القائمة
جمع SkillsMP عدد ١٦٢ من skills من H-mmer/pentest-agents. افتح أي skill لمراجعة مصدره وتفاصيله.
عرض ٤٠ من أصل ١٦٢ skills مجمعة.
Autonomous hunt orchestrator. INSATIABLE in --autonomous mode: enforces an EXHAUSTION CONTRACT (26 canonical hunter classes, surface probe A-I, depth-engine ≥25 attempts/class, wall-clock floor 90 min/target, PRE-COMPLETION GATE before any summary). No early…
لغة النص الأصلي: الإنجليزية
Autonomous hunt orchestrator. INSATIABLE in --autonomous mode: enforces an EXHAUSTION CONTRACT (26 canonical hunter classes, surface probe A-I, depth-engine ≥25 attempts/class, wall-clock floor 90 min/target, PRE-COMPLETION GATE before any summary). No early…
لغة النص الأصلي: الإنجليزية
Adversarial validator for DAST findings. Attempts to DISPROVE each finding and DOWNGRADE severity. Catches inflated reports, unverified assumptions, and theoretical-only bugs. Dispatch after /validate PASS and before /report.
لغة النص الأصلي: الإنجليزية
Server-Side Template Injection specialist. Covers Jinja2 (H1 #74), Twig, Velocity, FreeMarker, ERB, Handlebars, Thymeleaf. Use for any rule-engine, comment/message rendering, PR automation, admin template, or user-customizable template surface. Systematic…
لغة النص الأصلي: الإنجليزية
Autonomous hunt orchestrator. INSATIABLE in --autonomous mode: enforces an EXHAUSTION CONTRACT (26 canonical hunter classes, surface probe A-I, depth-engine ≥25 attempts/class, wall-clock floor 90 min/target, PRE-COMPLETION GATE before any summary). No early…
لغة النص الأصلي: الإنجليزية
Autonomous hunt orchestrator. INSATIABLE in --autonomous mode: enforces an EXHAUSTION CONTRACT (26 canonical hunter classes, surface probe A-I, depth-engine ≥25 attempts/class, wall-clock floor 90 min/target, PRE-COMPLETION GATE before any summary). No early…
لغة النص الأصلي: الإنجليزية
Generate submission-ready reports for all confirmed findings. Runs dedup, PoC builder, quality check, and report writer. Usage: /report bounty or /report pentest
لغة النص الأصلي: الإنجليزية
Draft and submit a vulnerability report to the bug bounty platform. Reads scope.yaml for platform/program, uses brain + findings for content. Always drafts first for review.
لغة النص الأصلي: الإنجليزية
Generate submission-ready reports for all confirmed findings. Runs dedup, PoC builder, quality check, and report writer. Usage: /report bounty or /report pentest
لغة النص الأصلي: الإنجليزية
Draft and submit a vulnerability report to the bug bounty platform. Reads scope.yaml for platform/program, uses brain + findings for content. Always drafts first for review.
لغة النص الأصلي: الإنجليزية
Generate submission-ready reports for all confirmed findings. Runs dedup, PoC builder, quality check, and report writer. Usage: /report bounty or /report pentest
لغة النص الأصلي: الإنجليزية
Draft and submit a vulnerability report to the bug bounty platform. Reads scope.yaml for platform/program, uses brain + findings for content. Always drafts first for review.
لغة النص الأصلي: الإنجليزية
Generate submission-ready reports for all confirmed findings. Runs dedup, PoC builder, quality check, and report writer. Usage: /report bounty or /report pentest
لغة النص الأصلي: الإنجليزية
Draft and submit a vulnerability report to the bug bounty platform. Reads scope.yaml for platform/program, uses brain + findings for content. Always drafts first for review.
لغة النص الأصلي: الإنجليزية
Active vulnerability hunting on a target. Loads scope, reads brain, detects tech stack, runs targeted tests with concrete payloads. Usage: /hunt target.com [--vuln-class idor|xss|ssrf|sqli|ssti|oauth|rce|race|graphql|upload|business-logic|llm-ai]
لغة النص الأصلي: الإنجليزية
Active vulnerability hunting on a target. Loads scope, reads brain, detects tech stack, runs targeted tests with concrete payloads. Usage: /hunt target.com [--vuln-class idor|xss|ssrf|sqli|ssti|oauth|rce|race|graphql|upload|business-logic|llm-ai]
لغة النص الأصلي: الإنجليزية
Mandatory browser verification for client-side findings (XSS, DOM, postMessage, prototype pollution). Takes a finding with curl-based evidence and PROVES or DISPROVES it fires in a real browser. No finding ships without browser verification. Dispatched…
لغة النص الأصلي: الإنجليزية
XSS specialist covering reflected (H1 #60), stored (H1 #61), and DOM (H1 #62). Dispatcher passes subtype — 'reflected', 'stored', or 'dom' — in the task; falls back to inference from target. Use for parameter reflection, persisted inputs…
لغة النص الأصلي: الإنجليزية
Active vulnerability hunting on a target. Loads scope, reads brain, detects tech stack, runs targeted tests with concrete payloads. Usage: /hunt target.com [--vuln-class idor|xss|ssrf|sqli|ssti|oauth|rce|race|graphql|upload|business-logic|llm-ai]
لغة النص الأصلي: الإنجليزية
Active vulnerability hunting on a target. Loads scope, reads brain, detects tech stack, runs targeted tests with concrete payloads. Usage: /hunt target.com [--vuln-class idor|xss|ssrf|sqli|ssti|oauth|rce|race|graphql|upload|business-logic|llm-ai]
لغة النص الأصلي: الإنجليزية
Analyze recon output with AI to suggest high-value targets and attack strategies. Usage: /analyze <target>
لغة النص الأصلي: الإنجليزية
Manage the engagement brain. Subcommands: 'init' to set up, 'brief <target>' for pre-flight, 'status' for overview, 'exhausted [target]' to see dead ends.
لغة النص الأصلي: الإنجليزية
Build deep exploit chains — dispatches chain-builder agent. Given bug A, recursively walks the chain graph. Usage: /chain (then describe bug A)
لغة النص الأصلي: الإنجليزية
Run the finding correlation engine to discover attack chains from individual findings.
لغة النص الأصلي: الإنجليزية
Show cost tracking and ROI for this engagement.
لغة النص الأصلي: الإنجليزية
Check if a vulnerability has already been reported. Searches platform hacktivity + local findings. Usage: /dupcheck <vuln_type> e.g. /dupcheck XSS in search endpoint
لغة النص الأصلي: الإنجليزية
Full security assessment with brain coordination. Multi-phase, skips known-exhausted areas, builds on prior knowledge.
لغة النص الأصلي: الإنجليزية
Record a platform response and update learning. Usage: /learn <report_id> <status> [--bounty 500] [--vuln-type XSS]
لغة النص الأصلي: الإنجليزية
Generate a text-based attack surface mindmap. Shows tech stack → vuln class → endpoint relationships. Usage: /mindmap <target>
لغة النص الأصلي: الإنجليزية
Monitor targets for changes. Usage: /monitor baseline (first run), /monitor check (detect changes), /monitor scope (check platform for scope updates)
لغة النص الأصلي: الإنجليزية
Create a new engagement workspace. Usage: /new <platform> <program> [--type web-app|api|mobile|smart-contract]
لغة النص الأصلي: الإنجليزية
Prepare the battlefield — recon, scanning, and surface ranking. Stops before hunting. Run /hunt or /autopilot after. Usage: /pipeline or /pipeline <target>
لغة النص الأصلي: الإنجليزية
Score a report draft before submission. Usage: /quality <draft-path-or-finding-description>
لغة النص الأصلي: الإنجليزية
Run a quick security scan on a target. Consults the Brain first, validates scope, runs passive recon + vuln scan in parallel.
لغة النص الأصلي: الإنجليزية
Log a finding or pattern to persistent brain memory. Auto-fills from session context. Usage: /remember
لغة النص الأصلي: الإنجليزية
Resume a previous hunt. Shows hunt history, untested endpoints, memory-informed suggestions. Usage: /resume target.com
لغة النص الأصلي: الإنجليزية
Source code vulnerability hunting (SAST). Decomposes analysis into specialized passes: map entry points, map dangerous ops, trace flows, find gaps, adversarial validation, exploit. Usage: /sast <repo_path> [--lang c|cpp|rust|java|python|go|php] [--min-score…
لغة النص الأصلي: الإنجليزية
Show engagement dashboard with program info, scope, brain state, findings, agent activity, and cost estimate.
لغة النص الأصلي: الإنجليزية
Show ranked attack surface for a target. Invokes recon-ranker agent. Usage: /surface target.com
لغة النص الأصلي: الإنجليزية
Sync program scope, policy, and hacktivity from a bug bounty platform. Usage: /sync hackerone tesla or /sync bugcrowd uber
لغة النص الأصلي: الإنجليزية