Wyl-cmd/kxns-cli - Página 3

report-writing

Bug bounty report writing for H1/Bugcrowd/Intigriti/Immunefi — report templates, human tone guidelines, impact-first writing, CVSS 3.1 scoring, title formula, impact statement formula, severity decision guide, downgrade counters, pre-submit checklist. Use…

Idioma del texto original: inglés

s3-minio-content-type-xss

Exploit public bucket Content-Type override for stored XSS on target origin.

Idioma del texto original: inglés

scada-hikvision-isapi

Enumerate Hikvision ISAPI endpoints on SCADA and IoT web interfaces.

Idioma del texto original: inglés

security-arsenal

Security payloads, bypass tables, wordlists, gf pattern names, attack pattern catalog (P-01 to P-25, WP-01 to WP-18, CORS V1-V8), always-rejected bug list, conditionally-valid-with-chain table, security research context and behavioral rules. Use when you need…

Idioma del texto original: inglés

skill-creator

Guide for creating effective skills. This skill should be used when users want to create a new skill (or update an existing skill) that extends KXNS's capabilities with specialized knowledge, workflows, or tool integrations.

Idioma del texto original: inglés

stealth-browser-launch

Launch stealth Chromium with C++ fingerprint patches for anti-bot bypass.

Idioma del texto original: inglés

subdomain-takeover-hunt

Detect and verify subdomain takeover via dangling CNAME to unclaimed services.

Idioma del texto original: inglés

tls-fingerprint-impersonation

Spoof TLS ClientHello and JA4 fingerprints for browser impersonation.

Idioma del texto original: inglés

unauth-api-flow-hijack

Exploit unauthenticated multi-step API flows without credentials.

Idioma del texto original: inglés

vhost-enumeration

Discover hidden virtual hosts via Host header fuzzing and SSL certificate parsing.

Idioma del texto original: inglés

visual-recon

Screenshot all live hosts for rapid visual triage and technology fingerprinting.

Idioma del texto original: inglés

web-enumeration

Sensitive file scanning, path traversal bypass, vHost enum, .env extract, log mining, Varnish detect

Idioma del texto original: inglés

web2-recon

Web2 recon pipeline — subdomain enumeration (subfinder, Chaos API, assetfinder), live host discovery (dnsx, httpx), URL crawling (katana, waybackurls, gau), directory fuzzing (ffuf), JS analysis (LinkFinder, SecretFinder), continuous monitoring (new subdomain…

Idioma del texto original: inglés

wordpress-plugin-hunt

Hunt WP plugins via REST, exploit CVEs when version known.

Idioma del texto original: inglés

wp-mass-recon

Batch WP recon: users, CORS, XMLRPC, leaks across domains.

Idioma del texto original: inglés

xslt-injection

XSLT injection testing: processor fingerprinting, XXE and document() SSRF, EXSLT write primitives, PHP/Java/.NET extension RCE surfaces. Use when user-controlled XSLT/stylesheet input or transform endpoints are in scope.

Idioma del texto original: inglés

zimbra-attack

Zimbra SOAP user enum, CVE-2022-37042, SSRF when webmail.

Idioma del texto original: inglés