Netw0rkNoob
Netw0rkNoob/VulnClaw
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
直接命令不会经过审查 Prompt；运行前请先检查来源。
npx skills add https://github.com/Netw0rkNoob/VulnClaw --skill android-pentest命令会保持在同一行。复制前请横向滚动并检查完整内容。
想先保存到本地？可下载 SkillsMP 当前能够提供的文件。
OSINT 开源情报收集知识库 — 四维信息收集模型（服务器→网站→域名→人员），维度四（人员信息）条件触发
Domain routing and boundary guidance for authorized Active Directory red-team security testing, including Kerberos attacks, domain privilege escalation, lateral movement, and GPO abuse. Use when a task belongs to the AD testing domain and needs scope, evidence, pivot, or exit criteria.
Domain routing and boundary guidance for authorized API security testing, including BOLA/IDOR, authentication bypass, mass assignment, missing rate limits, and GraphQL issues. Use when a task belongs to the API testing domain and needs scope, evidence, pivot, or exit criteria.
基于 SOC 职业分类
正在显示 SKILL.md
| name | android-pentest |
| description | 安卓应用渗透测试 — APK分析、Hook、自动化测试、运行态驱动、签名恢复、抓包分析 |
| routing | {"target_types":["android","mobile"],"task_types":["pentest"],"tooling":["frida","jadx","scrcpy"]} |
针对安卓应用的专项渗透测试，遵循 runtime-first 原则：先运行态驱动、先抓包，最后才逆向。
需要更深入的客户端逆向知识？ 使用 client-reverse Skill，包含完整的签名恢复、加密还原、Burp 重放工作流。
不要先逆向 APK。默认操作顺序：
references/android-authorized-app-pentest-sop.md — 安卓 App 渗透 SOPreferences/android-external-url-runtime-first-workflow.md — 安卓外部 URL 测试references/android-ui-driven-observation-and-packet-loop.md — UI 驱动观察循环references/android-network-layer-testing-quick-reference.md — 网络层测试速查references/android-signing-and-crypto-workflow.md — 签名与加密工作流references/android-static-triage-and-callflow.md — 静态分层与调用链references/android-dynamic-hooking-and-replay.md — 动态 Hook 与重放