Deep web exploitation beyond initial scanning. Covers SQLi (blind, OOB, second-order), NoSQL injection, GraphQL injection (introspection, batching, mutation abuse), XSS (reflected/stored/DOM with source-sink analysis), SSTI (Jinja2/Twig/Freemarker/ERB RCE), SSRF chains, file upload bypass (polyglots), XXE (blind, DOCX/SVG, Content-Type switching), deserialization (Java/PHP/Python/.NET), command injection, path traversal / LFI wrapper bypasses, race conditions, CSRF, JWT attacks (none/key confusion/kid injection), HTTP request smuggling (CL.TE/TE.CL/H2), CRLF injection, open redirect chains, CORS exploitation, web cache deception/poisoning, OAuth misconfiguration, prototype pollution, session management, and business logic flaws. Uses sqlmap, commix, xsser, wapiti, davtest, and manual http payloads - every technique includes real payloads and code. Chains from /pentester or /api-security, into /post-exploit on RCE, and into /ai-redteam when an LLM/AI endpoint is found.
Reverse shell generation and listener management. Generates platform-specific reverse shell payloads (bash, python, php, powershell, java, ruby, perl, netcat, socat, msfvenom) and sets up listeners in the Kali container. Supports one-liner generation, encoded payloads for WAF/filter bypass, listener setup with session capture, and shell stabilization. Chains from /pentester, /metasploit, or /post-exploit when command execution is confirmed.
White-box source code security review structured around OWASP ASVS 5.0 (427 verification requirements across 16 chapters). Reads and understands application source code to build a security-aware knowledge base that enriches all downstream skills. Covers: tech stack identification, route/endpoint mapping, authentication and authorization architecture, dangerous function patterns, source-to-sink data flow tracing, IaC review, dependency analysis, ASVS compliance mapping, and LLM integration security (prompt injection, tool abuse, output handling, RAG poisoning, MCP server patterns). When LLM/AI framework usage is detected, automatically reviews OWASP LLM Top 10 patterns from source code and chains into /ai-redteam with white-box context for live endpoint testing. Chains into /pentester, /threat-modeling, /web-exploit, /api-security, /cloud-security, /analyze-cve, /credential-audit, and /ai-redteam — providing white-box context that transforms black-box testing into targeted, informed assessment.
Formats all confirmed pentest findings from findings.json into copy-pasteable GitHub issue markdown blocks, following the AppSec reporting guide template.
Post-exploitation workflow. Covers privilege escalation (Linux SUID/sudo/kernel, Windows UAC/service/token), persistence assessment, local enumeration, credential harvesting, and pivot preparation. Structured workflows for Linux and Windows targets using impacket, netexec, john, linpeas/winpeas, and standard Kali tools. Includes kernel exploit reference tables, GTFOBins exploitation chains, Potato attack selection, Docker/container escapes, DLL hijacking, SSH key harvesting, credential recovery from memory, and Windows token manipulation. Chains from /pentester or /credential-audit when access is obtained.
Software supply-chain and CI/CD security assessment. Covers dependency confusion (internal/private package names that resolve on public registries — extracted from package.json, requirements.txt, pom.xml, go.mod, Gemfile, .csproj), typosquatting and namespace hijacking, lockfile integrity and resolved-URL tampering, malicious install hooks (npm postinstall, pip setup.py, gem extensions), and unmaintained/abandoned-package takeover risk. Plus CI/CD pipeline review: GitHub Actions / GitLab CI / CircleCI misconfigurations — pull_request_target abuse, unpinned action SHAs, secrets leaked in logs, over-broad OIDC trust, and poisoned pipeline execution (PPE, direct and indirect). Assesses SLSA provenance gaps. White-box first: reads manifests, lockfiles, and workflow YAML from a local codebase. Uses semgrep, trufflehog, and registry probes. Chains from /codebase or /pentester; into /analyze-cve for confirmed vulnerable versions and /cloud-security when a pipeline holds cloud OIDC trust.
Cloud-native identity federation attacks across AWS, Azure, and GCP. Covers OIDC CI/CD trust abuse (IAM role trust policies that trust token.actions.githubusercontent.com, GitLab, CircleCI, or Terraform Cloud with over-broad sub/aud conditions), workload-identity abuse (EKS IRSA, GKE Workload Identity, AKS pod-managed-identity — Kubernetes ServiceAccount token to AssumeRoleWithWebIdentity to cloud credentials), and the full SSRF to IMDSv2 to role to credential chain walked end to end. Also covers ECS/Fargate task-role metadata (169.254.170.2), Azure IMDS managed-identity token theft, GCP metadata service-account tokens, and cloud-credential pivoting from a shell (~/.aws/credentials, gcloud creds, kubeconfig, CI env, projected SA tokens). Taught as attack PATTERNS to reason from. Uses aws/az/gcloud CLIs, kubectl, curl, jwt_tool, and http probing. Chains from /pentester, /cloud-security, or /web-exploit (on a confirmed SSRF); into /post-exploit and /cloud-security once credentials are obtained.
SAML, enterprise SSO, SCIM, and deep JWT security testing. Covers XML signature wrapping (XSW1-8), ds:Signature stripping and comment-injection (canonicalization) attacks, signature-exclusion / unsigned-assertion acceptance, golden SAML (forged assertions from a stolen IdP signing key), IdP-initiated SSO abuse and unsolicited-response replay, SAML assertion XXE, RelayState open-redirect/injection, and audience/recipient/NotOnOrAfter validation gaps. Plus SCIM provisioning abuse: JIT auto-provisioning role injection, active=true reactivation, PATCH privilege escalation, and cross-tenant user creation. And deep JWT: alg confusion (RS256 to HS256), alg:none, kid SQL/path-traversal injection, jku/x5u header SSRF, embedded jwk header key injection, and weak-secret brute force. Uses jwt_tool, xmllint, python, and manual http payloads. Chains from /pentester or /web-exploit; into /post-exploit and /cloud-identity-federation on takeover or federated-role access.