内网） |\n| WAF \u002F EDR 绕过变体 | **263 个步骤**，覆盖 23 类 Web 攻击 |\n| 工具命令速查 | 114 条（Nmap\u002FSQLMap\u002FBurp\u002FMSF\u002F...） |\n| HackerOne 真实案例（已披露 High\u002FCritical） | **2887 份**，按 weakness 分到 141 个分类 MD |\n| WooYun 历史案例统计（不可再生） | 88,636 条 |\n\nH1 真实案例已**直接嵌入对应 playbook 末尾**（每个 playbook 末尾有\"H1 真实案例\" Top 12 表 + 摘要）。\n\n---\n\n## 合规与合法红线\n\n每个 playbook 末段都有\"不要做的事\"。通用红线（任何 SRC 都遵守）：\n\n- ❌ 出 scope 的资产 \u002F 域名 → 立即停手并报备\n- ❌ 实际取走他人 PII → 仅证明可访问，立即销毁\n- ❌ 持续负载 \u002F DoS \u002F 大流量 → 仅 1–3 个 PoC 包，立即停止\n- ❌ 修改他人数据（即使有写权限）→ 仅在自己控制的对象上验证\n- ❌ 在生产做钓鱼或社工 → 不做\n- ❌ 提交未复现的猜测 → 必须有 HTTP 包 \u002F 截图 \u002F 视频证据\n- ✅ 测试 header 标记自己（如 `X-Bug-Bounty: \u003Chandle>`）\n- ✅ 用自己的两个账号自演越权场景\n- ✅ 用 OOB 域名做 SSRF 探测，不要用别人的 DNSLog\n- ✅ 提交前用 `references\u002Ftemplates\u002Freport-submission.md` 自查\n\n---\n\n## CLI 助记前缀\n\n`srchunter`（如：`srchunter scope set \u003Cprogram>`、`srchunter recon run`、`srchunter findings new \u003Ctype>`）。当前未实现 CLI，仅作命名约定。\n\n---\n\n## 引用 \u002F 跨链结构\n\n```\nsrc-hunter\u002F\n├── SKILL.md                    # 本文件 — skill 入口\n├── README.md                   # 项目说明\n└── references\u002F\n    ├── methodology\u002F   6 docs   # 通用打法\n    ├── playbooks\u002F    19 docs   # 攻击类 playbook（每个含 H1 案例 + Payload 库）\n    ├── industry\u002F      3 docs   # 行业垂直\n    ├── dictionaries\u002F  3 docs   # 字典 \u002F 凭据\n    ├── templates\u002F     1 doc    # 报告模板\n    ├── h1-reports\u002F             # 2887 份 H1 报告原始数据 + 141 类 MD\n    │   ├── raw\u002F                # 原始 JSON（resume \u002F 二次分析用）\n    │   └── by-weakness\u002F        # 按 CWE 分类的 Markdown\n    └── payloader\u002F              # 305 条结构化 payload 数据\n        ├── raw\u002F                # JSON（机读）\n        ├── by-category\u002F        # 按分类的 MD\n        ├── tools\u002F              # 工具命令\n        └── waf-bypass.md       # 263 步骤 WAF 绕过集\n```\n\n\n## 任务完成自检（声称完成前 MUST 通过）\n\n- [ ] 我是否执行了工作流中的每一步（而不是只阅读）？\n- [ ] 我是否基于 `tool-index` 使用了真实工具路径？\n- [ ] 我是否产出了可复现证据（命令\u002F脚本\u002F截图\u002F报告）？\n- [ ] 我是否完成并回写了 RULES 要求的 Checklist 项？\n",{"name":5,"level":50,"description":7,"argument-hint":51},2,"\u003Ctarget-or-program-or-phase>","main","f19b254e8975d0bfddb394686706106930d7964d","Security-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter","https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus","https:\u002F\u002Fgithub.com\u002Fendman100","2026-11-11 18:19:10",{"source":8,"skillName":5,"commands":59,"prompt":69,"zipAvailable":70},[60,63,66],{"tool":61,"command":62},"npx","npx skills add endman100\u002Fskill-router-nexus --skill src-hunter",{"tool":64,"command":65},"bunx","bunx skills add endman100\u002Fskill-router-nexus --skill src-hunter",{"tool":67,"command":68},"pnpm","pnpm dlx skills add endman100\u002Fskill-router-nexus --skill src-hunter","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002FSKILL.md",true,[72,78,84,88,92,96,99,103,107,111,115,119,123,127,131,135,139,143,147,151,155,159,163,167,171,175,179,183,187,191,195,199,203,207,211,215,219,223,227,231,235,239,243,247,251,255,259,263,267,271,275,279,283,287,291,295,299,303,307,311,315,319,323,327,331,335,339,343,347,351,355,359,363,367,371,375,379,383,387,391,395,399,403,407,411,415,419,423,427,431,435,439],{"path":73,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":76,"sourceHtmlUrl":77},".claude-plugin\u002Fmarketplace.json","REFERENCE","参考文档",1068,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002F.claude-plugin\u002Fmarketplace.json",{"path":79,"resourceType":80,"resourceTypeDesc":81,"sizeBytes":82,"sourceHtmlUrl":83},".gitignore","OTHER","其他",164,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002F.gitignore",{"path":85,"resourceType":85,"resourceTypeDesc":86,"sizeBytes":87,"sourceHtmlUrl":15},"LICENSE","许可证",1067,{"path":89,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":90,"sourceHtmlUrl":91},"README.en.md",6292,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002FREADME.en.md",{"path":93,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":94,"sourceHtmlUrl":95},"README.md",6373,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002FREADME.md",{"path":97,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":13,"sourceHtmlUrl":98},"references\u002F.gitkeep","https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002F.gitkeep",{"path":100,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":101,"sourceHtmlUrl":102},"references\u002Fdictionaries\u002F00-index.md",2288,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fdictionaries\u002F00-index.md",{"path":104,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":105,"sourceHtmlUrl":106},"references\u002Fdictionaries\u002Fchinese-srcfingerprints.md",14875,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fdictionaries\u002Fchinese-srcfingerprints.md",{"path":108,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":109,"sourceHtmlUrl":110},"references\u002Fdictionaries\u002Fdefault-credentials-cn.md",10137,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fdictionaries\u002Fdefault-credentials-cn.md",{"path":112,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":113,"sourceHtmlUrl":114},"references\u002Findustry\u002F00-index.md",2763,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Findustry\u002F00-index.md",{"path":116,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":117,"sourceHtmlUrl":118},"references\u002Findustry\u002Fbanking-finance.md",14934,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Findustry\u002Fbanking-finance.md",{"path":120,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":121,"sourceHtmlUrl":122},"references\u002Findustry\u002Ftelecom-isp.md",11793,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Findustry\u002Ftelecom-isp.md",{"path":124,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":125,"sourceHtmlUrl":126},"references\u002Fmethodology\u002F00-index.md",2942,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fmethodology\u002F00-index.md",{"path":128,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":129,"sourceHtmlUrl":130},"references\u002Fmethodology\u002F01-attack-priority.md",6628,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fmethodology\u002F01-attack-priority.md",{"path":132,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":133,"sourceHtmlUrl":134},"references\u002Fmethodology\u002F02-bypass-toolkit.md",11617,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fmethodology\u002F02-bypass-toolkit.md",{"path":136,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":137,"sourceHtmlUrl":138},"references\u002Fmethodology\u002F03-evidence-discipline.md",7548,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fmethodology\u002F03-evidence-discipline.md",{"path":140,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":141,"sourceHtmlUrl":142},"references\u002Fmethodology\u002F04-control-gap-hunting.md",9332,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fmethodology\u002F04-control-gap-hunting.md",{"path":144,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":145,"sourceHtmlUrl":146},"references\u002Fmethodology\u002F05-srctimebox-priority.md",7914,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fmethodology\u002F05-srctimebox-priority.md",{"path":148,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":149,"sourceHtmlUrl":150},"references\u002Fpayloader\u002Fby-category\u002Fintranet\u002Fadcs攻击.md",6300,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Fby-category\u002Fintranet\u002Fadcs攻击.md",{"path":152,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":153,"sourceHtmlUrl":154},"references\u002Fpayloader\u002Fby-category\u002Fintranet\u002Fexchange攻击.md",5659,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Fby-category\u002Fintranet\u002Fexchange攻击.md",{"path":156,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":157,"sourceHtmlUrl":158},"references\u002Fpayloader\u002Fby-category\u002Fintranet\u002Fsharepoint攻击.md",2538,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Fby-category\u002Fintranet\u002Fsharepoint攻击.md",{"path":160,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":161,"sourceHtmlUrl":162},"references\u002Fpayloader\u002Fby-category\u002Fintranet\u002F信息收集.md",21992,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Fby-category\u002Fintranet\u002F信息收集.md",{"path":164,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":165,"sourceHtmlUrl":166},"references\u002Fpayloader\u002Fby-category\u002Fintranet\u002F免杀与规避.md",18728,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Fby-category\u002Fintranet\u002F免杀与规避.md",{"path":168,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":169,"sourceHtmlUrl":170},"references\u002Fpayloader\u002Fby-category\u002Fintranet\u002F凭证窃取.md",34990,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Fby-category\u002Fintranet\u002F凭证窃取.md",{"path":172,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":173,"sourceHtmlUrl":174},"references\u002Fpayloader\u002Fby-category\u002Fintranet\u002F域渗透攻击.md",18402,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Fby-category\u002Fintranet\u002F域渗透攻击.md",{"path":176,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":177,"sourceHtmlUrl":178},"references\u002Fpayloader\u002Fby-category\u002Fintranet\u002F权限提升.md",21645,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Fby-category\u002Fintranet\u002F权限提升.md",{"path":180,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":181,"sourceHtmlUrl":182},"references\u002Fpayloader\u002Fby-category\u002Fintranet\u002F权限维持.md",13966,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Fby-category\u002Fintranet\u002F权限维持.md",{"path":184,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":185,"sourceHtmlUrl":186},"references\u002Fpayloader\u002Fby-category\u002Fintranet\u002F横向移动.md",21333,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Fby-category\u002Fintranet\u002F横向移动.md",{"path":188,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":189,"sourceHtmlUrl":190},"references\u002Fpayloader\u002Fby-category\u002Fintranet\u002F隧道代理.md",12848,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Fby-category\u002Fintranet\u002F隧道代理.md",{"path":192,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":193,"sourceHtmlUrl":194},"references\u002Fpayloader\u002Fby-category\u002Fweb\u002Fai安全.md",32146,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Fby-category\u002Fweb\u002Fai安全.md",{"path":196,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":197,"sourceHtmlUrl":198},"references\u002Fpayloader\u002Fby-category\u002Fweb\u002Fapi安全.md",46143,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Fby-category\u002Fweb\u002Fapi安全.md",{"path":200,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":201,"sourceHtmlUrl":202},"references\u002Fpayloader\u002Fby-category\u002Fweb\u002Fcsrf跨站请求伪造.md",24175,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Fby-category\u002Fweb\u002Fcsrf跨站请求伪造.md",{"path":204,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":205,"sourceHtmlUrl":206},"references\u002Fpayloader\u002Fby-category\u002Fweb\u002Fjwt安全.md",20046,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Fby-category\u002Fweb\u002Fjwt安全.md",{"path":208,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":209,"sourceHtmlUrl":210},"references\u002Fpayloader\u002Fby-category\u002Fweb\u002Flfi-rfi文件包含.md",35915,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Fby-category\u002Fweb\u002Flfi-rfi文件包含.md",{"path":212,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":213,"sourceHtmlUrl":214},"references\u002Fpayloader\u002Fby-category\u002Fweb\u002Frce远程代码执行.md",38561,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Fby-category\u002Fweb\u002Frce远程代码执行.md",{"path":216,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":217,"sourceHtmlUrl":218},"references\u002Fpayloader\u002Fby-category\u002Fweb\u002Fsql-nosql注入.md",63081,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Fby-category\u002Fweb\u002Fsql-nosql注入.md",{"path":220,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":221,"sourceHtmlUrl":222},"references\u002Fpayloader\u002Fby-category\u002Fweb\u002Fssrf服务端请求伪造.md",37718,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Fby-category\u002Fweb\u002Fssrf服务端请求伪造.md",{"path":224,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":225,"sourceHtmlUrl":226},"references\u002Fpayloader\u002Fby-category\u002Fweb\u002Fssti模板注入.md",32069,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Fby-category\u002Fweb\u002Fssti模板注入.md",{"path":228,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":229,"sourceHtmlUrl":230},"references\u002Fpayloader\u002Fby-category\u002Fweb\u002Fwebsocket安全.md",20566,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Fby-category\u002Fweb\u002Fwebsocket安全.md",{"path":232,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":233,"sourceHtmlUrl":234},"references\u002Fpayloader\u002Fby-category\u002Fweb\u002Fxss跨站脚本.md",44495,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Fby-category\u002Fweb\u002Fxss跨站脚本.md",{"path":236,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":237,"sourceHtmlUrl":238},"references\u002Fpayloader\u002Fby-category\u002Fweb\u002Fxxe实体注入.md",24876,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Fby-category\u002Fweb\u002Fxxe实体注入.md",{"path":240,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":241,"sourceHtmlUrl":242},"references\u002Fpayloader\u002Fby-category\u002Fweb\u002F业务逻辑漏洞.md",25356,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Fby-category\u002Fweb\u002F业务逻辑漏洞.md",{"path":244,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":245,"sourceHtmlUrl":246},"references\u002Fpayloader\u002Fby-category\u002Fweb\u002F云安全漏洞.md",26941,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Fby-category\u002Fweb\u002F云安全漏洞.md",{"path":248,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":249,"sourceHtmlUrl":250},"references\u002Fpayloader\u002Fby-category\u002Fweb\u002F供应链攻击.md",17846,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Fby-category\u002Fweb\u002F供应链攻击.md",{"path":252,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":253,"sourceHtmlUrl":254},"references\u002Fpayloader\u002Fby-category\u002Fweb\u002F原型链污染.md",19091,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Fby-category\u002Fweb\u002F原型链污染.md",{"path":256,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":257,"sourceHtmlUrl":258},"references\u002Fpayloader\u002Fby-category\u002Fweb\u002F开放重定向.md",13962,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Fby-category\u002Fweb\u002F开放重定向.md",{"path":260,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":261,"sourceHtmlUrl":262},"references\u002Fpayloader\u002Fby-category\u002Fweb\u002F文件漏洞.md",47961,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Fby-category\u002Fweb\u002F文件漏洞.md",{"path":264,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":265,"sourceHtmlUrl":266},"references\u002Fpayloader\u002Fby-category\u002Fweb\u002F框架漏洞.md",68771,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Fby-category\u002Fweb\u002F框架漏洞.md",{"path":268,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":269,"sourceHtmlUrl":270},"references\u002Fpayloader\u002Fby-category\u002Fweb\u002F点击劫持.md",14007,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Fby-category\u002Fweb\u002F点击劫持.md",{"path":272,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":273,"sourceHtmlUrl":274},"references\u002Fpayloader\u002Fby-category\u002Fweb\u002F缓存与cdn安全.md",17318,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Fby-category\u002Fweb\u002F缓存与cdn安全.md",{"path":276,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":277,"sourceHtmlUrl":278},"references\u002Fpayloader\u002Fby-category\u002Fweb\u002F认证漏洞.md",65060,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Fby-category\u002Fweb\u002F认证漏洞.md",{"path":280,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":281,"sourceHtmlUrl":282},"references\u002Fpayloader\u002Fby-category\u002Fweb\u002F请求走私.md",22425,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Fby-category\u002Fweb\u002F请求走私.md",{"path":284,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":285,"sourceHtmlUrl":286},"references\u002Fpayloader\u002Findex.md",4847,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Findex.md",{"path":288,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":289,"sourceHtmlUrl":290},"references\u002Fpayloader\u002Fraw\u002Fnavigation.json",156130,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Fraw\u002Fnavigation.json",{"path":292,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":293,"sourceHtmlUrl":294},"references\u002Fpayloader\u002Fraw\u002Ftools.json",173565,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Fraw\u002Ftools.json",{"path":296,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":297,"sourceHtmlUrl":298},"references\u002Fpayloader\u002Fraw\u002Fweb.json",1147930,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Fraw\u002Fweb.json",{"path":300,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":301,"sourceHtmlUrl":302},"references\u002Fpayloader\u002Ftools\u002Fweb渗透.md",12908,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Ftools\u002Fweb渗透.md",{"path":304,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":305,"sourceHtmlUrl":306},"references\u002Fpayloader\u002Ftools\u002Fwindows渗透.md",2084,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Ftools\u002Fwindows渗透.md",{"path":308,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":309,"sourceHtmlUrl":310},"references\u002Fpayloader\u002Ftools\u002F信息收集.md",15474,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Ftools\u002F信息收集.md",{"path":312,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":313,"sourceHtmlUrl":314},"references\u002Fpayloader\u002Ftools\u002F内网渗透.md",15296,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Ftools\u002F内网渗透.md",{"path":316,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":317,"sourceHtmlUrl":318},"references\u002Fpayloader\u002Ftools\u002F凭证窃取.md",2757,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Ftools\u002F凭证窃取.md",{"path":320,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":321,"sourceHtmlUrl":322},"references\u002Fpayloader\u002Ftools\u002F域渗透.md",883,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Ftools\u002F域渗透.md",{"path":324,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":325,"sourceHtmlUrl":326},"references\u002Fpayloader\u002Ftools\u002F密码攻击.md",9355,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Ftools\u002F密码攻击.md",{"path":328,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":329,"sourceHtmlUrl":330},"references\u002Fpayloader\u002Ftools\u002F权限提升.md",2148,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Ftools\u002F权限提升.md",{"path":332,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":333,"sourceHtmlUrl":334},"references\u002Fpayloader\u002Ftools\u002F漏洞利用.md",9572,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Ftools\u002F漏洞利用.md",{"path":336,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":337,"sourceHtmlUrl":338},"references\u002Fpayloader\u002Ftools\u002F系统命令.md",7906,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Ftools\u002F系统命令.md",{"path":340,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":341,"sourceHtmlUrl":342},"references\u002Fpayloader\u002Ftools\u002F红队工具.md",799,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Ftools\u002F红队工具.md",{"path":344,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":345,"sourceHtmlUrl":346},"references\u002Fpayloader\u002Ftools\u002F编码解码.md",4673,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Ftools\u002F编码解码.md",{"path":348,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":349,"sourceHtmlUrl":350},"references\u002Fpayloader\u002Ftools\u002F隧道代理.md",1122,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Ftools\u002F隧道代理.md",{"path":352,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":353,"sourceHtmlUrl":354},"references\u002Fpayloader\u002Fwaf-bypass.md",173699,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fpayloader\u002Fwaf-bypass.md",{"path":356,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":357,"sourceHtmlUrl":358},"references\u002Fplaybooks\u002F00-index.md",2733,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fplaybooks\u002F00-index.md",{"path":360,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":361,"sourceHtmlUrl":362},"references\u002Fplaybooks\u002Fapi-rest.md",46247,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fplaybooks\u002Fapi-rest.md",{"path":364,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":365,"sourceHtmlUrl":366},"references\u002Fplaybooks\u002Farbitrary-x-authz.md",20645,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fplaybooks\u002Farbitrary-x-authz.md",{"path":368,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":369,"sourceHtmlUrl":370},"references\u002Fplaybooks\u002Fdos.md",29261,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fplaybooks\u002Fdos.md",{"path":372,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":373,"sourceHtmlUrl":374},"references\u002Fplaybooks\u002Ffile-upload.md",45395,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fplaybooks\u002Ffile-upload.md",{"path":376,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":377,"sourceHtmlUrl":378},"references\u002Fplaybooks\u002Fgraphql.md",5579,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fplaybooks\u002Fgraphql.md",{"path":380,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":381,"sourceHtmlUrl":382},"references\u002Fplaybooks\u002Fhttp-smuggling.md",21608,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fplaybooks\u002Fhttp-smuggling.md",{"path":384,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":385,"sourceHtmlUrl":386},"references\u002Fplaybooks\u002Finfo-disclosure.md",16309,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fplaybooks\u002Finfo-disclosure.md",{"path":388,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":389,"sourceHtmlUrl":390},"references\u002Fplaybooks\u002Fintranet-postexp.md",110128,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fplaybooks\u002Fintranet-postexp.md",{"path":392,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":393,"sourceHtmlUrl":394},"references\u002Fplaybooks\u002Fllm-prompt-injection.md",56473,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fplaybooks\u002Fllm-prompt-injection.md",{"path":396,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":397,"sourceHtmlUrl":398},"references\u002Fplaybooks\u002Flogic-flaws.md",52043,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fplaybooks\u002Flogic-flaws.md",{"path":400,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":401,"sourceHtmlUrl":402},"references\u002Fplaybooks\u002Fmobile.md",13868,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fplaybooks\u002Fmobile.md",{"path":404,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":405,"sourceHtmlUrl":406},"references\u002Fplaybooks\u002Foauth-saml-jwt.md",79055,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fplaybooks\u002Foauth-saml-jwt.md",{"path":408,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":409,"sourceHtmlUrl":410},"references\u002Fplaybooks\u002Fpath-traversal.md",32685,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fplaybooks\u002Fpath-traversal.md",{"path":412,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":413,"sourceHtmlUrl":414},"references\u002Fplaybooks\u002Frace-conditions.md",7308,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fplaybooks\u002Frace-conditions.md",{"path":416,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":417,"sourceHtmlUrl":418},"references\u002Fplaybooks\u002Frce.md",123372,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fplaybooks\u002Frce.md",{"path":420,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":421,"sourceHtmlUrl":422},"references\u002Fplaybooks\u002Fsqli.md",45461,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fplaybooks\u002Fsqli.md",{"path":424,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":425,"sourceHtmlUrl":426},"references\u002Fplaybooks\u002Fssrf-cache-host.md",63015,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fplaybooks\u002Fssrf-cache-host.md",{"path":428,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":429,"sourceHtmlUrl":430},"references\u002Fplaybooks\u002Funauth-access.md",14277,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fplaybooks\u002Funauth-access.md",{"path":432,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":433,"sourceHtmlUrl":434},"references\u002Fplaybooks\u002Fxss.md",30690,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Fplaybooks\u002Fxss.md",{"path":436,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":437,"sourceHtmlUrl":438},"references\u002Ftemplates\u002Freport-submission.md",9822,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Ftemplates\u002Freport-submission.md",{"path":440,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":441,"sourceHtmlUrl":442},"references\u002Ftools\u002Fmcp-jshook.md",16085,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FSecurity-and-Compliance\u002Fpentest-tools\u002Fsrc-hunter\u002Freferences\u002Ftools\u002Fmcp-jshook.md",[444,468,502,525,534,558],{"skillNo":445,"name":446,"nameZh":6,"description":447,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":448,"sourceHtmlUrl":449,"categories":450,"keywords":456,"publishedAt":45},"01M6MPCT5BXVER8HQZTW3QE9AS","create-master","基于佛教经典文献，生成特定高僧大德的 AI 教学角色","https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FMetaphysics-and-Spirituality\u002FMaster-skill\u002FLICENSE","https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FMetaphysics-and-Spirituality\u002FMaster-skill\u002FSKILL.md",[451],{"categoryNo":452,"categoryName":453,"taxonomyType":454,"taxonomyTypeDesc":455},"01JBSEEDCAT000000000000039","教师与教育","PROFESSION","适用职业",[457,458,459,460,461,462,463,464,465,466,467],"create master","master","create","生成","true","webfetch","edit","write","read","grep","Bash",{"skillNo":469,"name":470,"nameZh":6,"description":471,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":472,"sourceHtmlUrl":473,"categories":474,"keywords":482,"publishedAt":45},"01M6M43AKE95Y64E1JRXEF5QQ3","writing-dna-skill","从至少 20 篇完整文章中蒸馏可复用的写作 DNA，分析语言、文章结构、选题逻辑、素材策略、认知框架和视觉风格，并生成 Writing-DNA.md；按该 DNA 写作时会读取全部蒸馏产物和 5 篇相关原文。用于中英文作者、账号、品牌或出版物的风格分析与一致性写作。 Distill reusable Writing DNA from at least 20 complete articles for Chinese or English authors, publications, brands, and accounts; use for language, structure, topic logic, source strategy, cognitive-frame, and visual-style analysis.","https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FWriting-and-Content\u002Fwriting-dna-skill\u002FLICENSE","https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FWriting-and-Content\u002Fwriting-dna-skill\u002FSKILL.md",[475,478,479],{"categoryNo":476,"categoryName":477,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000018","写作与文案",{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":480,"categoryName":481,"taxonomyType":454,"taxonomyTypeDesc":455},"01JBSEEDCAT000000000000036","内容创作者",[483,484,485,486,487,488,489,490,491,492,493,494,495,460,496,497,498,499,500,501],"writing dna skill","DNA","writing","strategy","english","logic","visual","structure","chinese","reusable","use","style","distill","analysis","frame","source","for","at","complete",{"skillNo":503,"name":504,"nameZh":6,"description":505,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":506,"sourceHtmlUrl":507,"categories":508,"keywords":511,"publishedAt":45},"01M6M428TTCGQ4ME3KY99VN037","stop-slop","Remove AI writing patterns from prose. Use when drafting, editing, or reviewing text to eliminate predictable AI tells.","https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FWriting-and-Content\u002Fstop-slop\u002FLICENSE","https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FWriting-and-Content\u002Fstop-slop\u002FSKILL.md",[509,510],{"categoryNo":476,"categoryName":477,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":480,"categoryName":481,"taxonomyType":454,"taxonomyTypeDesc":455},[512,513,514,515,516,517,518,519,520,493,521,522,523,499,524,485],"slop","stop slop","stop","drafting","when","drafts","https","patterns","prose","remove","editing","text","content",{"skillNo":526,"name":527,"nameZh":6,"description":528,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":529,"sourceHtmlUrl":530,"categories":531,"keywords":532,"publishedAt":45},"01M6M41X0B7EBX42TK435DMGGR","shuorenhua","检查和清理中英文文本里的 AI 套路，适用于“去 AI 味”“说人话”“自然一点”“别像模板”“先标问题”这类改写和审稿需求；按场景控制力度，同时保留事实、术语、语域和责任主体。","https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FWriting-and-Content\u002Fshuorenhua\u002FLICENSE","https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FWriting-and-Content\u002Fshuorenhua\u002FSKILL.md",[],[527,533],"文本",{"skillNo":535,"name":536,"nameZh":6,"description":537,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":538,"sourceHtmlUrl":539,"categories":540,"keywords":541,"publishedAt":45},"01M6M3ZD12WBEW5KXKDM4N6DFG","naming","Name products, SaaS, brands, open source projects, bots, and apps. Use when the user needs to name something, find a brand name, or pick a product name. Metaphor-driven process that produces memorable, meaningful names and avoids AI slop.","https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FWriting-and-Content\u002Fnaming-main\u002FLICENSE","https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FWriting-and-Content\u002Fnaming-main\u002FSKILL.md",[],[536,542,543,544,545,546,493,547,465,498,548,549,550,551,467,552,553,554,555,516,556,557,512],"repo","websearch","product name","apps","bots","view","brand","pick","gh","projects","open","saas","open source","product","describe","ai slop",{"skillNo":559,"name":560,"nameZh":6,"description":561,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":562,"sourceHtmlUrl":563,"categories":564,"keywords":566,"publishedAt":45},"01M6M3YVXAFAAWJ7F6JMPFREYE","humanizer-zh","去除文本中的 AI 生成痕迹。适用于编辑或审阅文本，使其听起来更自然、更像人类书写。\n基于维基百科的\"AI 写作特征\"综合指南。检测并修复以下模式：夸大的象征意义、\n宣传性语言、以 -ing 结尾的肤浅分析、模糊的归因、破折号过度使用、三段式法则、\nAI 词汇、否定式排比、过多的连接性短语。","https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FWriting-and-Content\u002Fhumanizer-zh\u002FLICENSE","https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FWriting-and-Content\u002Fhumanizer-zh\u002FSKILL.md",[565],{"categoryNo":476,"categoryName":477,"taxonomyType":21,"taxonomyTypeDesc":22},[567,568,569,465,464,463,485,460,533,570,512,514],"humanizer","zh","humanizer zh","翻译"]