[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M71AXB2H2SWV9WBRM8MXFV2Q":3,"skill-same:01M71AXB2H2SWV9WBRM8MXFV2Q":65},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":18,"publishedAt":32,"linkOnly":33,"markdownContent":34,"markdownBody":35,"frontMatter":36,"refName":41,"commitSha":42,"skillDirectory":43,"forksCount":44,"repositoryHtmlUrl":45,"repositoryHomepageUrl":46,"ownerHtmlUrl":47,"ownerBlogUrl":48,"ownerDescription":49,"updatedAt":50,"install":51,"resources":64},"01M71AXB2H2SWV9WBRM8MXFV2Q","fuzz",null,"Lightweight web fuzzing via ffuf — directory discovery, parameter testing, subdomain enumeration.","ariadoss\u002Fsuperskills","ariadoss","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F414341?v=4","01M71AC7383PT6JCRZSQJ4AVTM","Danilo Stern-Sapad","01M71AC73Y7NTBTJ9KQYNENRRE",12,"MIT","https:\u002F\u002Fgithub.com\u002Fariadoss\u002Fsuperskills\u002Fblob\u002Fmain\u002Fskills\u002Ffuzz\u002FSKILL.md",[],[5,19,20,21,22,23,24,25,26,27,28,29,30,31],"discovery","testing","fuzzing","Bash","subdomain enumeration","subdomain","web","via","directory","read","write","enumeration","ffuf","2026-11-10 10:12:30",false,"---\nname: fuzz\ndescription: |\n  Lightweight web fuzzing via ffuf — directory discovery, parameter testing, subdomain enumeration.\nallowed-tools:\n  - Bash\n  - Read\n  - Write\n---\n\n# Fuzz — Web Fuzzing with ffuf\n\nLightweight web application fuzzing using [ffuf](https:\u002F\u002Fgithub.com\u002Fffuf\u002Fffuf).\n\n## Prerequisites\n\n```bash\ncommand -v ffuf && ffuf -V\n```\n\nIf not installed:\n```bash\nbrew install ffuf    # macOS\n# or\ngo install github.com\u002Fffuf\u002Fffuf\u002Fv2@latest\n```\n\n## Common Wordlists\n\n```\n\u002Fusr\u002Fshare\u002Fwordlists\u002F                          # Kali default\n\u002Fopt\u002Fhomebrew\u002Fshare\u002Fwordlists\u002F                 # Homebrew\n~\u002F.local\u002Fshare\u002Fwordlists\u002F                      # User-local\n\n# SecLists (install: brew install seclists)\n\u002Fopt\u002Fhomebrew\u002Fshare\u002Fseclists\u002FDiscovery\u002FWeb-Content\u002Fcommon.txt\n\u002Fopt\u002Fhomebrew\u002Fshare\u002Fseclists\u002FDiscovery\u002FWeb-Content\u002Fdirectory-list-2.3-medium.txt\n\u002Fopt\u002Fhomebrew\u002Fshare\u002Fseclists\u002FDiscovery\u002FDNS\u002Fsubdomains-top1million-5000.txt\n\u002Fopt\u002Fhomebrew\u002Fshare\u002Fseclists\u002FFuzzing\u002FLFI\u002FLFI-Jhaddix.txt\n```\n\nIf no wordlists found: `brew install seclists`\n\n## Usage Patterns\n\n### Directory \u002F File Discovery\n```bash\nffuf -u https:\u002F\u002FTARGET\u002FFUZZ -w wordlist.txt -mc 200,301,302,403\n```\n\n### API Endpoint Discovery\n```bash\nffuf -u https:\u002F\u002FTARGET\u002Fapi\u002FFUZZ -w wordlist.txt -mc 200,401,403,405\n```\n\n### Parameter Fuzzing (GET)\n```bash\nffuf -u \"https:\u002F\u002FTARGET\u002Fpage?FUZZ=value\" -w params.txt -mc 200 -fs 4242\n```\n\n### POST Data Fuzzing\n```bash\nffuf -u https:\u002F\u002FTARGET\u002Flogin -X POST \\\n  -d \"username=admin&password=FUZZ\" \\\n  -w passwords.txt -mc 200 -fc 401\n```\n\n### Subdomain Enumeration\n```bash\nffuf -u https:\u002F\u002FFUZZ.TARGET.com -w subdomains.txt -mc 200,301,302\n```\n\n### Authenticated Fuzzing\n```bash\nffuf -u https:\u002F\u002FTARGET\u002Fapi\u002FFUZZ -w wordlist.txt \\\n  -H \"Authorization: Bearer \u003Ctoken>\" \\\n  -H \"Cookie: session=\u003Cvalue>\" \\\n  -mc 200,201,403\n```\n\n## Filtering Options\n\n- `-mc 200,301` — match HTTP status codes\n- `-fc 404,500` — filter (exclude) status codes\n- `-fs 4242` — filter by response size (removes noise)\n- `-fw 12` — filter by word count\n- `-fr \"not found\"` — filter by regex in response\n\n## Output\n```bash\nffuf -u https:\u002F\u002FTARGET\u002FFUZZ -w wordlist.txt -o results.json -of json\n```\n\n## Tips\n\n- Start with small wordlists, expand if needed\n- Use `-rate 100` to limit requests per second (avoid DoS)\n- Use `-t 40` to control thread count (default: 40)\n- Run once without filters, note the common response size, then add `-fs`\n- Combine with `-recursion -recursion-depth 2` for recursive discovery\n","# Fuzz — Web Fuzzing with ffuf\n\nLightweight web application fuzzing using [ffuf](https:\u002F\u002Fgithub.com\u002Fffuf\u002Fffuf).\n\n## Prerequisites\n\n```bash\ncommand -v ffuf && ffuf -V\n```\n\nIf not installed:\n```bash\nbrew install ffuf    # macOS\n# or\ngo install github.com\u002Fffuf\u002Fffuf\u002Fv2@latest\n```\n\n## Common Wordlists\n\n```\n\u002Fusr\u002Fshare\u002Fwordlists\u002F                          # Kali default\n\u002Fopt\u002Fhomebrew\u002Fshare\u002Fwordlists\u002F                 # Homebrew\n~\u002F.local\u002Fshare\u002Fwordlists\u002F                      # User-local\n\n# SecLists (install: brew install seclists)\n\u002Fopt\u002Fhomebrew\u002Fshare\u002Fseclists\u002FDiscovery\u002FWeb-Content\u002Fcommon.txt\n\u002Fopt\u002Fhomebrew\u002Fshare\u002Fseclists\u002FDiscovery\u002FWeb-Content\u002Fdirectory-list-2.3-medium.txt\n\u002Fopt\u002Fhomebrew\u002Fshare\u002Fseclists\u002FDiscovery\u002FDNS\u002Fsubdomains-top1million-5000.txt\n\u002Fopt\u002Fhomebrew\u002Fshare\u002Fseclists\u002FFuzzing\u002FLFI\u002FLFI-Jhaddix.txt\n```\n\nIf no wordlists found: `brew install seclists`\n\n## Usage Patterns\n\n### Directory \u002F File Discovery\n```bash\nffuf -u https:\u002F\u002FTARGET\u002FFUZZ -w wordlist.txt -mc 200,301,302,403\n```\n\n### API Endpoint Discovery\n```bash\nffuf -u https:\u002F\u002FTARGET\u002Fapi\u002FFUZZ -w wordlist.txt -mc 200,401,403,405\n```\n\n### Parameter Fuzzing (GET)\n```bash\nffuf -u \"https:\u002F\u002FTARGET\u002Fpage?FUZZ=value\" -w params.txt -mc 200 -fs 4242\n```\n\n### POST Data Fuzzing\n```bash\nffuf -u https:\u002F\u002FTARGET\u002Flogin -X POST \\\n  -d \"username=admin&password=FUZZ\" \\\n  -w passwords.txt -mc 200 -fc 401\n```\n\n### Subdomain Enumeration\n```bash\nffuf -u https:\u002F\u002FFUZZ.TARGET.com -w subdomains.txt -mc 200,301,302\n```\n\n### Authenticated Fuzzing\n```bash\nffuf -u https:\u002F\u002FTARGET\u002Fapi\u002FFUZZ -w wordlist.txt \\\n  -H \"Authorization: Bearer \u003Ctoken>\" \\\n  -H \"Cookie: session=\u003Cvalue>\" \\\n  -mc 200,201,403\n```\n\n## Filtering Options\n\n- `-mc 200,301` — match HTTP status codes\n- `-fc 404,500` — filter (exclude) status codes\n- `-fs 4242` — filter by response size (removes noise)\n- `-fw 12` — filter by word count\n- `-fr \"not found\"` — filter by regex in response\n\n## Output\n```bash\nffuf -u https:\u002F\u002FTARGET\u002FFUZZ -w wordlist.txt -o results.json -of json\n```\n\n## Tips\n\n- Start with small wordlists, expand if needed\n- Use `-rate 100` to limit requests per second (avoid DoS)\n- Use `-t 40` to control thread count (default: 40)\n- Run once without filters, note the common response size, then add `-fs`\n- Combine with `-recursion -recursion-depth 2` for recursive discovery\n",{"name":5,"description":37,"allowed-tools":38},"Lightweight web fuzzing via ffuf — directory discovery, parameter testing, subdomain enumeration.\n",[22,39,40],"Read","Write","main","c7ec8d78e5dc37484c2cfe90ab04de163d97dd41","skills\u002Ffuzz",0,"https:\u002F\u002Fgithub.com\u002Fariadoss\u002Fsuperskills","https:\u002F\u002Fhyperion360.com\u002Fblog\u002Fparallel-ai-agents-engineering-workflow\u002F","https:\u002F\u002Fgithub.com\u002Fariadoss","https:\u002F\u002Fdanilosapad.com\u002F","CEO & Founder of @Hyperion360","2026-11-01 12:36:50",{"source":8,"skillName":5,"commands":52,"prompt":62,"zipAvailable":63},[53,56,59],{"tool":54,"command":55},"npx","npx skills add ariadoss\u002Fsuperskills --skill fuzz",{"tool":57,"command":58},"bunx","bunx skills add ariadoss\u002Fsuperskills --skill fuzz",{"tool":60,"command":61},"pnpm","pnpm dlx skills add ariadoss\u002Fsuperskills --skill fuzz","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fariadoss\u002Fsuperskills\u002Fblob\u002Fmain\u002Fskills\u002Ffuzz\u002FSKILL.md",true,[],[66,92,117,135,163,179],{"skillNo":67,"name":68,"nameZh":6,"description":69,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":70,"categories":71,"keywords":77,"publishedAt":32},"01M71AZE3MPF891RM354EMRYA1","youtube","Download YouTube video transcripts when user provides a YouTube URL or asks to download\u002Fget\u002Ffetch a transcript from YouTube. Also use when user wants to transcribe or get captions\u002Fsubtitles from a YouTube video.","https:\u002F\u002Fgithub.com\u002Fariadoss\u002Fsuperskills\u002Fblob\u002Fmain\u002Fskills\u002Fyoutube\u002FSKILL.md",[72],{"categoryNo":73,"categoryName":74,"taxonomyType":75,"taxonomyTypeDesc":76},"01JBSEEDCAT000000000000016","图像与多媒体","SCENARIO","使用场景",[68,78,79,80,29,81,82,22,83,84,85,86,87,88,28,89,90,91],"user","download","transcribe","transcript","video transcripts","URL","when","Captions","get","fetch","Video","use","subtitles","transcripts",{"skillNo":93,"name":94,"nameZh":6,"description":95,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":96,"categories":97,"keywords":98,"publishedAt":32},"01M71AZAYR85PW6BJGSQXS4BN2","write-plan","Use when you have a spec or requirements for a multi-step task, before touching code. Produces an engineering plan complete with TDD tasks, DRY\u002FSOLID\u002FYAGNI principles, a required Test Plan & Verification section, and a coverage target — then auto-runs \u002Fplan-eng-review as an independent double-check before execution.","https:\u002F\u002Fgithub.com\u002Fariadoss\u002Fsuperskills\u002Fblob\u002Fmain\u002Fskills\u002Fwrite-plan\u002FSKILL.md",[],[99,100,29,101,102,103,104,105,106,84,107,108,109,110,111,112,113,114,115,116],"write plan","plan","dry","verification","review","tasks","code","you","auto","eng","coverage","complete","section","for","test plan","target","as","yagni",{"skillNo":118,"name":119,"nameZh":6,"description":120,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":121,"categories":122,"keywords":123,"publishedAt":32},"01M71AZ8NDDP5ZMGEE6FSC4FKR","worktrees","Use when starting feature work that needs isolation from current workspace or before executing implementation plans - creates isolated git worktrees with smart directory selection and safety verification","https:\u002F\u002Fgithub.com\u002Fariadoss\u002Fsuperskills\u002Fblob\u002Fmain\u002Fskills\u002Fworktrees\u002FSKILL.md",[],[119,124,125,126,89,127,128,129,130,27,131,102,132,84,133,134],"implementation","workspace","with","plans","feature","isolation","git","work","git worktrees","selection","Safety",{"skillNo":136,"name":137,"nameZh":6,"description":138,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":139,"categories":140,"keywords":144,"publishedAt":32},"01M71AZ4ZQHTNWFRZVYHKQFP08","web-perf","Analyzes web performance using Chrome DevTools MCP. Measures Core Web Vitals (LCP, INP, CLS) and supplementary metrics (FCP, TBT, Speed Index), identifies render-blocking resources, network dependency chains, layout shifts, caching issues, and accessibility gaps. Use when asked to audit, profile, debug, or optimize page load performance, Lighthouse scores, or site speed. Biases towards retrieval from current documentation over pre-trained knowledge.","https:\u002F\u002Fgithub.com\u002Fariadoss\u002Fsuperskills\u002Fblob\u002Fmain\u002Fskills\u002Fweb-perf\u002FSKILL.md",[141],{"categoryNo":142,"categoryName":143,"taxonomyType":75,"taxonomyTypeDesc":76},"01JBSEEDCAT000000000000023","Skill与智能体开发",[25,145,146,147,148,149,150,151,152,84,153,154,155,156,157,158,159,160,161,162],"perf","web perf","resources","MCP","layout","optimize","documentation","caching","qa","knowledge","devtools","issues","render","re","performance","chrome devtools","vitals","never",{"skillNo":164,"name":165,"nameZh":6,"description":166,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":167,"categories":168,"keywords":169,"publishedAt":32},"01M71AZ2KZNWYEGKKRMJH8PYG2","verify","Use when about to claim work is complete, fixed, or passing, before committing or creating PRs - requires running verification commands and confirming output before making any success claims; evidence before assertions always","https:\u002F\u002Fgithub.com\u002Fariadoss\u002Fsuperskills\u002Fblob\u002Fmain\u002Fskills\u002Fverify\u002FSKILL.md",[],[165,110,170,171,131,102,172,173,84,174,89,175,176,177,178],"commands","about","claims","output","assertions","claim","prs","evidence","running",{"skillNo":180,"name":181,"nameZh":6,"description":182,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":183,"categories":184,"keywords":185,"publishedAt":32},"01M71AZ0ACCK7N1QMWQK1FV2HJ","validate-idea","Validate a business idea using the minimalist entrepreneur framework. Use when someone has a business idea and wants to test if it's worth pursuing before building anything.","https:\u002F\u002Fgithub.com\u002Fariadoss\u002Fsuperskills\u002Fblob\u002Fmain\u002Fskills\u002Fvalidate-idea\u002FSKILL.md",[],[186,187,188,189,190,191,192,84,193,89,194],"validate","idea","validate idea","framework","it","minimalist","test","business","before building"]