ワンクリックでManusで任意のスキルを実行

web-attacks

スター6

フォーク0

更新日2026年5月22日 15:43

Web application attack techniques — SQL injection, XSS, SSRF, SSTI, XXE, command injection, file upload, path traversal, deserialization, JWT/OAuth/SAML, prototype pollution, HTTP smuggling, GraphQL, race conditions, logic flaws, info disclosure, client-side, NoSQL injection. Use when the target is an HTTP application, API, browser client, auth flow, or template engine.

インストール

Codex または Claude でインストールこの Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。

Manusで実行

ソース

JesusConwellpy

JesusConwellpy/ai-security-methodology

GitHub リポジトリを開く Creator のリポジトリを見る

ダウンロード

Manusで実行

Web Attacks

Routing skill for web vulnerability techniques. Match the entry signal to the correct document.

Signal → Document Map

Signal	Document
SQL error, login form, numeric ID, search, ORDER BY	SQL Injection
MongoDB `$gt/$ne`, `$where`, `$regex`	NoSQL Injection
User input reflected in HTML/JS/DOM	XSS
URL input, webhook, image fetch, PDF export	SSRF
Template engine (Jinja2/Twig/Mako/EJS), `{{ }}` in output	SSTI
XML input, SOAP, SVG upload, DOCX upload	XXE
Shell metachar in params, `;`, `\|`, `, `$()`	Command Injection
File upload form, image processing, avatar	File Upload
Path parameter, `file=`, `template=`, `page=`	Path Traversal
Serialized object, pickle, Java ObjectInputStream	Deserialization
JWT token in Authorization header	JWT Attacks
OAuth flow, SAML assertion, redirect_uri	OAuth/SAML
Node.js app, merge/clone/deep-extend	Prototype Pollution
Reverse proxy, Content-Length / Transfer-Encoding	HTTP Smuggling
GraphQL endpoint, introspection query	GraphQL
Concurrent requests to state-changing endpoint	Race Conditions
Payment flow, password reset, coupon/voucher	Logic Flaws
Stack trace, .git/.env, CORS *, verbose errors	Info Disclosure
DOM postMessage, browser features, CSP gaps	Client-Side

Quick Recon

# Always start here
curl -sI http://target/
curl -sv http://target/ 2>&1 | head -50
# Check common leak paths
for p in robots.txt .git/HEAD .env .DS_Store /.well-known/ /admin /debug /api /swagger; do
  curl -sk -o /dev/null -w "$p %{http_code}\n" "http://target/$p"
done

When Blocked

→ Load Bypass Toolkit → Load WAF Bypass Payloads

このリポジトリの他の Skills

同じリポジトリ

security-methodology

JesusConwellpy/ai-security-methodology

Security research methodology — 5-phase workflow (intake → recon → enum → hunt → report). Routes to specialized technique modules. Use when the user asks to audit, penetration test, bug bounty, find vulnerabilities, exploit a target, or perform any security assessment.

2026-05-236

ai-ml-security

JesusConwellpy/ai-security-methodology

AI/ML attack techniques — prompt injection, indirect/RAG poisoning, tool-calling manipulation, adversarial examples, model extraction, membership inference, training data extraction. Use when the target involves LLM agents, chatbots, ML model APIs, image classifiers, or federated learning systems.

2026-05-226

binary-exploitation

JesusConwellpy/ai-security-methodology

Binary exploitation techniques — buffer overflow, format string, heap exploitation, ROP, kernel exploitation, sandbox escape, shellcode. Use when the target is a native binary (ELF/PE), remote service with memory corruption, or kernel module. Requires pwntools, GDB, and binary analysis tools.

2026-05-226

crypto-attacks

JesusConwellpy/ai-security-methodology

Cryptography attack techniques — RSA, ECC, symmetric ciphers, hash collisions, PRNG attacks, lattice/LWE. Use when the challenge involves encryption, decryption, key recovery, nonce reuse, padding oracles, or cryptanalysis of custom schemes.

2026-05-226

forensics

JesusConwellpy/ai-security-methodology

Forensic analysis techniques — disk, memory, network, steganography, side-channel analysis. Use when given a disk image (.dd, .E01, .raw), memory dump (.vmem, .raw), packet capture (.pcap, .pcapng), image/audio file with hidden data, or side-channel trace.

2026-05-226

malware-analysis

JesusConwellpy/ai-security-methodology

Malware analysis techniques — static triaging, dynamic sandboxing, PE/.NET analysis, C2 protocol identification. Use when analyzing a suspicious binary, script, document, or network capture from a potentially compromised system.

2026-05-226

name	web-attacks
description	Web application attack techniques — SQL injection, XSS, SSRF, SSTI, XXE, command injection, file upload, path traversal, deserialization, JWT/OAuth/SAML, prototype pollution, HTTP smuggling, GraphQL, race conditions, logic flaws, info disclosure, client-side, NoSQL injection. Use when the target is an HTTP application, API, browser client, auth flow, or template engine.
license	MIT
compatibility	Requires filesystem-based agent with bash, Python 3, curl, and internet access.
allowed-tools	Bash Read Write Edit Glob Grep WebFetch
metadata	{"user-invocable":"true","argument-hint":"<vulnerability-type or URL>"}

Web Attacks

Routing skill for web vulnerability techniques. Match the entry signal to the correct document.

Signal → Document Map

Signal	Document
SQL error, login form, numeric ID, search, ORDER BY	SQL Injection
MongoDB `$gt/$ne`, `$where`, `$regex`	NoSQL Injection
User input reflected in HTML/JS/DOM	XSS
URL input, webhook, image fetch, PDF export	SSRF
Template engine (Jinja2/Twig/Mako/EJS), `{{ }}` in output	SSTI
XML input, SOAP, SVG upload, DOCX upload	XXE
Shell metachar in params, `;`, `\|`, `, `$()`	Command Injection
File upload form, image processing, avatar	File Upload
Path parameter, `file=`, `template=`, `page=`	Path Traversal
Serialized object, pickle, Java ObjectInputStream	Deserialization
JWT token in Authorization header	JWT Attacks
OAuth flow, SAML assertion, redirect_uri	OAuth/SAML
Node.js app, merge/clone/deep-extend	Prototype Pollution
Reverse proxy, Content-Length / Transfer-Encoding	HTTP Smuggling
GraphQL endpoint, introspection query	GraphQL
Concurrent requests to state-changing endpoint	Race Conditions
Payment flow, password reset, coupon/voucher	Logic Flaws
Stack trace, .git/.env, CORS *, verbose errors	Info Disclosure
DOM postMessage, browser features, CSP gaps	Client-Side

Quick Recon

# Always start here
curl -sI http://target/
curl -sv http://target/ 2>&1 | head -50
# Check common leak paths
for p in robots.txt .git/HEAD .env .DS_Store /.well-known/ /admin /debug /api /swagger; do
  curl -sk -o /dev/null -w "$p %{http_code}\n" "http://target/$p"
done

When Blocked

→ Load Bypass Toolkit → Load WAF Bypass Payloads