「fetih」の検索結果

Exploits JWT algorithm confusion vulnerabilities where the server's token verification library accepts the algorithm specified in the JWT header rather than enforcing a fixed algorithm. The tester manipulates the alg header to switch from RS256 to HS256 (using the RSA public key as the HMAC secret), sets alg to none to bypass signature verification, or exploits kid/jku/x5u header injection to supply attacker-controlled keys. Activates for requests involving JWT algorithm confusion, alg none a...

日本語の概要は準備中です。原文の説明を表示しています。

Tests APIs for excessive data exposure where endpoints return more data than the client application needs, relying on the frontend to filter sensitive fields. The tester intercepts API responses and analyzes them for leaked PII, internal identifiers, debug information, or sensitive business data that the UI does not display but the API transmits. This maps to OWASP API3:2023 Broken Object Property Level Authorization. Activates for requests involving API data leakage testing, excessive data e...

日本語の概要は準備中です。原文の説明を表示しています。

Tests APIs for Broken Function Level Authorization (BFLA) vulnerabilities where regular users can invoke administrative functions or access privileged API endpoints by directly calling them. The tester identifies admin and privileged endpoints, then attempts to access them with regular user credentials by manipulating HTTP methods, URL paths, and request parameters. Maps to OWASP API5:2023 Broken Function Level Authorization. Activates for requests involving BFLA testing, admin endpoint bypas...

日本語の概要は準備中です。原文の説明を表示しています。

Tests APIs for injection vulnerabilities including SQL injection, NoSQL injection, OS command injection, LDAP injection, and Server-Side Request Forgery (SSRF) through API parameters, headers, and request bodies. The tester crafts malicious payloads targeting different backend technologies and injection contexts to extract data, execute commands, or access internal services. Maps to OWASP API8:2023 Security Misconfiguration and API7:2023 SSRF. Activates for requests involving API injection te...

日本語の概要は準備中です。原文の説明を表示しています。

tespit etme
and prevent API enumeration attacks including BOLA and IDOR exploitation by monitoring sequential identifier access patterns and authorization failures.

日本語の概要は準備中です。原文の説明を表示しています。

Discover and inventory shadow API endpoints that operate outside documented specifications using traffic analysis, code scanning, and API discovery platforms.

日本語の概要は準備中です。原文の説明を表示しています。

Plan mode: write markdown plan to .fetih/plans/, no exec.

日本語の概要は準備中です。原文の説明を表示しています。

Operate the Teams meeting summary pipeline via FETIH CLI — summarize meetings, inspect pipeline status, replay jobs, manage Microsoft Graph subscriptions.

日本語の概要は準備中です。原文の説明を表示しています。

Author in-repo SKILL.md: frontmatter, validator, structure.

日本語の概要は準備中です。原文の説明を表示しています。

Aşamalı CTF ipucu sistemi — takılan kullanıcıya seviyeli ipucu verir. Level 1 (nudge), Level 2 (direction), Level 3 (solution). Her challenge için hint seviyesi ~/.fetih/ctf_hints.json'da takip edilir.

日本語の概要は準備中です。原文の説明を表示しています。

FETIH Siber Güvenlik Ana Orkestratörü — 912+ skill ile tüm siber güvenlik alanlarını kapsar. Tehdit avı, zararlı yazılım analizi, dijital adli bilişim, olay müdahalesi, bulut güvenliği, ağ güvenliği, web uygulama güvenliği, API güvenliği, sızma testi, red team, SOC operasyonları, OT/ICS güvenliği ve daha 25+ alt kategori. ljagiello/ctf-skills ve Eyadkelleh/awesome-claude-skills-security entegre edildi.

日本語の概要は準備中です。原文の説明を表示しています。

Pitfalls, examples, and edge cases for FETIH Kanban workers. The lifecycle itself is auto-injected into every worker's system prompt as KANBAN_GUIDANCE (from agent/prompt_builder.py); this skill is what you load when you want deeper detail on specific scenarios.

日本語の概要は準備中です。原文の説明を表示しています。

Dağıt: Aqua Security's Trivy scanner to tespit etme
vulnerabilities, misconfigurations, secrets, and license issues in container images across CI/CD pipelines and registries.

日本語の概要は準備中です。原文の説明を表示しています。

Dağıt: and manage network honeypots using OpenCanary, T-Pot, or Cowrie to tespit etme
unauthorized access, lateral movement, and attacker reconnaissance.

日本語の概要は準備中です。原文の説明を表示しています。

Dağıt: and monitor Canary Tokens via the Thinkst Canary API for deception-based breach Tespit using web bug tokens, DNS tokens, document tokens, and AWS key tokens.

日本語の概要は準備中です。原文の説明を表示しています。

Zero-Knowledge Proofs (ZKPs) allow a prover to demonstrate Bilgi: a secret (such as a password or private key) without revealing the secret itself. bu skill implements the Schnorr identificati

日本語の概要は準備中です。原文の説明を表示しています。

Implementing Microsoft Defender for Cloud to enable cloud security posture management, workload protection across VMs, containers, databases, and storage, configure security recommendations, and Kur: adaptive security controls with automated remediation.

日本語の概要は準備中です。原文の説明を表示しています。

Tests APIs for mass assignment (auto-binding) vulnerabilities where clients can modify object properties they should not have Erişim: by including additional parameters in API requests. The tester identifies writable endpoints, adds undocumented fields to request bodies (role, isAdmin, price, balance), and checks if the server binds these to the data model without filtering. Part of OWASP API3:2023 Broken Object Property Level Authorization. Activates for requests involving mass assignment ...

日本語の概要は準備中です。原文の説明を表示しています。

tespit etme
and Araştır: Azure service principal abuse including privilege escalation, credential compromise, admin consent bypass, and unauthorized enumeration in Microsoft Entra ID environments.

日本語の概要は準備中です。原文の説明を表示しています。

bu skill teaches security teams how to Dağıt: and operationalize Amazon GuardDuty for continuous threat Tespit across AWS accounts and workloads. It covers enabling protection plans for S3, EKS, EC2 runtime monitoring, and Lambda, interpreting Bul:ing severity levels, and building automated response workflows using EventBridge and Lambda.

日本語の概要は準備中です。原文の説明を表示しています。

Execute and Şunu test et: JWT none algorithm attack to bypass signature verification by manipulating the alg header field in JSON Web Tokens.

日本語の概要は準備中です。原文の説明を表示しています。

Uses Microsoft RESTler to perform stateful REST API fuzzing by automatically generating and executing test sequences that exercise API endpoints, discover producer-consumer dependencies between requests, and Bul: security and reliability bugs. The tester compiles an OpenAPI specification into a RESTler fuzzing grammar, configures authentication, runs test/fuzz-lean/fuzz modes, and analyzes results for 500 errors, authentication bypasses, resource leaks, and payload injection vulnerabilities. ...

日本語の概要は準備中です。原文の説明を表示しています。

Performs GraphQL introspection attacks to Şunu çıkar: full API schema including types, queries, mutations, subscriptions, and field definitions from GraphQL endpoints. The tester uses introspection queries to map the attack surface, identifies sensitive fields and mutations, tests for query depth and complexity limits, and exploits GraphQL-specific vulnerabilities including batching attacks, alias-based brute force, and nested query DoS. Activates for requests involving GraphQL security testi...

日本語の概要は準備中です。原文の説明を表示しています。

Tests REST and GraphQL APIs for Broken Object Level Authorization (BOLA/IDOR) vulnerabilities where an authenticated user can access or modify resources belonging to other users by manipulating object identifiers in API requests. The tester intercepts API calls, identifies object ID parameters (numeric IDs, UUIDs, slugs), and systematically replaces them with IDs belonging to other users to Belirle: if the server enforces per-object authorization. This is OWASP API Security Top 10 2023 risk ...

日本語の概要は準備中です。原文の説明を表示しています。