'vulnerabilities' 검색 결과

Guides security testing of Android and iOS apps through file inspection and observation while the app runs. Covers network traffic, stored secrets, external app interfaces, authentication, and backend APIs, with tool examples and a testing checklist.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Inspecting APK or IPA files for endpoints and embedded secrets
• Observing app behavior and traffic with Frida
• Reviewing deep links and externally accessible components

Audit TLS/SSL, the technology that encrypts network connections, across servers and mobile apps. The skill covers outdated protocols, weak encryption, certificate validation failures, known vulnerabilities, and replay risks, helping organize evidence and prioritize fixes.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Auditing server protocols, encryption settings, and certificates
• Reviewing certificate validation in mobile apps
• Assessing TLS 1.3 replay risks and mutual authentication

Turn security findings into candidate code fixes with review results and summaries. Depending on the input, use independent source review or a pipeline with execution checks, then provide diffs for a person to review and apply.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Generating candidate fixes from triaged findings
• Preparing diffs for the highest-priority vulnerabilities
• Independently reviewing proposed security fixes

Adapt a C/C++ vulnerability pipeline to another language, target, or detection method. The workflow gathers requirements, proposes file changes for approval, updates the implementation, and validates it against a test target containing known bugs.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Adapt the pipeline for web application vulnerabilities
• Plan a port for smart contract auditing
• Change detection signals and report criteria

Develop security design improvements from vulnerability reports, incident documents, source code, or scan results. Compare architectural options with before-and-after diagrams, engineering tradeoffs, and migration plans to support a concrete design decision.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Find structural causes shared by several vulnerabilities
• Compare security architecture options and costs
• Explain proposed changes with before-and-after diagrams

Review code for readability, security weaknesses, performance bottlenecks, test quality, and ease of maintenance. Receive findings grouped by importance, with explanations and concrete suggestions that reflect the project's context and constraints.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing code quality before merging changes
• Checking security and sensitive data handling
• Finding slow queries and unnecessary API calls

Submit security scans for AI services, tools, skills, and agents through AI-Infra-Guard, then retrieve progress and results. It also supports jailbreak evaluation, testing whether prompts can bypass a model’s safety restrictions.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Scanning AI services for known vulnerabilities
• Auditing MCP tools and skill source packages
• Checking agents from saved settings or YAML files

Collect Amazon product data from ASINs, unique product identifiers, and compare prices, specifications, reviews, and product images. Produce comparison tables and reports that highlight competitive strengths, weaknesses, and potential market opportunities.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Comparing competing products by ASIN
• Reviewing price ranges for similar products
• Comparing specifications, features, and materials

Run a quick code security review for exposed credentials, injection risks, unsafe page content, vulnerable dependencies, and authentication issues. Receive findings grouped by severity, with file locations and suggested fixes to prioritize remediation.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing sensitive code changes before merging
• Checking for exposed credentials
• Reviewing authentication and injection risks

Routes security work to specialized guides for web and API testing, code review, threat intelligence, and incident response. Helps organize assessments from both attack and defense perspectives, including coordinated testing of detection capabilities.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Planning a web or API security assessment
• Reviewing code for potential vulnerabilities
• Organizing detection rules and incident response

Guide a bug bounty investigation from scope checks and asset discovery to vulnerability testing, impact validation, and report writing. Covers web applications, source code, and AI features, with an emphasis on reproducible evidence of real harm.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Planning an investigation for a new bug bounty target
• Reviewing source code for risky implementation patterns
• Testing web and AI features for security flaws

Find test inputs and filter bypass examples for web security checks, organized by vulnerability type. Includes URL classification patterns, discovery wordlists, and examples of combining findings to demonstrate concrete security impact.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Choosing test inputs for injection vulnerabilities
• Reviewing authentication and MFA bypass patterns
• Classifying URLs and selecting discovery wordlists

Turn validated vulnerabilities into clear bug bounty reports for HackerOne, Bugcrowd, Intigriti, or Immunefi. Platform templates help organize demonstrated impact, reproducible steps, supporting evidence, severity reasoning, and concrete fixes in language reviewers can follow.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Draft a report using a platform-specific template
• Write clear titles and impact summaries
• Organize reproduction steps and supporting evidence

Review EVM and Solana meme coins for hidden minting, blocked sales, adjustable fees, and liquidity withdrawal risks. The skill guides source checks and on-chain verification to identify privileged controls that could enable a rug pull.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing token risks before investing
• Checking Solana mint and freeze authorities
• Verifying liquidity pool lock claims

Investigate XXE, an XML parsing flaw, in APIs and document uploads. The skill guides entry point discovery, external callback checks, and evidence collection to establish whether files or internal services are actually exposed.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Check XML APIs for external entity processing
• Investigate SVG and Office document uploads
• Confirm blind XXE through external callbacks

Investigate cross-site scripting, where untrusted input executes as JavaScript in a web page. Check reflected, stored, and browser-side cases, distinguish escaped output from executable content, and validate reproducible behavior and user impact before reporting.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Checking how search terms and URL parameters appear in pages
• Testing stored content in wikis and profile fields
• Reviewing JavaScript paths that insert input into pages

Assess WebSocket security in chat, notifications, and other live features. The skill covers connection checks, message permissions, tampering, and access to private channels, with validation steps to distinguish actual data exposure or state changes from misleading responses.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Review WebSocket security in chat and notification features
• Check for cross-site access to another test account's data
• Test permissions for individual messages and private channels

Inspect TLS certificates, DNS records, and email authentication settings, then separate configuration advice from demonstrable vulnerabilities. The skill guides evidence collection and impact assessment for subdomain takeover, client certificate bypass, internal hostname exposure, and email spoofing.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Review TLS certificates and encryption settings
• Assess DNS records for subdomain takeover
• Validate email spoofing evidence

Investigate subdomain takeover risks caused by DNS records pointing to abandoned services. The skill covers discovery, provider error checks, resource claimability, and evidence collection, then examines potential effects on login flows, shared cookies, and trusted content.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Finding DNS records that point to abandoned services
• Manually verifying automated takeover scan results
• Assessing effects on login flows and shared cookies

Investigate SSRF, where supplied URLs cause unintended server requests, in previews, imports, proxies, and PDF generation. Confirm outbound connections, identify the responsible input, and establish whether internal services or sensitive responses are accessible.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing link previews and URL import features
• Assessing network access from PDF and screenshot generators
• Checking access to cloud metadata and internal APIs

Investigate SQL injection in search forms, filters, and APIs by choosing tests based on actual responses. The skill covers visible query results, response differences, and timing evidence, helping produce reproducible reports with concrete data impact.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Inspect search and filter inputs for SQL injection
• Choose tests based on endpoint responses
• Review ORM query construction risks

Assess on-premises SharePoint Server for exposed information, legacy login paths, and conditions associated with known vulnerabilities. It guides evidence collection and helps distinguish meaningful security findings from misleading error messages.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Assess anonymously accessible SharePoint endpoints
• Review legacy login paths and authentication controls
• Check conditions associated with ToolShell

Assess session management weaknesses, including sessions that survive logout or password changes, fixed session IDs, and refresh-token reuse. The skill uses two real sessions, response-body comparisons, and control checks to distinguish continued account access from misleading successful responses.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Check whether old sessions survive logout
• Verify session invalidation after a password change
• Test refresh-token rotation and reuse detection

Test for race conditions, where simultaneous requests disrupt expected processing order. Investigate duplicate redemptions, balance or vote changes, and authentication or request-limit failures, then verify actual effects and record reproducibility.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Check coupons and gift cards for duplicate redemption
• Test balance updates and voting limits under concurrent requests
• Investigate timing flaws in authentication and account creation