Localhost-only, stdlib evidence verifier: scan, JWT matrix, race controls.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
실행 점수 미검증
설치 방법 보기설치하기 전에 에이전트에게 전달되는 지시 내용을 확인할 수 있습니다.
Local fixture verification only. CLI rejects non-loopback target/allow-host/state URL. TLS strict unless --insecure; redirects never followed; request, timeout, worker, race, response bounds enforced. Atomic redacted evidence: schema 2.0, mode 0600, states tested|skipped|error|candidate|verified. No severity before verified impact.
python3 scripts/verifier.py scan http://127.0.0.1:8080 --allow-host 127.0.0.1:8080 --modules headers,cors,methods,admin,exposed,xss,sqli,ssrf,ssti,traversal,redirect,https,info --budget 50 --test-budget 4 --output scan.json
python3 scripts/verifier.py jwt http://127.0.0.1:8080/me --allow-host 127.0.0.1 --valid-token "$TOKEN" --budget 8 --output jwt.json
python3 scripts/verifier.py race http://127.0.0.1:8080/action --allow-host 127.0.0.1:8080 --n 8 --workers 4 --serial 2 --state-url http://127.0.0.1:8080/state --state-pointer /counter --expected-delta 8 --max-delta 8 --budget 20 --output race.json
python3 -m unittest discover -s tests -v
Scan berjalan sekuensial dengan ModuleBudget atomik per modul. exposed memakai baseline impossible-path plus signature Git/ZIP/SQLite/env. Kontrol kelas-spesifik tetap maksimal candidate; hanya artifact signature kuat dapat verified. Methods hanya observasi. JWT alg:none mempertahankan payload token valid; token malformed tidak diprobe. Race menghormati --serial; verified hanya bila --state-pointer plus --expected-delta/--max-delta terpenuhi. Failures are atomic structured evidence without traceback-only output.
Limits: no DNS-name localhost aliases, DNS pinning, redirect following, browser XSS execution, SSRF callback, timing SQLi, destructive payloads, auth workflow, production targets. Offline references/ remain research material only. Provenance: PROVENANCE.md, NOTICE, MANIFEST.sha256.
아직 리뷰가 없습니다. 사용해 본 소감을 남겨 주세요.
로그인 없이 쓸 수 있습니다. 사용 후기, 질문, 작동하지 않은 환경 등을 편하게 남겨 주세요.
아직 댓글이 없습니다. 첫 댓글을 남겨 보세요.
Provide comprehensive techniques for testing REST, SOAP, and GraphQL APIs during bug bounty hunting and penetration testing engagements. Covers vulnerability discovery, authentication bypass, IDOR exploitation, and API-specific attack vectors.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Web2 attack chain plugin — apply Web2 trust boundaries and composition rules on top of attack-chaining-core for authorized testing of web apps, APIs, identity, cloud, and internal services.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Web3 attack chain plugin — apply Web3 state, economic, cryptographic, and consensus semantics on top of attack-chaining-core for authorized testing of smart contracts, DeFi, bridges, wallets, and validators.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Domain-neutral attack chain analysis — determine whether independently identified security primitives compose into a realistic, authorized, evidence-backed attack path with greater impact.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Build an evidence-backed map of externally and internally reachable attack surfaces, trust boundaries, privileged transitions, security assets, and high-value audit targets before vulnerability hunting.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Use at the START of any bug bounty hunting session, when switching targets, or when feeling lost about what to do next. Master orchestrator that combines the 5-phase non-linear hunting workflow with the critical thinking framework (developer psychology, anomaly detection, What-If experiments). Routes to all other skills based on current hunting phase. Also use when asking "what should I do next" or "where am I in the process."
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.