Wyl-cmd/kxns-cli - Page 3

report-writing

Bug bounty report writing for H1/Bugcrowd/Intigriti/Immunefi — report templates, human tone guidelines, impact-first writing, CVSS 3.1 scoring, title formula, impact statement formula, severity decision guide, downgrade counters, pre-submit checklist. Use…

Langue du texte source : anglais

s3-minio-content-type-xss

Exploit public bucket Content-Type override for stored XSS on target origin.

Langue du texte source : anglais

scada-hikvision-isapi

Enumerate Hikvision ISAPI endpoints on SCADA and IoT web interfaces.

Langue du texte source : anglais

security-arsenal

Security payloads, bypass tables, wordlists, gf pattern names, attack pattern catalog (P-01 to P-25, WP-01 to WP-18, CORS V1-V8), always-rejected bug list, conditionally-valid-with-chain table, security research context and behavioral rules. Use when you need…

Langue du texte source : anglais

skill-creator

Guide for creating effective skills. This skill should be used when users want to create a new skill (or update an existing skill) that extends KXNS's capabilities with specialized knowledge, workflows, or tool integrations.

Langue du texte source : anglais

stealth-browser-launch

Launch stealth Chromium with C++ fingerprint patches for anti-bot bypass.

Langue du texte source : anglais

subdomain-takeover-hunt

Detect and verify subdomain takeover via dangling CNAME to unclaimed services.

Langue du texte source : anglais

tls-fingerprint-impersonation

Spoof TLS ClientHello and JA4 fingerprints for browser impersonation.

Langue du texte source : anglais

unauth-api-flow-hijack

Exploit unauthenticated multi-step API flows without credentials.

Langue du texte source : anglais

vhost-enumeration

Discover hidden virtual hosts via Host header fuzzing and SSL certificate parsing.

Langue du texte source : anglais

visual-recon

Screenshot all live hosts for rapid visual triage and technology fingerprinting.

Langue du texte source : anglais

web-enumeration

Sensitive file scanning, path traversal bypass, vHost enum, .env extract, log mining, Varnish detect

Langue du texte source : anglais

web2-recon

Web2 recon pipeline — subdomain enumeration (subfinder, Chaos API, assetfinder), live host discovery (dnsx, httpx), URL crawling (katana, waybackurls, gau), directory fuzzing (ffuf), JS analysis (LinkFinder, SecretFinder), continuous monitoring (new subdomain…

Langue du texte source : anglais

wordpress-plugin-hunt

Hunt WP plugins via REST, exploit CVEs when version known.

Langue du texte source : anglais

wp-mass-recon

Batch WP recon: users, CORS, XMLRPC, leaks across domains.

Langue du texte source : anglais

xslt-injection

XSLT injection testing: processor fingerprinting, XXE and document() SSRF, EXSLT write primitives, PHP/Java/.NET extension RCE surfaces. Use when user-controlled XSLT/stylesheet input or transform endpoints are in scope.

Langue du texte source : anglais

zimbra-attack

Zimbra SOAP user enum, CVE-2022-37042, SSRF when webmail.

Langue du texte source : anglais