القائمة
Web vulnerability scanning via template-based CVE matching, injection testing, and traversal detection. Use after endpoint mapping to find exploitable weaknesses.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
Cloud infrastructure, container image, and Kubernetes security assessment via IAM review, secrets detection, and RBAC analysis.
Exploit lookup, payload generation, and delivery for confirmed vulnerabilities. Use only after validation has established concrete attack path.
Curated MCP prompts for multi-step attack chains and engagement playbooks. Use for guided workflows spanning multiple skills. Each prompt step now carries expected_time, priority, fallback, and result_context for agent-guided execution.
SMB service enumeration, share discovery, and RPC interrogation on Windows networks. Use to map Windows hosts before credential testing or lateral movement.
Wireless network assessment via monitor mode, handshake capture, and de-authentication testing. Use to assess WiFi security posture and crack WPA/WPA2.
Network reconnaissance via host discovery, port scanning, and service fingerprinting. Use during early reconnaissance phase to map attack surface and identify services.
| name | web-vuln |
| description | Web vulnerability scanning via template-based CVE matching, injection testing, and traversal detection. Use after endpoint mapping to find exploitable weaknesses. |
Use this skill in Phase 3: Vulnerability Assessment after recon has identified concrete endpoints:
Reduce false positives by targeting confirmed attack surface:
nuclei with severity filter (critical, high only on first pass)sqlmap or commix only on identified params; avoid blind without evidencedalfox or xsser on forms; dotdotpwn on suspected traversal endpointsarjun output feeds refined fuzzing (minimize noise)Entry point:
nuclei(target="https://app.example.com", tags="cve,auth", severity="critical,high")
web-recon first; blind scanning produces noise and false positivesexploitation for payload crafting