Kur1sulab/whitebox

credential-scanner

Scan your project for exposed credentials, API keys, and secrets before running OpenClaw skills. Prevents accidental exfiltration.

原文の言語: 英語

cve-yu2

证据驱动白盒代码审计与CVE级漏洞发现 — 污点追踪、反幻觉验证、攻击路径优先级、WooYun 88,636案例统计。当用户要求代码审计/漏洞验证/误报过滤/CVE发现时触发。

原文の言語: 中国語

dependency-auditor

Audit npm, pip, and Go dependencies that OpenClaw skills try to install. Checks for known vulnerabilities, typosquatting, and malicious packages.

原文の言語: 英語

deployment-config-audit

部署配置/凭据审计：deploy/、yml、docker-compose 暴露面与环境差异。

原文の言語: 中国語

hack-ai-ml-security

AI/ML security playbook. Use when assessing model supply chain attacks (pickle RCE, poisoned weights), adversarial examples, model poisoning, model stealing, data privacy attacks (membership inference, model inversion), and autonomous agent security risks.

原文の言語: 英語

hack-anti-debugging-techniques

Anti-debugging detection and bypass playbook. Use when reversing protected binaries that detect debuggers via ptrace, PEB flags, timing checks, or signal/exception handlers on Linux and Windows.

原文の言語: 英語

hack-binary-protection-bypass

Binary protection bypass playbook. Use when identifying and bypassing ASLR, PIE, NX/DEP, stack canary, RELRO, FORTIFY_SOURCE, CET, and MTE protections in ELF binaries to enable exploitation.

原文の言語: 英語

hack-classical-cipher-analysis

Classical cipher analysis playbook. Use when encountering substitution ciphers, Vigenere, transposition, XOR, or encoded text in CTF challenges that requires frequency analysis, Kasiski examination, or known-plaintext cryptanalysis.

原文の言語: 英語

hack-code-obfuscation-deobfuscation

Code obfuscation analysis and deobfuscation playbook. Use when reversing binaries protected by junk code, opaque predicates, self-modifying code, control flow flattening, VM protection, or string encryption.

原文の言語: 英語

hack-lattice-crypto-attacks

Lattice-based cryptanalysis playbook. Use when attacking RSA via Coppersmith small roots, recovering DSA/ECDSA nonces from bias, solving knapsack problems, or applying LLL/BKZ reduction to cryptographic constructions.

原文の言語: 英語

hack-memory-forensics-volatility

Memory forensics playbook using Volatility 2/3. Use when analyzing memory dumps for malware analysis, credential extraction, process investigation, code injection detection, and incident response timeline reconstruction.

原文の言語: 英語

hack-rsa-attack-techniques

RSA attack playbook for CTF and real-world cryptanalysis. Use when given RSA parameters (n, e, c) and need to recover plaintext by exploiting weak keys, small exponents, shared factors, or padding oracles.

原文の言語: 英語

hack-smart-contract-vulnerabilities

Smart contract vulnerability playbook. Use when auditing Solidity/EVM contracts for reentrancy, integer overflow, access control, delegatecall, flash loan, signature replay, and MEV-related attack patterns.

原文の言語: 英語

hack-steganography-techniques

Steganography detection and extraction playbook. Use when analyzing images (LSB, PNG chunks, JPEG DCT, EXIF), audio (spectrogram, DTMF), files (polyglots, appended data, ADS), and text (whitespace, zero-width, homoglyphs) for hidden data.

原文の言語: 英語

hack-symbolic-execution-tools

Symbolic execution and constraint solving playbook. Use when solving CTF reversing challenges, recovering keys, bypassing checks, or automating binary analysis with angr, Z3, or Unicorn Engine.

原文の言語: 英語

hack-symmetric-cipher-attacks

Symmetric cipher attack playbook. Use when exploiting block cipher mode weaknesses (CBC padding oracle, ECB cut-and-paste, bit flipping), stream cipher key reuse, or meet-in-the-middle attacks.

原文の言語: 英語

hack-traffic-analysis-pcap

Traffic analysis and PCAP forensics playbook. Use when analyzing network captures including Wireshark filters, protocol analysis (HTTP/DNS/FTP/SMTP/USB/WiFi), data extraction, covert channel detection, PCAP repair, TLS decryption, and tshark command-line…

原文の言語: 英語

hack-vm-and-bytecode-reverse

Custom VM and bytecode reverse engineering playbook. Use when CTF challenges or protected software implement custom virtual machines with proprietary bytecode, dispatcher loops, or maze-style challenges.

原文の言語: 英語

hunt-sast-methodology

SAST / static analysis hunting methodology — finding vulns in source code with targeted scanning. Use when doing code-based vulnerability hunting.

原文の言語: 英語

java-file-chain-audit

审计 Java 上传/下载/删除链（.jsp RCE 判定、physicalPath 穿越）。

原文の言語: 中国語

java-filechain-source-audit

审计 Java 源码文件操作链（上传/下载/转换/预览）时用：落盘还原、后缀绕过、路径穿越、.jsp RCE 判定。

原文の言語: 中国語

lowcode-framework-authz-audit

审计JeecgBoot/若依类二开源码自定义模块越权/状态机/IDOR时用。含零注解根因定位、状态机三维、配置控制面。

原文の言語: 中国語

mobile-static-analysis

APK / 微信小程序静态审计：组件面测绘、硬编码密钥、接口提取，以及「导出组件≠漏洞」的判据。拿到安装包或 wxapkg 时使用。

原文の言語: 中国語

mybatis-xml-sqli-audit

源码审计 SQL 注入时用：枚举 MyBatis Mapper XML ${} 拼接并做污点追踪。

原文の言語: 中国語

patch-diff-variant-hunting

从厂商安全补丁反推漏洞指纹，再横扫同类系统找变种（n-day → 0day）。给定仓库与修复提交/版本区间时使用。

原文の言語: 中国語

pt-cloud-defense

Detect and break the cloud post-compromise attack chain (AWS / Azure / GCP) —

原文の言語: 英語

pt-cryptography

Cryptanalysis techniques — lattice attacks, padding oracles, weak-RNG exploitation, signature forgery, secret-sharing recovery.

原文の言語: 英語

pt-cve-poc-generator

CVE research, standalone PoC script and report generation. Given a CVE ID, researches NVD and advisories, generates a safe Python PoC, and writes a detailed vulnerability report.

原文の言語: 英語

pt-cve-risk-score

Retrieve CVE risk scores from NVD. Auto-invoked whenever a CVE ID is mentioned to display CVSS score, severity, CWE, and description.

原文の言語: 英語

pt-dfir

Digital forensics and incident response - Windows event log analysis, PCAP forensics, filesystem artifact analysis, AD attack detection,

原文の言語: 英語

pt-firewall-review

Evidence-safe firewall ruleset audit reference specification — 22 documented detector patterns (17 vendor-agnostic plus 5 FortiGate-specific),

原文の言語: 英語

pt-pci-secure-software

Automated PCI Secure Software Standard (SSS) v2.0 readiness gap-assessment of an application from its source code and documentation.

原文の言語: 英語

pt-reverse-engineering

Static and dynamic reverse engineering — ELF/PE analysis, custom-VM bytecode, packed binaries, anti-debug bypass, Frida hooking.

原文の言語: 英語

pt-source-code-scanning

Security-focused source code review and SAST. Scans for vulnerabilities (OWASP Top 10, CWE Top 25), CVEs in third-party dependencies/packages,

原文の言語: 英語

pt-ti-ingest

Threat-intel signal ingest — converts a CVE + affected-asset + claim payload into a queued engagement-scope row for the validation pipeline.

原文の言語: 英語

silent-failure-detection

检测「静默失效」——检索/校验/监控返回空结果但不报错。审计知识库、日志管道、检测规则时使用，用真值对照证明它真的在工作。

原文の言語: 中国語

whitebox-authz-matrix-audit

白盒鉴权矩阵审计：枚举 Controller 端点对照 anon 白名单，产出来授权攻击面全图。触发：鉴权/未授权审计。

原文の言語: 中国語

code-safety-audit

扫描代码安全漏洞，检测依赖漏洞、密钥泄露和OWASP安全模式。当用户提到安全扫描、漏洞检测、依赖审计、密钥泄露、API key、OWASP、npm audit、pip-audit或SQL注入/XSS等关键词时触发。

原文の言語: 中国語