web
Execute web-application assessment from setup and recon through injection, access control, auth/session issues, API, and SSRF chains.
- License 许可
- GPL-3.0
- 最近更新
- 2026-08-21
- Stars
- ★ 3
- Forks
- 0
01 前言 Front Matter
- name
- web
- files
- [ "01-prerequisites-and-environment.md", "02-injection.md", "03-broken-access-control.md", "04-authentication-and-session-flaws.md", "05-business-logic-flaws.md", "06-client-side-attacks.md", "07-ssrf-and-internal-exposure.md", "08-insecure-deserialization.md", "09-api-specific-vulnerabilities.md", "10-cross-class-data-chaining-map.md", "11-source-review-fast-path.md" ]
- description
- Execute web-application assessment from setup and recon through injection, access control, auth/session issues, API, and SSRF chains.
- dependencies
- [ "agent-setup", "agent-calibration" ]
- optional_deep_files
- [ { "file": "12-source-review-deep-architecture-and-trust.md", "load_when": "User asks for architecture mapping, trust-boundary analysis, or broad source-review strategy." }, { "file": "13-source-review-deep-chain-playbooks.md", "load_when": "User asks for exploit-chain construction across multiple bug classes." }, { "file": "14-source-review-deep-exploitability-and-interactions.md", "load_when": "User asks for exploitability triage, sanitizer bypass, race conditions, GraphQL, OAuth, or system interaction patterns." }, { "file": "15-source-review-deep-severity-and-reporting.md", "load_when": "User asks for impact scoring, severity amplification, or report narrative quality." } ]
02 资源文件 15
- 参考文档01-prerequisites-and-environment.md1.1 KB
- 参考文档02-injection.md2.8 KB
- 参考文档03-broken-access-control.md2.1 KB
- 参考文档04-authentication-and-session-flaws.md2.2 KB
- 参考文档05-business-logic-flaws.md1.1 KB
- 参考文档06-client-side-attacks.md2.8 KB
- 参考文档07-ssrf-and-internal-exposure.md1.8 KB
- 参考文档08-insecure-deserialization.md1.0 KB
- 参考文档09-api-specific-vulnerabilities.md3.7 KB
- 参考文档10-cross-class-data-chaining-map.md865 B
- 参考文档11-source-review-fast-path.md1.5 KB
- 参考文档12-source-review-deep-architecture-and-trust.md1.4 KB
- 参考文档13-source-review-deep-chain-playbooks.md1.9 KB
- 参考文档14-source-review-deep-exploitability-and-interactions.md1.3 KB
- 参考文档15-source-review-deep-severity-and-reporting.md1.1 KB
03 SKILL.md 正文
Load files sequentially on activation: see files list above.
Only load the next file when the current file's steps are complete or explicitly requested. Do not preload all files at once.
Load optional_deep_files only when their load_when trigger is present.
04 同仓库更多 Skills
bug-hunt-framework
Security testing workflow assistant for recon, web, network, mobile, pwn, crypto, reverse engineering, and forensics phases.
reverse-engineering
Progress binary analysis from sample intake through static, anti-analysis, unpacking, dynamic tracing, VM reverse engineering, and symbolic review.
recon
Use recursive bug-bounty recon to discover, verify, and pivot domains, hosts, IPs, cloud assets, and JS signals into the next testing phase.
pwn
Advance pwn workflows from environment setup into stack, heap, format-string, UAF, integer, TOCTOU, kernel, and shellcode exploitation.
network
Assess network assets with non-destructive service mapping, auth posture checks, directory exposure reviews, remote access, and evidence-linked pivoting.
mobile
Drive mobile app testing from static extraction through TLS bypass, storage abuse, intent/WebView abuse, runtime hooks, and backend pivoting.