테스트·보안 스킬

Guide authorized clickjacking tests, which examine whether embedded pages can trick users into unintended actions. The skill defines testing boundaries, alternative investigation paths, and reproduction evidence needed to support findings or document an inconclusive result.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Defining the scope of a clickjacking assessment
• Reviewing inconsistent page embedding protections
• Organizing HTML, screenshots, and impact evidence

Guides authorized testing of file operation flaws, including path traversal, arbitrary file access, uploads, and file inclusion. Helps agents define boundaries, reconsider test directions, and document reproduction evidence and accessible file scope.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Defining the scope of file operation testing
• Reviewing alternatives when path or upload checks block progress
• Organizing file access evidence and impact assessments

Assess candidate CVEs, identifiers for known vulnerabilities, against observed software, versions, and patch evidence. The skill helps determine whether to continue verification, gather more information, or change testing direction within the authorized scope.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Checking whether candidate CVEs match observed software
• Reviewing patch status before further testing
• Identifying evidence gaps that require more reconnaissance

Analyze CTF cryptography challenges by identifying the cipher and matching known parameters to possible attacks. It provides formulas, attack parameters, and Python snippets for RSA, AES, elliptic curves, random number generators, classical ciphers, and lattice problems.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Choose RSA approaches from the given parameters
• Investigate weaknesses in AES modes
• Analyze random number sequences for predictability

Guides authorized testing of XXE, a flaw involving external references processed in XML. Helps agents set boundaries, reconsider blocked test paths, and document evidence of file access or server requests before drawing conclusions.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Defining the scope of XXE testing
• Reviewing XML entry points in uploaded files
• Organizing evidence of entity processing and external requests

Guide authorized security reconnaissance, the collection of information about a target. Set investigation boundaries, identify alternative sources when discovery stalls, and organize domains, ports, services, and findings for prioritizing further security testing.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Define the scope of authorized reconnaissance
• Find alternative sources when discovery stalls
• Organize domains, IP addresses, ports, and services

Guides authorized testing of injection flaws outside SQL, where crafted input changes how a system interprets a request. Helps agents define scope, choose alternative directions, document reproduction evidence, and decide when findings justify a report.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Defining the scope of non-SQL injection testing
• Reconsidering test directions when progress stalls
• Organizing reproduction evidence and impact assessments

Guide authorized SSRF assessments, which examine whether a server can be induced to request unintended destinations. The skill sets scope, suggests alternative investigation paths, and defines evidence for confirmed findings or reports of unsuccessful tests.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Define the scope of an authorized SSRF assessment
• Reconsider investigation paths when request restrictions block tests
• Organize evidence that a server initiated a request

Find specialist playbooks for internal network penetration testing after initial access is established. Covers movement between hosts, credential collection, privilege escalation, persistent access, tunneling, and assessments involving Active Directory, certificate services, Exchange, and SharePoint.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Plan internal network testing after gaining initial access
• Find playbooks for movement between hosts and credential collection
• Review privilege escalation and persistent access test areas

Guide systematic security testing of Web applications and APIs across input handling, authentication, business rules, protocols, files, and deployment settings. Use topic-specific references and playbooks, or step-by-step testing guides, to choose checks suited to the target.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Planning input validation and injection testing
• Checking authentication and access control
• Reviewing GraphQL, WebSocket, and OAuth security

Guides authorized OS command injection testing by defining scope, alternative investigation paths, and evidence requirements. Helps agents document direct, blind, and argument injection findings and report inconclusive results without overstating what the evidence proves.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Defining the scope of command injection testing
• Reviewing investigation paths when responses are absent
• Organizing reproduction evidence and execution privileges

Handle encoded strings and cryptographic data with tool-based conversions. Decode layered formats, calculate hashes, encrypt or decrypt with AES and RSA, and inspect JWT tokens, which carry encoded headers and data used in authentication.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Decoding strings with multiple layers of encoding
• Calculating hashes and checking likely hash formats
• Encrypting or decrypting data with a known key

Read a HackerOne program’s testing scope and rules, distinguish report eligibility from bounty eligibility, and pass supported assets to pentest-flow for security testing. Prepare separate findings in HackerOne report format for manual submission while enforcing scope and impact limits.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Organizing allowed and excluded assets from a program
• Distinguishing report eligibility from bounty eligibility
• Testing one supported asset at a time within program rules

Guide authorized testing of business logic flaws, such as skipped payment steps, altered prices, concurrency issues, and permission errors. The skill helps define boundaries, choose further investigation paths, and organize reproduction evidence and business impact assessments.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Defining the scope of business logic testing
• Choosing further checks for payment and permission flows
• Organizing reproduction steps and business impact evidence

Guide authorized testing of open redirects, where a site sends visitors to an unintended destination. This skill defines test boundaries, alternative investigation paths, and the evidence needed to report findings or conclude an investigation.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Define the scope of an authorized redirect test
• Review evidence for OAuth redirect_uri findings
• Choose another direction when redirect checks stall

Guide authorized SQL injection testing, where input may change database queries. Define scope, choose alternative investigation paths, and organize requests, responses, and impact evidence, including reports that document unsuccessful checks without claiming a vulnerability is absent.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Define the scope of SQL injection testing
• Reconsider investigation paths after blocked attempts
• Organize reproduction evidence and impact findings

Structure authorized cloud security tests covering access permissions, exposed storage, metadata services, and serverless environments. This skill helps agents stay within scope, consider alternative investigation paths, and collect evidence for findings and completion decisions.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Define the scope of an authorized cloud security test
• Organize evidence for permission and storage findings
• Consider other paths when cloud checks stall

Find tools and command options for an established security testing task. References span 14 categories, including reconnaissance, web testing, password testing, privilege escalation, and tunneling, helping you compare candidates and recall how to use them.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Finding tools for an identified vulnerability type
• Looking up command arguments you do not remember
• Comparing candidate tools for the same testing task

Guides authorized source code security reviews across dangerous functions, data flow, authentication, logic flaws, and dependencies. Helps agents prioritize review paths and organize code locations, reproduction evidence, and remediation advice before drawing conclusions.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Prioritizing entry points in a large codebase
• Tracing user input to dangerous functions
• Reviewing authentication, logic, and dependency risks

Guide web application and API security testing from technology identification and path discovery through vulnerability checks. Examine authentication, input handling, and business logic, then produce a test report and proof-of-concept scripts that demonstrate the findings.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Identifying a web app's technology stack and exposed paths
• Checking authentication and session management
• Testing input handling and file uploads

Solve CTF web challenges using concrete test inputs, request templates, and PHP code review checklists. The reference covers type comparisons, command injection, template injection, deserialization, source extraction, and common locations for challenge flags.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Review PHP source code in a CTF challenge
• Investigate type comparisons and input filters
• Explore template injection and deserialization

Guide authorized web cache poisoning assessments, where a cache stores an attacker-influenced response. The skill defines test boundaries, suggests alternative investigation paths, and specifies evidence needed to report a finding or document unsuccessful attempts.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Define the scope of an authorized cache poisoning assessment
• Reconsider investigation paths when cache tests stall
• Organize evidence of poisoned responses reaching other requests

Guide authorized subdomain takeover assessments involving DNS records that point to unclaimed resources. The skill defines boundaries, suggests further checks, and specifies evidence for takeover feasibility, potential impact, or a report of unsuccessful investigation.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Define the scope of an authorized subdomain takeover assessment
• Investigate DNS records pointing to deleted services
• Organize evidence of takeover feasibility and potential impact

Build an initial target profile from a domain, URL, or IP address by collecting availability, ports, services, subdomains, and technology details. Produces factual inputs for known vulnerability lookups and decisions about subsequent security testing.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Start a security assessment from a domain, URL, or IP address
• Inventory exposed ports and services
• Identify subdomains and web technologies