Kur1sulab/whitebox

آخر نشاط مصدر مسجل: ٢٨ أكتوبر ٢٠٢٦ في ٠٨:٠١

آخر تحديث لفهرس SkillsMP: ١٢ نوفمبر ٢٠٢٦ في ١٢:٥٢

skills مجمعة: ٣٨

نجوم GitHub: ٠
تفرعات GitHub: ٠

التثبيت بمساعدة مساعد ذكي

انسخ هذا الطلب إلى المساعد الذكي الذي تستخدمه.

Follow https://skillsmp.com/skill-install/prompt.md to install Agent Skills from https://github.com/Kur1sulab/whitebox.

ملف README للمستودع

مصدر ملف README للمستودع: README.md

قراءة الملف الأصلي

عرض ملف README كاملًا

# whitebox 白盒代码审计技能集，给 AI Agent 用的源码审计/逆向分析/密码学研究 playbook 合集，共 38 个技能。从源码、二进制、配置出发：污点追踪、鉴权矩阵、文件操作链、依赖与密钥扫描、逆向工程、密码分析、取证分析。每个技能是一份独立 playbook（触发条件/审计步骤/工具命令/坑位备忘），Claude Code、Hermes 等支持 Skills 的 Agent 可以直接加载。 ## 技能索引 ### 审计方法论（6） | 技能 | 说明 | |------|------| | [cve-yu2](./cve-yu2/) | 证据驱动白盒代码审计与CVE级漏洞发现 — 污点追踪、反幻觉验证、攻击路径优先级、WooYun 88,636案例统计 | | [hunt-sast-methodology](./hunt-sast-methodology/) | SAST / static analysis hunting methodology — finding vulns in source cod… | | [pt-source-code-scanning](./pt-source-code-scanning/) | Security-focused source code review and SAST. Scans for vulnerabilities… | | [whitebox-authz-matrix-audit](./whitebox-authz-matrix-audit/) | 白盒鉴权矩阵审计：枚举 Controller 端点对照 anon 白名单，产出来授权攻击面全图 | | [patch-diff-variant-hunting](./patch-diff-variant-hunting/) | 从厂商安全补丁反推漏洞指纹，再横扫同类系统找变种（n-day → 0day） | | [silent-failure-detection](./silent-failure-detection/) | 检测「静默失效」——检索/校验/监控返回空结果但不报错，用真值对照证明它真的在工作 | ### Java 与国产框架专项（4） | 技能 | 说明 | |------|------| | [java-file-chain-audit](./java-file-chain-audit/) | 审计 Java 上传/下载/删除链（.jsp RCE 判定、physicalPath 穿越） | | [java-filechain-source-audit](./java-filechain-source-audit/) | 审计 Java 源码文件操作链（上传/下载/转换/预览）时用：落盘还原、后缀绕过、路径穿越、.jsp RCE 判定 | | [lowcode-framework-authz-audit](./lowcode-framework-authz-audit/) | 审计JeecgBoot/若依类二开源码自定义模块越权/状态机/IDOR时用。含零注解根因定位、状态机三维、配置控制面 | | [mybatis-xml-sqli-audit](./mybatis-xml-sqli-audit/) | 源码审计 SQL 注入时用：枚举 MyBatis Mapper XML ${} 拼接并做污点追踪 | ### 依赖、密钥与配置审计（4） | 技能 | 说明 | |------|------| | [code-safety-audit](./code-safety-audit/) | 扫描代码安全漏洞，检测依赖漏洞、密钥泄露和OWASP安全模式 | | [credential-scanner](./credential-scanner/) | Scan your project for exposed credentials, API keys, and secrets before… | | [dependency-auditor](./dependency-auditor/) | Audit npm, pip, and Go dependencies that OpenClaw skills try to install.… | | [deployment-config-audit](./deployment-config-audit/) | 部署配置/凭据审计：deploy/、yml、docker-compose 暴露面与环境差异 | ### 逆向工程与二进制（7） | 技能 | 说明 | |------|------| | [hack-anti-debugging-techniques](./hack-anti-debugging-techniques/) | Anti-debugging detection and bypass playbook | | [hack-binary-protection-bypass](./hack-binary-protection-bypass/) | Binary protection bypass playbook | | [hack-code-obfuscation-deobfuscation](./hack-code-obfuscation-deobfuscation/) | Code obfuscation analysis and deobfuscation playbook | | [hack-symbolic-execution-tools](./hack-symbolic-execution-tools/) | Symbolic execution and constraint solving playbook | | [hack-vm-and-bytecode-reverse](./hack-vm-and-bytecode-reverse/) | Custom VM and bytecode reverse engineering playbook | | [pt-reverse-engineering](./pt-reverse-engineering/) | Static and dynamic reverse engineering — ELF/PE analysis, custom-VM byte… | | [mobile-static-analysis](./mobile-static-analysis/) | APK / 微信小程序静态审计：组件面测绘、硬编码密钥、接口提取，含「导出组件≠漏洞」判据 | ### 密码分析（5） | 技能 | 说明 | |------|------| | [hack-classical-cipher-analysis](./hack-classical-cipher-analysis/) | Classical cipher analysis playbook | | [hack-lattice-crypto-attacks](./hack-lattice-crypto-attacks/) | Lattice-based cryptanalysis playbook | | [hack-rsa-attack-techniques](./hack-rsa-attack-techniques/) | RSA attack playbook for CTF and real-world cryptanalysis | | [hack-symmetric-cipher-attacks](./hack-symmetric-cipher-attacks/) | Symmetric cipher attack playbook | | [pt-cryptography](./pt-cryptography/) | Cryptanalysis techniques — lattice attacks, padding oracles, weak-RNG ex… | ### 取证与流量分析（4） | 技能 | 说明 | |------|------| | [hack-memory-forensics-volatility](./hack-memory-forensics-volatility/) | Memory forensics playbook using Volatility 2/3 | | [hack-steganography-techniques](./hack-steganography-techniques/) | Steganography detection and extraction playbook | | [hack-traffic-analysis-pcap](./hack-traffic-analysis-pcap/) | Traffic analysis and PCAP forensics playbook | | [pt-dfir](./pt-dfir/) | Digital forensics and incident response - Windows event log analysis, PC… | ### 云防御与合规基线（3） | 技能 | 说明 | |------|------| | [pt-cloud-defense](./pt-cloud-defense/) | Detect and break the cloud post-compromise attack chain (AWS / Azure / G… | | [pt-firewall-review](./pt-firewall-review/) | Evidence-safe firewall ruleset audit reference specification — 22 docume… | | [pt-pci-secure-software](./pt-pci-secure-software/) | Automated PCI Secure Software Standard (SSS) v2.0 readiness gap-assessme… | ### CVE 研究与威胁情报（3） | 技能 | 说明 | |------|------| | [pt-cve-poc-generator](./pt-cve-poc-generator/) | CVE research, standalone PoC script and report generation. Given a CVE I… | | [pt-cve-risk-score](./pt-cve-risk-score/) | Retrieve CVE risk scores from NVD. Auto-invoked whenever a CVE ID is men… | | [pt-ti-ingest](./pt-ti-ingest/) | Threat-intel signal ingest — converts a CVE + affected-asset + claim pay… | ### 智能合约与 AI 模型安全（2） | 技能 | 说明 | |------|------| | [hack-ai-ml-security](./hack-ai-ml-security/) | AI/ML security playbook | | [hack-smart-contract-vulnerabilities](./hack-smart-contract-vulnerabilities/) | Smart contract vulnerability playbook | ## 安装方式一（Hermes CLI）： ```bash hermes skills install <技能目录路径> ``` 方式二（手动）：将技能目录复制到 Hermes skills 目录（如 `~/AppData/Local/hermes/skills/pentest/`），开新会话生效。 ## 声明本仓库所有内容仅供**授权范围内**的安全测试、本地靶场练习与安全研究使用。对未授权目标的主动测试行为与作者无关。

جارٍ تحميل ملف README للمستودع…

Skills في هذا المستودع

محللو أمن المعلومات

١ فئات مهنية · 3% مصنفة

skill

المهنة

الوصف

آخر تحديث

credential-scanner

غير مصنف

Scan your project for exposed credentials, API keys, and secrets before running OpenClaw skills. Prevents accidental exfiltration.

لغة النص الأصلي: الإنجليزية

2026-10-28

cve-yu2

غير مصنف

证据驱动白盒代码审计与CVE级漏洞发现 — 污点追踪、反幻觉验证、攻击路径优先级、WooYun 88,636案例统计。当用户要求代码审计/漏洞验证/误报过滤/CVE发现时触发。

لغة النص الأصلي: الصينية

2026-10-28

dependency-auditor

غير مصنف

Audit npm, pip, and Go dependencies that OpenClaw skills try to install. Checks for known vulnerabilities, typosquatting, and malicious packages.

لغة النص الأصلي: الإنجليزية

2026-10-28

deployment-config-audit

غير مصنف

部署配置/凭据审计：deploy/、yml、docker-compose 暴露面与环境差异。

لغة النص الأصلي: الصينية

2026-10-28

hack-ai-ml-security

غير مصنف

AI/ML security playbook. Use when assessing model supply chain attacks (pickle RCE, poisoned weights), adversarial examples, model poisoning, model stealing, data privacy attacks (membership inference, model inversion), and autonomous agent security risks.

لغة النص الأصلي: الإنجليزية

2026-10-28

hack-anti-debugging-techniques

غير مصنف

Anti-debugging detection and bypass playbook. Use when reversing protected binaries that detect debuggers via ptrace, PEB flags, timing checks, or signal/exception handlers on Linux and Windows.

لغة النص الأصلي: الإنجليزية

2026-10-28

hack-binary-protection-bypass

غير مصنف

Binary protection bypass playbook. Use when identifying and bypassing ASLR, PIE, NX/DEP, stack canary, RELRO, FORTIFY_SOURCE, CET, and MTE protections in ELF binaries to enable exploitation.

لغة النص الأصلي: الإنجليزية

2026-10-28

hack-classical-cipher-analysis

غير مصنف

Classical cipher analysis playbook. Use when encountering substitution ciphers, Vigenere, transposition, XOR, or encoded text in CTF challenges that requires frequency analysis, Kasiski examination, or known-plaintext cryptanalysis.

لغة النص الأصلي: الإنجليزية

2026-10-28

hack-code-obfuscation-deobfuscation

غير مصنف

Code obfuscation analysis and deobfuscation playbook. Use when reversing binaries protected by junk code, opaque predicates, self-modifying code, control flow flattening, VM protection, or string encryption.

لغة النص الأصلي: الإنجليزية

2026-10-28

hack-lattice-crypto-attacks

غير مصنف

Lattice-based cryptanalysis playbook. Use when attacking RSA via Coppersmith small roots, recovering DSA/ECDSA nonces from bias, solving knapsack problems, or applying LLL/BKZ reduction to cryptographic constructions.

لغة النص الأصلي: الإنجليزية

2026-10-28

hack-memory-forensics-volatility

غير مصنف

Memory forensics playbook using Volatility 2/3. Use when analyzing memory dumps for malware analysis, credential extraction, process investigation, code injection detection, and incident response timeline reconstruction.

لغة النص الأصلي: الإنجليزية

2026-10-28

hack-rsa-attack-techniques

غير مصنف

RSA attack playbook for CTF and real-world cryptanalysis. Use when given RSA parameters (n, e, c) and need to recover plaintext by exploiting weak keys, small exponents, shared factors, or padding oracles.

لغة النص الأصلي: الإنجليزية

2026-10-28

hack-smart-contract-vulnerabilities

غير مصنف

Smart contract vulnerability playbook. Use when auditing Solidity/EVM contracts for reentrancy, integer overflow, access control, delegatecall, flash loan, signature replay, and MEV-related attack patterns.

لغة النص الأصلي: الإنجليزية

2026-10-28

hack-steganography-techniques

غير مصنف

Steganography detection and extraction playbook. Use when analyzing images (LSB, PNG chunks, JPEG DCT, EXIF), audio (spectrogram, DTMF), files (polyglots, appended data, ADS), and text (whitespace, zero-width, homoglyphs) for hidden data.

لغة النص الأصلي: الإنجليزية

2026-10-28

hack-symbolic-execution-tools

غير مصنف

Symbolic execution and constraint solving playbook. Use when solving CTF reversing challenges, recovering keys, bypassing checks, or automating binary analysis with angr, Z3, or Unicorn Engine.

لغة النص الأصلي: الإنجليزية

2026-10-28

hack-symmetric-cipher-attacks

غير مصنف

Symmetric cipher attack playbook. Use when exploiting block cipher mode weaknesses (CBC padding oracle, ECB cut-and-paste, bit flipping), stream cipher key reuse, or meet-in-the-middle attacks.

لغة النص الأصلي: الإنجليزية

2026-10-28

hack-traffic-analysis-pcap

غير مصنف

Traffic analysis and PCAP forensics playbook. Use when analyzing network captures including Wireshark filters, protocol analysis (HTTP/DNS/FTP/SMTP/USB/WiFi), data extraction, covert channel detection, PCAP repair, TLS decryption, and tshark command-line…

لغة النص الأصلي: الإنجليزية

2026-10-28

hack-vm-and-bytecode-reverse

غير مصنف

Custom VM and bytecode reverse engineering playbook. Use when CTF challenges or protected software implement custom virtual machines with proprietary bytecode, dispatcher loops, or maze-style challenges.

لغة النص الأصلي: الإنجليزية

2026-10-28

hunt-sast-methodology

غير مصنف

SAST / static analysis hunting methodology — finding vulns in source code with targeted scanning. Use when doing code-based vulnerability hunting.

لغة النص الأصلي: الإنجليزية

2026-10-28

java-file-chain-audit

غير مصنف

审计 Java 上传/下载/删除链（.jsp RCE 判定、physicalPath 穿越）。

لغة النص الأصلي: الصينية

2026-10-28

java-filechain-source-audit

غير مصنف

审计 Java 源码文件操作链（上传/下载/转换/预览）时用：落盘还原、后缀绕过、路径穿越、.jsp RCE 判定。

لغة النص الأصلي: الصينية

2026-10-28

lowcode-framework-authz-audit

غير مصنف

审计JeecgBoot/若依类二开源码自定义模块越权/状态机/IDOR时用。含零注解根因定位、状态机三维、配置控制面。

لغة النص الأصلي: الصينية

2026-10-28

mobile-static-analysis

غير مصنف

APK / 微信小程序静态审计：组件面测绘、硬编码密钥、接口提取，以及「导出组件≠漏洞」的判据。拿到安装包或 wxapkg 时使用。

لغة النص الأصلي: الصينية

2026-10-28

mybatis-xml-sqli-audit

غير مصنف

源码审计 SQL 注入时用：枚举 MyBatis Mapper XML ${} 拼接并做污点追踪。

لغة النص الأصلي: الصينية

2026-10-28

patch-diff-variant-hunting

غير مصنف

从厂商安全补丁反推漏洞指纹，再横扫同类系统找变种（n-day → 0day）。给定仓库与修复提交/版本区间时使用。

لغة النص الأصلي: الصينية

2026-10-28

pt-cloud-defense

غير مصنف

Detect and break the cloud post-compromise attack chain (AWS / Azure / GCP) —

لغة النص الأصلي: الإنجليزية

2026-10-28

pt-cryptography

غير مصنف

Cryptanalysis techniques — lattice attacks, padding oracles, weak-RNG exploitation, signature forgery, secret-sharing recovery.

لغة النص الأصلي: الإنجليزية

2026-10-28

pt-cve-poc-generator

غير مصنف

CVE research, standalone PoC script and report generation. Given a CVE ID, researches NVD and advisories, generates a safe Python PoC, and writes a detailed vulnerability report.

لغة النص الأصلي: الإنجليزية

2026-10-28