'dns' 검색 결과

Detect typosquatting, homograph phishing, and brand impersonation domains using dnstwist to generate domain permutations and identify registered lookalike domains targeting your organization.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Detect DNS-based data exfiltration by analyzing Zeek dns.log for high-entropy subdomains and anomalous query patterns

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Detect typosquatting, homograph phishing, and brand impersonation domains using dnstwist to generate domain permutations and identify registered lookalike domains targeting your organization.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Audit page loading and choose resource hints, browser instructions for fetching files or preparing connections early. Use measurements to identify delays, then suggest preload, preconnect, prefetch, or dns-prefetch for critical assets, external services, and likely next-page resources.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing early loading of key images and fonts
• Preparing connections to external services
• Prefetching resources for likely next pages

Review slow page loads and choose resource hints, browser instructions that start loading or connecting earlier. Use measurements to identify bottlenecks, then recommend preload, preconnect, prefetch, or dns-prefetch for important assets and likely next-page resources.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing slow loading of prominent images and fonts
• Preparing connections to external services
• Prefetching resources for likely next-page visits

Review HTML to find important fonts, images, and scripts discovered late during loading. Suggest resource hints, instructions that start fetching or connecting earlier, and check the final markup delivered to the browser.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing preload hints for important fonts and images
• Checking early connections to third-party domains
• Auditing resource hints in rendered HTML

Set up encrypted connections between devices with Tailscale and control access by user or device. The skill covers network routing, device name resolution, and self-hosting the coordination server with Headscale.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Replacing a traditional VPN with Tailscale
• Restricting server access by team or device
• Connecting remotely to internal networks

Deploy Suricata to detect suspicious network traffic or block it inline. Configure protocol inspection, detection rules, and structured EVE JSON logs, then connect logs to analysis platforms and check packet drops and alert quality during operation.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Deploying network intrusion monitoring
• Configuring inline blocking of malicious traffic
• Adding custom detection rules and reducing noisy alerts

Investigate domains, IP addresses, and certificates linked to suspected attackers using public sources. This skill guides passive research and relationship mapping to support phishing investigations, external exposure reviews, and threat intelligence reports.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Investigating infrastructure linked to a phishing campaign
• Adding public evidence to threat actor profiles
• Reviewing an organization's external exposure

Find a domain for a Convex app by exploring suitable names and checking availability and annual prices. After explicit approval, register the chosen domain, connect it to the deployment, and update authentication settings.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Finding domain names that fit an app idea
• Comparing available domains and annual prices
• Buying and connecting an approved domain

Plan and configure command and control (C2) systems for red team exercises. Covers major frameworks, communication methods, relay servers, certificate management, and the network or endpoint signals defenders use to detect these systems.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Compare C2 frameworks for a red team exercise
• Plan communication methods and relay infrastructure
• Review C2 detection signals from a defender's perspective

Map a website’s exposed services by collecting subdomains, active hosts, and current or historical URLs. Inspect JavaScript and exposed files, prioritize areas for security testing, and monitor new subdomains and GitHub commits.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Mapping subdomains and active hosts
• Prioritizing API and authentication endpoints
• Inspecting JavaScript and exposed files

Discover subdomains, live hosts, and URLs to build a prioritized map for web security testing. Includes JavaScript analysis, API specification discovery, and monitoring for new subdomains, JavaScript changes, and GitHub commits.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Building an inventory of web assets
• Prioritizing API and authentication endpoints
• Finding endpoints and secrets in JavaScript

Investigate unsafe deserialization, where restoring objects from untrusted data can trigger code execution. The skill covers Java, PHP, Python, .NET, Ruby, and related patterns, with detection clues and callback-based checks for confirming execution.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Finding serialized data in cookies and request bodies
• Reviewing unsafe object restoration in source code
• Testing deserialization paths with language-specific tools

Org-grade attack-surface mapping: given a company's legal identity, discover its ENTIRE owned internet footprint — corporate family -> owned domains -> owned netblocks/ASN -> live assets — with attribution discipline, not just DNS breadth. The org-first attribution pyramid (legal entity -> LEI/registration -> corporate family -> owned domains -> owned netblocks/ASN -> live assets). Corporate-identity resolution via the GLEIF LEI API (legal name -> LEI, exact-LEI direct-children expansion, downward-only depth-capped BFS, NEVER a name re-resolution), SEC-EDGAR full-text search + Exhibit-21 subsidiary entity names, OpenCorporates entity corroboration, Wikidata SPARQL corporate graph (P856/P355/P749/P1830). Domain attribution via reverse-WHOIS (WhoisXML preview-then-purchase quota guard, SecurityTrails associated-domains — both paid), crt.sh O= certificate-transparency organization pivot (keyless), infrastructure correlation (shared NS/MX/SaaS-TXT, netblock membership, reverse-DNS PTR), and the independent-evidence combiner (1-prod(1-w_i), rule of three, OwnerTier NONE/WEAK/MODERATE/STRONG/CONFIRMED) — discover-only `related:` candidates are NEVER auto-scanned. Netblock/ASN attribution via org-first RIR queries (ARIN Whois-RWS org-handle search, RIPE DB organisation + inverse-org search) that recover 'dark netblocks' with no DNS link to the seed, ASN discovery (RIPEstat + BGPView union), the HYPERSCALER-SCOPE GUARD (never attribute a whole AWS/GCP/Azure/Cloudflare announced range to a tenant — keep only the seed-containing block, tag shared_hosting_cdn), and org-identity-seeded internet-scan-index queries (Shodan/Censys/ZoomEye/FOFA/BinaryEdge org: filters + an always-on keyless crt.sh fallback). Promote-to-scan triage ranks forgotten discover-only netblocks by remote-access exposure (gateway-vendor/KEV/control-plane/datastore port scoring) into an operator queue. Attribution confidence rubric + anti-patterns (namesake grafting via GLEIF name re-resolution, single-signal ownership, hyperscaler over-attribution, privacy-WHOIS pivot poisoning, RIR org-name collisions). Passive/keyless-first OSINT only — every paid-key dependency is enrichment on top of a keyless core, never a hard requirement. Use when mapping an organization's full corporate-family internet footprint, resolving a legal entity to its LEI/subsidiaries, discovering domains/netblocks/ASNs an org owns beyond its one seed domain, auditing M&A/shadow-IT sprawl, or scoping an engagement that starts from a company NAME rather than a domain.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

DNS rebinding attack playbook. Use when testing applications that trust DNS resolution for origin checks, interact with internal services from browser context, or when SSRF is not possible server-side but the target has client-side fetch/XHR to attacker-controlled domains.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Read Cloudflare zones and DNS records: list zones, list DNS records for a zone. Trigger phrases: cloudflare, dns records, cloudflare zone.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Plan and execute a launch runbook covering pre-launch verification, go-live procedures, DNS cutover, post-launch monitoring, and rollback procedures. Use this skill whenever the user is preparing to launch a website or product, planning a DNS cutover, building a go-live checklist, or executing a launch day. Triggers on launch runbook, go-live, launch day, DNS cutover, deploy to production, site launch, product launch, cutover plan, launch checklist, deployment procedure. Also triggers when a launch is approaching and the team needs structured coordination, even if 'runbook' is not explicitly stated.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Sub-skill: Implement DNS-AID records so agents discover endpoints through DNS. Use SVCB/HTTPS records under _agents namespace with alpn and connection parameters.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Deep OSINT reconnaissance using the MITRE ATT&CK Reconnaissance framework. Email harvesting with SMTP verification, subdomain takeover detection, certificate transparency mining, Shodan/Censys intelligence, Wayback Machine historical analysis, social media profiling, cloud storage enumeration, document metadata extraction, DNS history, credential leak checks, and passive infrastructure mapping. Uses theHarvester, amass, dnsrecon, fierce, dnstwist, dmitry, whatweb, wafw00f, exiftool, metagoofil, smtp-user-enum, swaks, waybackurls, subfinder, and crt.sh. Pure reconnaissance — no active exploitation. Produces: confidence-scored findings, infrastructure diagram, employee roster, email pattern confirmation, subdomain takeover candidates. Chains into /pentester for active testing.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

DNS rebinding attack playbook. Use when testing applications that trust DNS resolution for origin checks, interact with internal services from browser context, or when SSRF is not possible server-side but the target has client-side fetch/XHR to attacker-controlled domains.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Set up DNS records, SSL/TLS certificates, subdomains, SPF/DKIM/DMARC email authentication, and health-check failover routing for Route53, Cloudflare, or GCP Cloud DNS — with optional Terraform output

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Read Cloudflare zones and DNS records: list zones, list DNS records for a zone. Trigger phrases: cloudflare, dns records, cloudflare zone.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Control AdGuard Home DNS filtering via HTTP API. Use when managing blocklists/allowlists, checking domain filtering status, toggling protection, or clearing DNS cache. Supports blocking/allowing domains, viewing statistics, and protecting/disabling DNS filtering.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.