一键在 Manus 中运行任何 Skill

web-attacks

星标6

分支0

更新时间2026年5月22日 15:43

Web application attack techniques — SQL injection, XSS, SSRF, SSTI, XXE, command injection, file upload, path traversal, deserialization, JWT/OAuth/SAML, prototype pollution, HTTP smuggling, GraphQL, race conditions, logic flaws, info disclosure, client-side, NoSQL injection. Use when the target is an HTTP application, API, browser client, auth flow, or template engine.

安装

用 Codex 或 Claude 帮你安装复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。

在 Manus 中运行

来源

JesusConwellpy

JesusConwellpy/ai-security-methodology

打开 GitHub 仓库查看创作者相关仓库

下载

在 Manus 中运行

Web Attacks

Routing skill for web vulnerability techniques. Match the entry signal to the correct document.

Signal → Document Map

Signal	Document
SQL error, login form, numeric ID, search, ORDER BY	SQL Injection
MongoDB `$gt/$ne`, `$where`, `$regex`	NoSQL Injection
User input reflected in HTML/JS/DOM	XSS
URL input, webhook, image fetch, PDF export	SSRF
Template engine (Jinja2/Twig/Mako/EJS), `{{ }}` in output	SSTI
XML input, SOAP, SVG upload, DOCX upload	XXE
Shell metachar in params, `;`, `\|`, `, `$()`	Command Injection
File upload form, image processing, avatar	File Upload
Path parameter, `file=`, `template=`, `page=`	Path Traversal
Serialized object, pickle, Java ObjectInputStream	Deserialization
JWT token in Authorization header	JWT Attacks
OAuth flow, SAML assertion, redirect_uri	OAuth/SAML
Node.js app, merge/clone/deep-extend	Prototype Pollution
Reverse proxy, Content-Length / Transfer-Encoding	HTTP Smuggling
GraphQL endpoint, introspection query	GraphQL
Concurrent requests to state-changing endpoint	Race Conditions
Payment flow, password reset, coupon/voucher	Logic Flaws
Stack trace, .git/.env, CORS *, verbose errors	Info Disclosure
DOM postMessage, browser features, CSP gaps	Client-Side

Quick Recon

# Always start here
curl -sI http://target/
curl -sv http://target/ 2>&1 | head -50
# Check common leak paths
for p in robots.txt .git/HEAD .env .DS_Store /.well-known/ /admin /debug /api /swagger; do
  curl -sk -o /dev/null -w "$p %{http_code}\n" "http://target/$p"
done

When Blocked

→ Load Bypass Toolkit → Load WAF Bypass Payloads

同仓库更多 Skills

同仓库

security-methodology

JesusConwellpy/ai-security-methodology

Security research methodology — 5-phase workflow (intake → recon → enum → hunt → report). Routes to specialized technique modules. Use when the user asks to audit, penetration test, bug bounty, find vulnerabilities, exploit a target, or perform any security assessment.

2026-05-236

ai-ml-security

JesusConwellpy/ai-security-methodology

AI/ML attack techniques — prompt injection, indirect/RAG poisoning, tool-calling manipulation, adversarial examples, model extraction, membership inference, training data extraction. Use when the target involves LLM agents, chatbots, ML model APIs, image classifiers, or federated learning systems.

2026-05-226

binary-exploitation

JesusConwellpy/ai-security-methodology

Binary exploitation techniques — buffer overflow, format string, heap exploitation, ROP, kernel exploitation, sandbox escape, shellcode. Use when the target is a native binary (ELF/PE), remote service with memory corruption, or kernel module. Requires pwntools, GDB, and binary analysis tools.

2026-05-226

crypto-attacks

JesusConwellpy/ai-security-methodology

Cryptography attack techniques — RSA, ECC, symmetric ciphers, hash collisions, PRNG attacks, lattice/LWE. Use when the challenge involves encryption, decryption, key recovery, nonce reuse, padding oracles, or cryptanalysis of custom schemes.

2026-05-226

forensics

JesusConwellpy/ai-security-methodology

Forensic analysis techniques — disk, memory, network, steganography, side-channel analysis. Use when given a disk image (.dd, .E01, .raw), memory dump (.vmem, .raw), packet capture (.pcap, .pcapng), image/audio file with hidden data, or side-channel trace.

2026-05-226

malware-analysis

JesusConwellpy/ai-security-methodology

Malware analysis techniques — static triaging, dynamic sandboxing, PE/.NET analysis, C2 protocol identification. Use when analyzing a suspicious binary, script, document, or network capture from a potentially compromised system.

2026-05-226

name	web-attacks
description	Web application attack techniques — SQL injection, XSS, SSRF, SSTI, XXE, command injection, file upload, path traversal, deserialization, JWT/OAuth/SAML, prototype pollution, HTTP smuggling, GraphQL, race conditions, logic flaws, info disclosure, client-side, NoSQL injection. Use when the target is an HTTP application, API, browser client, auth flow, or template engine.
license	MIT
compatibility	Requires filesystem-based agent with bash, Python 3, curl, and internet access.
allowed-tools	Bash Read Write Edit Glob Grep WebFetch
metadata	{"user-invocable":"true","argument-hint":"<vulnerability-type or URL>"}

Web Attacks

Routing skill for web vulnerability techniques. Match the entry signal to the correct document.

Signal → Document Map

Signal	Document
SQL error, login form, numeric ID, search, ORDER BY	SQL Injection
MongoDB `$gt/$ne`, `$where`, `$regex`	NoSQL Injection
User input reflected in HTML/JS/DOM	XSS
URL input, webhook, image fetch, PDF export	SSRF
Template engine (Jinja2/Twig/Mako/EJS), `{{ }}` in output	SSTI
XML input, SOAP, SVG upload, DOCX upload	XXE
Shell metachar in params, `;`, `\|`, `, `$()`	Command Injection
File upload form, image processing, avatar	File Upload
Path parameter, `file=`, `template=`, `page=`	Path Traversal
Serialized object, pickle, Java ObjectInputStream	Deserialization
JWT token in Authorization header	JWT Attacks
OAuth flow, SAML assertion, redirect_uri	OAuth/SAML
Node.js app, merge/clone/deep-extend	Prototype Pollution
Reverse proxy, Content-Length / Transfer-Encoding	HTTP Smuggling
GraphQL endpoint, introspection query	GraphQL
Concurrent requests to state-changing endpoint	Race Conditions
Payment flow, password reset, coupon/voucher	Logic Flaws
Stack trace, .git/.env, CORS *, verbose errors	Info Disclosure
DOM postMessage, browser features, CSP gaps	Client-Side

Quick Recon

# Always start here
curl -sI http://target/
curl -sv http://target/ 2>&1 | head -50
# Check common leak paths
for p in robots.txt .git/HEAD .env .DS_Store /.well-known/ /admin /debug /api /swagger; do
  curl -sk -o /dev/null -w "$p %{http_code}\n" "http://target/$p"
done

When Blocked

→ Load Bypass Toolkit → Load WAF Bypass Payloads