Sachin Sharma

Investigate SQL injection in search forms, filters, and APIs by choosing tests based on actual responses. The skill covers visible query results, response differences, and timing evidence, helping produce reproducible reports with concrete data impact.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Inspect search and filter inputs for SQL injection
• Choose tests based on endpoint responses
• Review ORM query construction risks

Map a single-page application's backend API from its public JavaScript files, including routes loaded later. Compare unauthenticated responses with a protected endpoint to investigate missing authentication and access control using minimal evidence.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Discovering backend API routes in public JavaScript
• Checking API authentication behind an SSO login
• Investigating routes in lazily loaded JavaScript files

Investigate exposed source maps, configuration files, Git history, and API specifications on websites. The skill guides source reconstruction and artifact inspection to identify leaked secrets, internal routes, and build details during the initial stages of security research.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Checking source maps for exposed source code
• Inspecting public configuration files and Git history
• Mapping API routes from Swagger and OpenAPI specifications

Assess on-premises SharePoint Server for exposed information, legacy login paths, and conditions associated with known vulnerabilities. It guides evidence collection and helps distinguish meaningful security findings from misleading error messages.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Assess anonymously accessible SharePoint endpoints
• Review legacy login paths and authentication controls
• Check conditions associated with ToolShell

Inventory old and undocumented API versions, then compare their authentication, request limits, input validation, and exposed fields with current versions. Uses API specifications and archived records to identify overlooked endpoints with weaker security controls.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Finding API versions left reachable after deprecation
• Comparing old and current OpenAPI or Swagger specifications
• Checking security differences between API versions

Assess session management weaknesses, including sessions that survive logout or password changes, fixed session IDs, and refresh-token reuse. The skill uses two real sessions, response-body comparisons, and control checks to distinguish continued account access from misleading successful responses.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Check whether old sessions survive logout
• Verify session invalidation after a password change
• Test refresh-token rotation and reuse detection

Review SAML single sign-on, where services exchange signed identity information, for signature and identity handling flaws. The skill guides testing and validation to determine whether altered assertions can change accounts, roles, or access decisions.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Review SAML single sign-on flows
• Test signature validation and XML interpretation
• Check whether identity or role changes affect access

Assess GraphQL APIs in financial services for unauthorized transfers, rounding errors, duplicate transactions, and exposed personal data. The skill guides checks of account permissions and ledger changes to distinguish actual financial impact from misleading success responses.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing transfer and withdrawal permissions
• Checking rounding and duplicate transaction handling
• Inspecting access to identity verification data

Examine password reset and account recovery flows for account disclosure, exposed or reusable reset tokens, and missing request limits. Compare responses and verify token behavior to document specific authentication weaknesses.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Check whether reset responses reveal registered accounts
• Investigate reset token exposure and reuse
• Review reset request limits

Assess gRPC services for exposed internal methods, missing access controls, identity spoofing through proxies, and unencrypted traffic. The skill guides service discovery and validates findings using response status codes, external reachability, and demonstrated effects on private data or system state.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Inventory exposed gRPC services and methods
• Check authentication and permissions on internal APIs
• Compare identity handling at proxies and backends

Test how applications trust Host and forwarding headers to identify poisoned password reset links, shared cache contamination, and unintended internal requests. The skill provides validation criteria to distinguish reflected values from demonstrated security impact.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Checking password reset email links
• Validating shared cache poisoning
• Testing proxy routing and blocked paths

Test whether user input becomes HTML markup in pages or notification emails instead of appearing as plain text. Use distinctive test markers to document reflected or stored injection, assess visible effects, and distinguish HTML injection from JavaScript execution.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Check HTML handling in search results
• Inspect stored profile fields and comments
• Review HTML rendering in notification emails

Assess Kubernetes and Docker security across exposed APIs, access permissions, service account tokens, and container boundaries. Use actual data reads or command output to establish impact and distinguish information exposure from broader compromise.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing exposed Kubernetes APIs and kubelet ports
• Checking RBAC permissions and service account tokens
• Assessing etcd and Dashboard data exposure

Assess Laravel applications for exposed secrets, accessible dashboards, and authentication or permission flaws. The skill guides checks of debug settings, signed URLs, cookies, and model updates, with validation criteria for understanding the impact of findings.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing Laravel debug settings and exposed configuration files
• Checking access controls on Telescope and Horizon dashboards
• Testing signed URLs and unintended profile field updates

Investigate file inclusion and path traversal flaws that let applications access unintended files. The skill guides checks for sensitive data exposure and possible code execution, using content evidence or repeatable indirect signals to avoid false positives.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Review download and template file paths
• Check whether file reads expose secrets
• Validate file access when content is not displayed

Test chatbots and AI agents for injected instructions, data leaks, and unauthorized access across accounts. It emphasizes reproducible evidence, verified external requests, and real data access rather than trusting the model's claims.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Test document-based prompt injection
• Verify data leaks through tools or rendered images
• Check data isolation between accounts

Review access control, authentication flows, and configuration weaknesses across a service. The skill covers invitations, lingering sessions, token permissions, SAML sign-in, and internal APIs, with guidance for comparing response bodies and establishing concrete, reproducible impact.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Check identity verification in invitation flows
• Verify access ends after organization membership removal
• Test enforcement of API token permissions

Investigate Next.js security issues across Server Actions, middleware, image optimization, and cached pages. Provides testing workflows for authentication bypass and data exposure, with checks to distinguish actual vulnerabilities from normal responses.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Checking authentication in Server Actions and middleware
• Testing image optimization for unintended server requests
• Inspecting page data for sensitive information

Inspect NTLM authentication responses from public IIS, SharePoint, and Exchange services to identify exposed internal domains, server names, and timestamps. Assess the disclosure in context and prepare reproducible evidence without completing authentication.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Checking public services that advertise NTLM authentication
• Extracting internal domains and server names from responses
• Assessing the impact of exposed Active Directory structure

Test for race conditions, where simultaneous requests disrupt expected processing order. Investigate duplicate redemptions, balance or vote changes, and authentication or request-limit failures, then verify actual effects and record reproducibility.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Check coupons and gift cards for duplicate redemption
• Test balance updates and voting limits under concurrent requests
• Investigate timing flaws in authentication and account creation

Investigate cloud configuration weaknesses across AWS, GCP, and Azure, including public storage, exposed services, and leaked credentials. Find candidates in public information and JavaScript, then verify data access and permissions to establish practical impact.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Checking public access to S3, GCS, and Azure Blob storage
• Reviewing exposed serverless and managed services
• Assessing CloudWatch RUM guest role permissions

Review build and deployment pipelines for unsafe workflows, exposed credentials, and configuration flaws across GitHub Actions, Jenkins, GitLab CI, and Terraform state files. Use concrete evidence and false-positive checks to distinguish exploitable issues from suspicious settings.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Review GitHub Actions workflows for unsafe execution paths
• Investigate Jenkins exposure and affected versions
• Check logs, artifacts, and container images for leaked secrets

Test CDN-backed websites for cache poisoning and Web Cache Deception, where private pages are mistakenly cached as public content. The skill guides cache behavior checks, input testing, and independent-client verification to establish reproducible impact.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing cache behavior on CDN-backed websites
• Checking whether private pages enter public caches
• Verifying cached responses influenced by headers

Review checkout, discounts, subscriptions, and verification flows for business logic flaws. The skill helps connect price manipulation, repeated credit redemption, skipped checks, and forged payment notifications to measurable financial loss, unauthorized access, or privacy impact.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Review checkout prices and currency handling
• Check coupons and credits for repeated redemption
• Inspect email and phone verification flows