Netw0rkNoob

Turn observed software names and versions into a prioritized list of known vulnerabilities using cve_lookup. Rank candidates by severity, available exploit code, and actual exposure, while keeping unconfirmed version matches clearly separate from verified findings.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Finding CVE candidates from service names and versions
• Prioritizing vulnerabilities for verification
• Reviewing details of high-severity CVE matches

Structure authorized container security tests covering Docker escape, Kubernetes privilege escalation, image vulnerabilities, and network isolation. This skill defines scope, alternative investigation paths, and evidence requirements for reporting demonstrated access and its impact.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Define the scope of an authorized container security test
• Review evidence of host access or increased cluster permissions
• Consider other paths when container checks stall

Guide authorized testing of business logic flaws, such as skipped payment steps, altered prices, concurrency issues, and permission errors. The skill helps define boundaries, choose further investigation paths, and organize reproduction evidence and business impact assessments.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Defining the scope of business logic testing
• Choosing further checks for payment and permission flows
• Organizing reproduction steps and business impact evidence

Guides authorized security testing after initial access, covering privilege escalation, persistence, movement between systems, and data access. Helps agents define boundaries, assess demonstrated access, and document evidence or obstacles before ending the investigation.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Defining the scope of testing after initial access
• Reviewing investigation options when privilege escalation stalls
• Documenting movement paths and the highest privileges obtained

Coordinate authorized web application security testing by routing potential weaknesses to specialist skills. Keep testing within the target scope, organize supporting evidence, and combine individual test results into a comprehensive report.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Choosing specialist skills for potential web vulnerabilities
• Prioritizing multiple areas for security testing
• Combining test evidence into a comprehensive report

Handle encoded strings and cryptographic data with tool-based conversions. Decode layered formats, calculate hashes, encrypt or decrypt with AES and RSA, and inspect JWT tokens, which carry encoded headers and data used in authentication.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Decoding strings with multiple layers of encoding
• Calculating hashes and checking likely hash formats
• Encrypting or decrypting data with a known key

Guides authorized testing of XXE, a flaw involving external references processed in XML. Helps agents set boundaries, reconsider blocked test paths, and document evidence of file access or server requests before drawing conclusions.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Defining the scope of XXE testing
• Reviewing XML entry points in uploaded files
• Organizing evidence of entity processing and external requests

Guide authorized cross-site scripting testing, where injected scripts run in a web page. Define test boundaries, choose alternative investigation paths, and document reproduction evidence before reporting findings or ending an inconclusive investigation.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Define the scope of an authorized XSS assessment
• Choose another investigation path when checks stall
• Organize reproduction steps and script execution evidence

Guide authorized clickjacking tests, which examine whether embedded pages can trick users into unintended actions. The skill defines testing boundaries, alternative investigation paths, and reproduction evidence needed to support findings or document an inconclusive result.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Defining the scope of a clickjacking assessment
• Reviewing inconsistent page embedding protections
• Organizing HTML, screenshots, and impact evidence

Guides authorized testing of unsafe deserialization, where restoring saved data can trigger unintended behavior. Covers Java, PHP, Python, and .NET, helping agents define scope, assess alternative paths, and organize verified reproduction evidence.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Defining the scope of unsafe deserialization testing
• Reviewing alternatives when a gadget chain is unavailable
• Organizing reproduction evidence and impact assessments

Guide systematic security testing of Web applications and APIs across input handling, authentication, business rules, protocols, files, and deployment settings. Use topic-specific references and playbooks, or step-by-step testing guides, to choose checks suited to the target.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Planning input validation and injection testing
• Checking authentication and access control
• Reviewing GraphQL, WebSocket, and OAuth security

Find relevant references for CTF miscellaneous challenges, including restricted execution environments, layered encodings, hidden data in media, and game or virtual machine analysis. It also covers CTFd platform operations and Linux privilege escalation.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Investigate Python or Bash jail challenges
• Identify layered encodings and hidden media data
• Analyze games and custom virtual machines

Guide authorized reverse engineering by defining scope, choosing alternative approaches when analysis stalls, and setting evidence requirements. It helps agents prepare supported findings and analysis reports for binaries, protocols, and firmware.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Define the scope of binary analysis
• Reconsider an approach when analysis stalls
• Review evidence before reporting findings

Guides authorized source code security reviews across dangerous functions, data flow, authentication, logic flaws, and dependencies. Helps agents prioritize review paths and organize code locations, reproduction evidence, and remediation advice before drawing conclusions.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Prioritizing entry points in a large codebase
• Tracing user input to dangerous functions
• Reviewing authentication, logic, and dependency risks

Guide authorized checks of CORS, the browser rules for sharing resources across sites. Define testing boundaries, assess origin handling and credential exposure, and organize reproduction evidence or reports explaining what was tested without finding a vulnerability.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Define the scope of a CORS configuration review
• Review allowed origins and credential exposure
• Organize evidence for a reproducible finding

Match identified products and versions against CVEs, records of known security vulnerabilities. Assess relevance, evidence quality, and patch status, then produce a candidate list to guide further investigation without attempting exploitation.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Find CVE candidates for identified products and versions
• Assess applicability when version evidence is incomplete
• Check whether deployed versions include fixes

Guide authorized mobile app security testing across stored data, certificate checks, exposed components, and compiled code analysis. The skill organizes scope, alternative investigation paths, reproduction evidence, and completion criteria for findings and unsuccessful tests.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Define scope for mobile app security testing
• Organize checks for stored data and exposed app components
• Choose another investigation path when app protections block testing

Guide authorized security reconnaissance, the collection of information about a target. Set investigation boundaries, identify alternative sources when discovery stalls, and organize domains, ports, services, and findings for prioritizing further security testing.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Define the scope of authorized reconnaissance
• Find alternative sources when discovery stalls
• Organize domains, IP addresses, ports, and services

Plan security tests for websites and AI agents using vulnerability cases and risk frameworks. The skill selects relevant references, develops test hypotheses, and separates suspected issues from confirmed findings with source citations.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Plan an authorized web penetration test
• Assess prompt injection and MCP risks
• Develop test hypotheses for a CTF challenge

Guide authorized testing of login, authorization, and sessions, including passwords, JWT tokens, OAuth, and multifactor authentication. The skill helps define boundaries, select alternative investigation paths, and document evidence needed to support findings or report unsuccessful tests.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Define scope for login and session security testing
• Organize checks for JWT, OAuth, and multifactor authentication
• Document requests and evidence supporting an authentication bypass

Guide authorized testing of open redirects, where a site sends visitors to an unintended destination. This skill defines test boundaries, alternative investigation paths, and the evidence needed to report findings or conclude an investigation.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Define the scope of an authorized redirect test
• Review evidence for OAuth redirect_uri findings
• Choose another direction when redirect checks stall

Guide authorized testing of security defenses, including web application firewalls, antivirus, and endpoint detection tools. The skill defines scope, alternative testing directions, evidence requirements, and completion criteria for reporting successful bypasses or unsuccessful attempts.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Define scope for authorized security defense testing
• Choose another direction when testing stalls
• Organize evidence for a successful bypass

Guide authorized SSRF assessments, which examine whether a server can be induced to request unintended destinations. The skill sets scope, suggests alternative investigation paths, and defines evidence for confirmed findings or reports of unsuccessful tests.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Define the scope of an authorized SSRF assessment
• Reconsider investigation paths when request restrictions block tests
• Organize evidence that a server initiated a request

Guide authorized web cache poisoning assessments, where a cache stores an attacker-influenced response. The skill defines test boundaries, suggests alternative investigation paths, and specifies evidence needed to report a finding or document unsuccessful attempts.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Define the scope of an authorized cache poisoning assessment
• Reconsider investigation paths when cache tests stall
• Organize evidence of poisoned responses reaching other requests