yv1ing/Z3r0

dnsx

Use ProjectDiscovery dnsx for authorized, small-batch DNS resolution, record lookup, and hostname validation at conservative rates.

httpx

Use ProjectDiscovery httpx for authorized, low-rate HTTP availability checks, response triage, and lightweight technology signals.

jadx

Use jadx for authorized Android APK, DEX, AAR, and JAR decompilation, app logic review, endpoint discovery, embedded-secret review, and mobile reverse engineering.

nmap

Use nmap for authorized, targeted port checks, lightweight service detection, and local network diagnostics at conservative rates.

sandbox-shell

Use when a task requires shell-level work inside the sandbox, including environment setup, script writing, code execution, preinstalled programs, bounded network diagnostics, or browser/tool CLIs.

uv-python

Use uv for missing Python dependencies, task-scoped virtual environments, temporary execution, and non-preinstalled Python tools.

agent-browser-cli

Use agent-browser-cli to perceive and control the supervised Chrome browser inside the sandbox, interact with pages, capture screenshots/PDFs, inspect cookies/CDP/network/console state, and troubleshoot only when needed.

apktool

Use apktool for authorized Android APK resource decoding, manifest review, smali inspection, rebuild checks, and static mobile artifact triage.

archive-file-triage

Use file, 7z, unzip, tar-compatible tools, hashes, and bounded shell inspection for safe triage of provided archives and unknown files.

binwalk

Use binwalk for authorized firmware, binary blob, archive, filesystem, and embedded-content triage with bounded extraction and evidence handling.

checksec

Use the pwntools-provided checksec CLI for authorized ELF hardening review, mitigation checks, and binary triage evidence.

dns-whois

Use dig, nslookup, whois, and related local CLIs for authorized DNS, WHOIS, ASN, mail, nameserver, and ownership triage.

gdb-pwndbg

Use gdb and pwndbg for authorized binary debugging, crash triage, exploit development, and runtime inspection.

ghidra

Use Ghidra headless analysis for authorized binary reverse engineering, decompilation, function/string/symbol export, and call graph analysis without a GUI.

openssl

Use openssl for authorized TLS, certificate, key, CSR, digest, signature, encoding, and protocol-material inspection inside the sandbox.

pwntools

Use preinstalled pwntools for authorized exploit prototyping, binary interaction, cyclic patterns, packing, and shellcraft tasks.

strace-ltrace

Use strace and ltrace for authorized syscall and library-call tracing of provided binaries and processes.