web-security-advanced

name	web-security-advanced
description	Web高级安全测试 — 注入攻击族、协议安全、认证与逻辑漏洞、文件与部署安全、现代Web攻击面，含完整Playbook
routing	{"target_types":["web","api"],"phases":["vuln_discovery","exploitation"],"task_types":["pentest","audit"],"vulnerability_classes":["sqli","xss","ssrf","ssti","xxe","rce","deserialization","idor","csrf","cors","file_upload","path_traversal","auth_bypass","jwt","oauth","graphql","websocket","request_smuggling","prototype_pollution","business_logic"],"exclude_signals":["无法重放","签名阻塞","重放被阻"]}

Web 高级安全测试 Skill

当目标是 Web 应用、API、网关或浏览器面向服务，且需要系统性的漏洞测试时使用本 Skill。

前置条件：如果请求仍由客户端控制且重放未稳定，先使用 client-reverse Skill。

CTF 场景路由

当目标为 CTF 题目（已知有 flag，需要绕过特定过滤）时，优先使用 ctf-web Skill 获取具体绕过值和 payload：

CTF 场景	路由到 ctf-web	参考文档
PHP 弱比较/类型绕过	ctf-web	references/php-bypass-cheatsheet.md
命令注入空格绕过	ctf-web	references/command-injection-bypass.md
eval 回显/无回显	ctf-web	references/eval-and-rce-techniques.md
PHP 代码审计	ctf-web	references/php-code-audit-checklist.md
SSTI 注入链	ctf-web	references/ssti-injection-chains.md