Menu
Security audit workflow for authorized Java, .NET, PHP source and deployment artifact review.
Instalar com Codex ou Claude Copie este prompt, cole no Codex, Claude ou outro assistente e deixe que ele revise a página da skill e instale para você.
Baseado na classificação ocupacional SOC
Professional code security audit skill covering 55+ vulnerability types. Enhanced with WooYun 88,636 real-world vulnerability cases (2010-2016). This skill should be used when performing security audits, vulnerability scanning, penetration testing preparation, or code review for security issues. Supports 9 languages: Java, Python, Go, PHP, JavaScript/Node.js, C/C++, .NET/C#, Ruby, Rust. Includes 143 mandatory detection items across all languages with language-specific checklists. Covers SQL injection, XSS, RCE, deserialization, SSRF, JNDI injection, JDBC protocol injection, authentication bypass, business logic flaws, race conditions, and modern security domains (LLM, Serverless, Android). WooYun integration adds: statistical-driven parameter priority, bypass techniques library, logic vulnerability patterns, and real-case references. v1.0: Initial public release with Docker deployment verification framework.
Comprehensive code review guidance across frontend, backend, systems, architecture, quality, performance, and security.
Provides AI and machine learning techniques for CTF challenges. Use when attacking ML models, crafting adversarial examples, performing model extraction, prompt injection, membership inference, training data poisoning, fine-tuning manipulation, neural network analysis, LoRA adapter exploitation, LLM jailbreaking, or solving AI-related puzzles.
Provides cryptography attack techniques for CTF challenges. Use when attacking encryption, hashing, signatures, ZKP, PRNG, or mathematical crypto problems involving RSA, AES, ECC, lattices, LWE, CVP, number theory, Coppersmith, Pollard, Wiener, padding oracle, GCM, key derivation, or stream/block cipher weaknesses.
Provides digital forensics and signal analysis techniques for CTF challenges. Use when analyzing disk images, memory dumps, event logs, network captures, cryptocurrency transactions, steganography, PDF analysis, Windows registry, Volatility, PCAP, Docker images, coredumps, side-channel power traces, DTMF audio spectrograms, packet timing analysis, CD audio disc images, or recovering deleted files and credentials.
Provides malware analysis and network traffic techniques for CTF challenges. Use when analyzing obfuscated scripts, malicious packages, custom crypto protocols, C2 traffic, PE/.NET binaries, RC4/AES encrypted communications, YARA rules, shellcode analysis, memory forensics for malware (Volatility malfind, process injection detection), anti-analysis techniques (VM/sandbox detection, timing evasion, API hashing, process injection, environment checks), or extracting malware configurations and indicators of compromise.
| name | audit-skills |
| category | audit |
| description | Security audit workflow for authorized Java, .NET, PHP source and deployment artifact review. |
未指定目录时，先创建 <目标目录>/audit-workspace/ 作为审计工作目录。
<审计工作目录>/script-output/<审计工作目录>/reports/<审计工作目录>/tools/<审计工作目录>/decompiled/<审计工作目录>/deobfuscated/<审计工作目录>/evidence/所有脚本执行结果、临时扫描结果、命令输出、日志和中间证据都写入 script-output/；最终可交付报告只写入 reports/，默认文件名为 audit-report.md。
按目标语言只读取对应参考文件，避免无关上下文进入审计：
references/java.mdreferences/net.md语言参考中的扫描或组件命中只能作为线索；确认漏洞必须回到本文件的有效性标准。
只有同时满足以下标准，才能把发现写成“确认漏洞”：
任一标准缺失时，只能写为“高风险线索 / 待人工验证”，不得写入“确认漏洞”。
每个确认漏洞必须包含：
标题:
严重等级:
受影响入口:
鉴权要求:
用户可控输入:
Source-to-sink 调用链:
Sink:
同源/相似受影响路由:
防护判断:
安全 Payload:
BurpSuite 原始请求包:
影响:
证据文件和行号:
限制说明:
BurpSuite 原始请求包必须完整到可直接粘贴进 Repeater：
POST /<授权测试路径> HTTP/1.1
Host: <授权测试主机>
Content-Type: application/x-www-form-urlencoded
Connection: close
<参数名>=<安全证明Payload>