Netw0rkNoob

Guide authorized SSRF assessments, which examine whether a server can be induced to request unintended destinations. The skill sets scope, suggests alternative investigation paths, and defines evidence for confirmed findings or reports of unsuccessful tests.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Define the scope of an authorized SSRF assessment
• Reconsider investigation paths when request restrictions block tests
• Organize evidence that a server initiated a request

Guide web application and API security testing from technology identification and path discovery through vulnerability checks. Examine authentication, input handling, and business logic, then produce a test report and proof-of-concept scripts that demonstrate the findings.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Identifying a web app's technology stack and exposed paths
• Checking authentication and session management
• Testing input handling and file uploads

Guides authorized source code security reviews across dangerous functions, data flow, authentication, logic flaws, and dependencies. Helps agents prioritize review paths and organize code locations, reproduction evidence, and remediation advice before drawing conclusions.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Prioritizing entry points in a large codebase
• Tracing user input to dangerous functions
• Reviewing authentication, logic, and dependency risks

Guide authorized checks of CORS, the browser rules for sharing resources across sites. Define testing boundaries, assess origin handling and credential exposure, and organize reproduction evidence or reports explaining what was tested without finding a vulnerability.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Define the scope of a CORS configuration review
• Review allowed origins and credential exposure
• Organize evidence for a reproducible finding

Guide authorized clickjacking tests, which examine whether embedded pages can trick users into unintended actions. The skill defines testing boundaries, alternative investigation paths, and reproduction evidence needed to support findings or document an inconclusive result.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Defining the scope of a clickjacking assessment
• Reviewing inconsistent page embedding protections
• Organizing HTML, screenshots, and impact evidence

Guide authorized SQL injection testing, where input may change database queries. Define scope, choose alternative investigation paths, and organize requests, responses, and impact evidence, including reports that document unsuccessful checks without claiming a vulnerability is absent.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Define the scope of SQL injection testing
• Reconsider investigation paths after blocked attempts
• Organize reproduction evidence and impact findings

Guides authorized API security testing across authentication, access controls, unintended field updates, rate limits, and GraphQL. Helps agents define scope, review alternative testing directions, and organize request evidence for verified findings or reports of unsuccessful checks.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Defining the scope of API security tests
• Reviewing authentication and access control checks
• Organizing HTTP requests and finding evidence

Assess AI agents and MCP tools for malicious instructions, tool misuse, permission violations, and data leaks. The skill organizes checks across applications, identity, data, deployment, and models, with references for each risk area.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Review prompt injection risks in AI applications
• Check MCP tool misuse and trust boundaries
• Assess agent permissions and credential misuse

Test Android app security by operating the app and inspecting network traffic first, then analyzing APK code or observing functions during execution when needed. Verify vulnerabilities and produce a report with screenshots, traffic evidence, and code review findings.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Observing app traffic during real user flows
• Analyzing code when traffic is hidden or encrypted
• Testing API authorization by modifying and replaying requests

Solve CTF web challenges using concrete test inputs, request templates, and PHP code review checklists. The reference covers type comparisons, command injection, template injection, deserialization, source extraction, and common locations for challenge flags.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Review PHP source code in a CTF challenge
• Investigate type comparisons and input filters
• Explore template injection and deserialization

Turn observed software names and versions into a prioritized list of known vulnerabilities using cve_lookup. Rank candidates by severity, available exploit code, and actual exposure, while keeping unconfirmed version matches clearly separate from verified findings.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Finding CVE candidates from service names and versions
• Prioritizing vulnerabilities for verification
• Reviewing details of high-severity CVE matches

Guides authorized Active Directory security testing with scope boundaries, alternative testing directions, and evidence requirements. Helps agents document domain permissions, reproduction records, and observed impact before deciding whether findings are supported or testing should move elsewhere.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Defining the scope of Active Directory tests
• Reviewing stalled privilege escalation tests
• Organizing domain test evidence

Guide authorized web cache poisoning assessments, where a cache stores an attacker-influenced response. The skill defines test boundaries, suggests alternative investigation paths, and specifies evidence needed to report a finding or document unsuccessful attempts.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Define the scope of an authorized cache poisoning assessment
• Reconsider investigation paths when cache tests stall
• Organize evidence of poisoned responses reaching other requests

Structure authorized container security tests covering Docker escape, Kubernetes privilege escalation, image vulnerabilities, and network isolation. This skill defines scope, alternative investigation paths, and evidence requirements for reporting demonstrated access and its impact.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Define the scope of an authorized container security test
• Review evidence of host access or increased cluster permissions
• Consider other paths when container checks stall

Guides authorized testing of cryptographic weaknesses, including weak algorithms, key management errors, and predictable randomness. Defines testing boundaries, alternative areas to examine, and evidence needed to document verified findings or report unsuccessful checks.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Defining the scope of cryptographic tests
• Reviewing encryption implementation checks
• Organizing evidence of cryptographic weaknesses

Match identified products and versions against CVEs, records of known security vulnerabilities. Assess relevance, evidence quality, and patch status, then produce a candidate list to guide further investigation without attempting exploitation.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Find CVE candidates for identified products and versions
• Assess applicability when version evidence is incomplete
• Check whether deployed versions include fixes

Guides authorized testing of unsafe deserialization, where restoring saved data can trigger unintended behavior. Covers Java, PHP, Python, and .NET, helping agents define scope, assess alternative paths, and organize verified reproduction evidence.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Defining the scope of unsafe deserialization testing
• Reviewing alternatives when a gadget chain is unavailable
• Organizing reproduction evidence and impact assessments

Guides authorized testing of file operation flaws, including path traversal, arbitrary file access, uploads, and file inclusion. Helps agents define boundaries, reconsider test directions, and document reproduction evidence and accessible file scope.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Defining the scope of file operation testing
• Reviewing alternatives when path or upload checks block progress
• Organizing file access evidence and impact assessments

Guide authorized testing of business logic flaws, such as skipped payment steps, altered prices, concurrency issues, and permission errors. The skill helps define boundaries, choose further investigation paths, and organize reproduction evidence and business impact assessments.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Defining the scope of business logic testing
• Choosing further checks for payment and permission flows
• Organizing reproduction steps and business impact evidence

Guide authorized mobile app security testing across stored data, certificate checks, exposed components, and compiled code analysis. The skill organizes scope, alternative investigation paths, reproduction evidence, and completion criteria for findings and unsuccessful tests.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Define scope for mobile app security testing
• Organize checks for stored data and exposed app components
• Choose another investigation path when app protections block testing

Guides authorized payload construction testing by defining scope, alternative directions when testing stalls, and evidence requirements. Helps agents organize reproduction records and decide when to report results or return to a broader testing plan.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Defining the scope of payload construction tests
• Reviewing alternatives when delivery tests stall
• Organizing reproduction evidence

Guides authorized security testing after initial access, covering privilege escalation, persistence, movement between systems, and data access. Helps agents define boundaries, assess demonstrated access, and document evidence or obstacles before ending the investigation.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Defining the scope of testing after initial access
• Reviewing investigation options when privilege escalation stalls
• Documenting movement paths and the highest privileges obtained

Build an initial target profile from a domain, URL, or IP address by collecting availability, ports, services, subdomains, and technology details. Produces factual inputs for known vulnerability lookups and decisions about subsequent security testing.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Start a security assessment from a domain, URL, or IP address
• Inventory exposed ports and services
• Identify subdomains and web technologies

Guide authorized reverse engineering by defining scope, choosing alternative approaches when analysis stalls, and setting evidence requirements. It helps agents prepare supported findings and analysis reports for binaries, protocols, and firmware.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Define the scope of binary analysis
• Reconsider an approach when analysis stalls
• Review evidence before reporting findings