Menu
Skills neste repositório
O SkillsMP coletou 97 skills de Wyl-cmd/kxns-cli. Abra uma skill para revisar a origem e os detalhes.
Wyl-cmd/kxns-cliMostrando 17 de 97 skills coletadas.
Bug bounty report writing for H1/Bugcrowd/Intigriti/Immunefi — report templates, human tone guidelines, impact-first writing, CVSS 3.1 scoring, title formula, impact statement formula, severity decision guide, downgrade counters, pre-submit checklist. Use…
Idioma do texto original: inglês
Exploit public bucket Content-Type override for stored XSS on target origin.
Idioma do texto original: inglês
Enumerate Hikvision ISAPI endpoints on SCADA and IoT web interfaces.
Idioma do texto original: inglês
Security payloads, bypass tables, wordlists, gf pattern names, attack pattern catalog (P-01 to P-25, WP-01 to WP-18, CORS V1-V8), always-rejected bug list, conditionally-valid-with-chain table, security research context and behavioral rules. Use when you need…
Idioma do texto original: inglês
Guide for creating effective skills. This skill should be used when users want to create a new skill (or update an existing skill) that extends KXNS's capabilities with specialized knowledge, workflows, or tool integrations.
Idioma do texto original: inglês
Launch stealth Chromium with C++ fingerprint patches for anti-bot bypass.
Idioma do texto original: inglês
Detect and verify subdomain takeover via dangling CNAME to unclaimed services.
Idioma do texto original: inglês
Spoof TLS ClientHello and JA4 fingerprints for browser impersonation.
Idioma do texto original: inglês
Exploit unauthenticated multi-step API flows without credentials.
Idioma do texto original: inglês
Discover hidden virtual hosts via Host header fuzzing and SSL certificate parsing.
Idioma do texto original: inglês
Screenshot all live hosts for rapid visual triage and technology fingerprinting.
Idioma do texto original: inglês
Sensitive file scanning, path traversal bypass, vHost enum, .env extract, log mining, Varnish detect
Idioma do texto original: inglês
Web2 recon pipeline — subdomain enumeration (subfinder, Chaos API, assetfinder), live host discovery (dnsx, httpx), URL crawling (katana, waybackurls, gau), directory fuzzing (ffuf), JS analysis (LinkFinder, SecretFinder), continuous monitoring (new subdomain…
Idioma do texto original: inglês
Hunt WP plugins via REST, exploit CVEs when version known.
Idioma do texto original: inglês
Batch WP recon: users, CORS, XMLRPC, leaks across domains.
Idioma do texto original: inglês
XSLT injection testing: processor fingerprinting, XXE and document() SSRF, EXSLT write primitives, PHP/Java/.NET extension RCE surfaces. Use when user-controlled XSLT/stylesheet input or transform endpoints are in scope.
Idioma do texto original: inglês
Zimbra SOAP user enum, CVE-2022-37042, SSRF when webmail.
Idioma do texto original: inglês