520건 · 관련도순
Exploit Server-Side Request Forgery (SSRF) vulnerabilities on Amazon Web Services (AWS) EC2 instances to access the highly sensitive Instance Metadata Service (IMDS). Circumvent basic protections and extract temporary IAM access keys, escalating privileges comprehensively across the AWS Cloud environment.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Exploit AI assistants equipped with web-browsing capabilities or internal API plugins to perform Server-Side Request Forgery (SSRF). This skill details injecting prompts that force the LLM to request sensitive internal endpoints, such as underlying cloud metadata services or internal networks.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Process the batch of incoming Bridge Classroom feedback. Pull open `classroom-feedback` issues from the PBS repo, cluster them by defect class, verify each against the actual board, and fix at the right altitude — patch a single board, or (when a class recurs) build a gate, sweep the whole corpus, and regenerate/drop collectively. Engine bugs route to the Classroom repo; bridge-judgment calls go to Rick. Nothing leaves the machine without David's OK. Invoke as `/issue` (optionally with an issue number or scenario to restrict the run).
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
SSRF → SSTI zinciri ile RCE — Flask/Jinja2, Thymeleaf, FreeMarker şablonları
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Tests APIs for injection vulnerabilities including SQL injection, NoSQL injection, OS command injection, LDAP injection, and Server-Side Request Forgery (SSRF) through API parameters, headers, and request bodies. The tester crafts malicious payloads targeting different backend technologies and injection contexts to extract data, execute commands, or access internal services. Maps to OWASP API8:2023 Security Misconfiguration and API7:2023 SSRF. Activates for requests involving API injection te...
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
TanStack Start (TanStack Router ベースのフルスタック React フレームワーク、 @tanstack/react-start) の API リファレンス。Next.js とは別フレームワーク。 createServerFn (validator / handler), createMiddleware, server routes, createServerOnlyFn / createIsomorphicFn、SSR / selective SSR / SPA mode / static prerendering / ISR、streaming、hydration、server entry / client entry、 TanStack Query 連携 (setupRouterSsrQueryIntegration)、RC → stable 移行、 hosting (Cloudflare Workers / Netlify / Vercel / Node / Bun / Docker)、 production checklist、authentication / session、Tailwind、SEO、 environment variables。ルーティングは tanstack-router スキルを参照。
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Complete bug bounty workflow — recon (subdomain enumeration, asset discovery, fingerprinting, HackerOne scope, source code audit), pre-hunt learning (disclosed reports, tech stack research, mind maps, threat modeling), vulnerability hunting (IDOR, SSRF, XSS, auth bypass, CSRF, race conditions, SQLi, XXE, file upload, business logic, GraphQL, HTTP smuggling, cache poisoning, OAuth, timing side-channels, OIDC, SSTI, subdomain takeover, cloud misconfig, ATO chains, agentic AI), LLM/AI security testing (chatbot IDOR, prompt injection, indirect injection, ASCII smuggling, exfil channels, RCE via code tools, system prompt extraction, ASI01-ASI10), A-to-B bug chaining (IDOR→auth bypass, SSRF→cloud metadata, XSS→ATO, open redirect→OAuth theft, S3→bundle→secret→OAuth), bypass tables (SSRF IP bypass, open redirect bypass, file upload bypass), language-specific grep (JS prototype pollution, Python pickle, PHP type juggling, Go template.HTML, Ruby YAML.load, Rust unwrap), and reporting (7-Question Gate, 4 validation ...
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Cloud IAM red-team attack chain across AWS, Azure, GCP — focused on EXTERNAL exploitation paths and post-credential-discovery privilege analysis. Covers IAM enumeration (aws iam, az role, gcloud iam), STS/AssumeRole chaining, Azure Managed Identity abuse (via SSRF/leak), GCP service account JSON abuse, IMDSv1/v2 attacks via SSRF, K8s ServiceAccount token privilege analysis once held (token discovery / cluster exposure is owned by hunt-k8s), role-trust-policy confused-deputy, cross-account assume-role enumeration, IAM privilege escalation patterns (24+ AWS, 8+ Azure, 6+ GCP), and AWS Cognito Identity Pool unauthenticated-role attack chain (GetId → GetCredentialsForIdentity → IAM role abuse). Built for the case where recon yields a credential (key, JSON, token) and you need to know what it grants and how to escalate. Use when an AWS key / Azure secret / GCP service account JSON / K8s SA token surfaces from a code repo, JS bundle, APK, breach corpus, or SSRF chain.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Review source code with Strix to trace data flow and authorization checks, then test suspected vulnerabilities in a running environment. Receive proven findings with exploit examples and code locations, while keeping unconfirmed observations clearly identified.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Turn Strix vulnerability findings into focused code fixes, prioritized by severity. Address root causes, rerun security scans and original exploit examples, and report the changes and verification results for each issue.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Integrate GSAP animations into React and Next.js components using useGSAP, element references, and scoped selectors. The skill guides dependency updates, event callbacks, and cleanup when components unmount, while keeping animation code out of server rendering.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Finds papers, preprints, citation links, and openly available full text through 18 scholarly APIs. Selects databases for the task and returns relevant records with search parameters, identifiers, and access dates so the retrieval can be repeated.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Turn past classrooms and chat history into a reusable personal skill for course creation. It examines varied examples, checks recurring patterns and exceptions, and asks for corrections before saving instructions that reflect the user's workflow and quality expectations.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Plan and build a connected series of lessons around learners’ experience and goals. After the user approves the complete lesson list, it creates lessons in order, checks continuity, and organizes them in one folder.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Review source code for MCP, a protocol connecting AI applications to tools. Check authentication, input validation, unsafe execution, and other security risks, then report findings with file and line references and separate manual follow-ups.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Plan and conduct authorized security tests of AWS, Azure, and GCP environments. Check access permissions, credential exposure, cross-account access, and monitoring, then organize findings into a report with severity, business impact, and remediation guidance.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Build site search with Algolia using React InstantSearch patterns for search input, filters, and pagination. The skill also covers Next.js server rendering and strategies for keeping searchable records synchronized as source data changes.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Review a NemoClaw pull request for security risks by examining changed code, configuration, and dependencies. Assess nine categories and report findings with severity, file locations, and recommended fixes, alongside an overall assessment of whether it is safe to merge.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Build TanStack Start pages from JSON specifications. This skill connects URL routes, shared layouts, server-side data loading, page metadata such as titles, and client navigation, including loading, error, and missing-page displays.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Build Next.js applications with App Router, the app directory routing system. Get guidance on server rendering, data fetching, caching, API endpoints, and deployment settings, including loading states and image optimization for responsive page experiences.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Shape broad mathematical interests into precise research questions. Search prior work on definitions and theorems, record traceable sources, map supporting and conflicting evidence, and identify gaps that could lead to testable conjectures.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Integrate GSAP animations into React and Next.js components using useGSAP, element references, and scoped selectors. The skill guides dependency updates, event callbacks, and cleanup when components unmount, while keeping animation code out of server rendering.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Assess API business workflows for flaws that automated scanners can miss. The skill examines skipped steps, simultaneous transactions, authentication tokens, GraphQL, and webhooks, helping testers document weaknesses and their financial or operational impact during authorized assessments.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Create a new ASP.NET Core web app with Blazor. Choose where pages and interactive components run based on application needs, generate the project with appropriate options, configure initial authentication when needed, and verify building and startup.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.