测试与安全技能

Assess externally exposed enterprise SSL VPN gateways by identifying products, checking known vulnerabilities, and reviewing authentication backends and SAML settings. The skill provides vendor-specific checks and a staged workflow that starts with less disruptive identification before deeper testing.

中文简介正在准备中。当前显示英语简介。

• Identify products behind exposed SSL VPN portals
• Triage known vulnerabilities by VPN vendor
• Review SAML settings on remote-access gateways

Test APIs and forms with unexpected input to uncover error responses that expose internal details. The skill checks response bodies for stack traces, server paths, and library information, preserving specific evidence rather than treating every server error as a vulnerability.

中文简介正在准备中。当前显示英语简介。

• Checking JSON API error handling
• Testing form and query parameter boundaries
• Identifying internal details in error responses

Assess Kubernetes and Docker security across exposed APIs, access permissions, service account tokens, and container boundaries. Use actual data reads or command output to establish impact and distinguish information exposure from broader compromise.

中文简介正在准备中。当前显示英语简介。

• Reviewing exposed Kubernetes APIs and kubelet ports
• Checking RBAC permissions and service account tokens
• Assessing etcd and Dashboard data exposure

Investigate CSRF, where a page causes unwanted actions through a signed-in user's session. The skill covers tokens, cookie settings, JSON APIs, and account linking, with guidance for browser-based demonstrations and assessing account or financial impact.

中文简介正在准备中。当前显示英语简介。

• Review CSRF protection for email changes and payments
• Check whether JSON APIs accept cross-origin form submissions
• Inspect external account linking for unwanted associations

Organize a bug bounty investigation from reconnaissance through reporting. The skill helps choose a focused objective, identify the current phase, select relevant techniques and tools, and distinguish reproducible security impact from misleading test results.

中文简介正在准备中。当前显示英语简介。

• Setting objectives at the start of an investigation
• Choosing the next step when testing stalls
• Replanning after switching targets

Assess login and verification code protections, identify response differences that reveal registered accounts, and distinguish visible blocks from silent throttling. The skill guides evidence gathering to verify weaknesses and assess their practical impact.

中文简介正在准备中。当前显示英语简介。

• Review login attempt limits
• Assess OTP and password reset protections
• Check whether responses reveal registered accounts

Investigate GraphQL APIs for unauthorized data access, unsafe updates, and permission inconsistencies with REST APIs. The skill covers schema discovery, checks across users and organizations, and validation steps that turn suspected weaknesses into reproducible findings with concrete impact.

中文简介正在准备中。当前显示英语简介。

• Map GraphQL schemas and sensitive operations
• Check access boundaries between users and organizations
• Compare permission changes across REST and GraphQL

Investigate clickjacking, where a hidden page tricks users into unintended clicks. Check protective headers, then verify in a real browser whether the embedded page retains authentication and allows sensitive actions.

中文简介正在准备中。当前显示英语简介。

• Reviewing payment and account settings pages
• Testing OAuth authorization screens
• Checking pages with missing frame protection

Test CDN-backed websites for cache poisoning and Web Cache Deception, where private pages are mistakenly cached as public content. The skill guides cache behavior checks, input testing, and independent-client verification to establish reproducible impact.

中文简介正在准备中。当前显示英语简介。

• Reviewing cache behavior on CDN-backed websites
• Checking whether private pages enter public caches
• Verifying cached responses influenced by headers

Investigate unsafe deserialization, where restoring objects from untrusted data can trigger code execution. The skill covers Java, PHP, Python, .NET, Ruby, and related patterns, with detection clues and callback-based checks for confirming execution.

中文简介正在准备中。当前显示英语简介。

• Finding serialized data in cookies and request bodies
• Reviewing unsafe object restoration in source code
• Testing deserialization paths with language-specific tools

Test whether user input becomes HTML markup in pages or notification emails instead of appearing as plain text. Use distinctive test markers to document reflected or stored injection, assess visible effects, and distinguish HTML injection from JavaScript execution.

中文简介正在准备中。当前显示英语简介。

• Check HTML handling in search results
• Inspect stored profile fields and comments
• Review HTML rendering in notification emails

Inspect Android apps for embedded credentials, internal API addresses, and components exposed to other apps. The skill guides APK acquisition, code inspection, and runtime traffic analysis to support a mobile security assessment.

中文简介正在准备中。当前显示英语简介。

• Inventory Android apps included in a security assessment
• Check APKs for embedded credentials and internal API addresses
• Review components that other apps can invoke

Test chatbots and AI agents for injected instructions, data leaks, and unauthorized access across accounts. It emphasizes reproducible evidence, verified external requests, and real data access rather than trusting the model's claims.

中文简介正在准备中。当前显示英语简介。

• Test document-based prompt injection
• Verify data leaks through tools or rendered images
• Check data isolation between accounts

Assess Laravel applications for exposed secrets, accessible dashboards, and authentication or permission flaws. The skill guides checks of debug settings, signed URLs, cookies, and model updates, with validation criteria for understanding the impact of findings.

中文简介正在准备中。当前显示英语简介。

• Reviewing Laravel debug settings and exposed configuration files
• Checking access controls on Telescope and Horizon dashboards
• Testing signed URLs and unintended profile field updates

Test how applications trust Host and forwarding headers to identify poisoned password reset links, shared cache contamination, and unintended internal requests. The skill provides validation criteria to distinguish reflected values from demonstrated security impact.

中文简介正在准备中。当前显示英语简介。

• Checking password reset email links
• Validating shared cache poisoning
• Testing proxy routing and blocked paths

Assess GraphQL APIs in financial services for unauthorized transfers, rounding errors, duplicate transactions, and exposed personal data. The skill guides checks of account permissions and ledger changes to distinguish actual financial impact from misleading success responses.

中文简介正在准备中。当前显示英语简介。

• Reviewing transfer and withdrawal permissions
• Checking rounding and duplicate transaction handling
• Inspecting access to identity verification data

Test whether an application accepts forged JWTs, signed tokens that carry identity and role information. The skill covers signature bypasses, algorithm confusion, and untrusted keys, then guides verification of access to another user's data or protected functions.

中文简介正在准备中。当前显示英语简介。

• Reviewing JWT signature verification
• Testing algorithm confusion and key handling
• Checking weak HMAC signing secrets

Investigate IDOR, an access control flaw that exposes other users' resources through changed IDs. The skill guides REST API and GraphQL testing, checks boundaries between organizations, and helps document reproducible data exposure or unauthorized changes.

中文简介正在准备中。当前显示英语简介。

• Check access controls between two user accounts
• Test data isolation between organizations
• Review GraphQL permissions for individual resources

Review build and deployment pipelines for unsafe workflows, exposed credentials, and configuration flaws across GitHub Actions, Jenkins, GitLab CI, and Terraform state files. Use concrete evidence and false-positive checks to distinguish exploitable issues from suspicious settings.

中文简介正在准备中。当前显示英语简介。

• Review GitHub Actions workflows for unsafe execution paths
• Investigate Jenkins exposure and affected versions
• Check logs, artifacts, and container images for leaked secrets

Assess classic ASP.NET applications for security weaknesses in ViewState, the data used to preserve page state, exposed logs, error details, and service endpoints. Organize evidence and separate observed weaknesses from demonstrated impact when preparing findings.

中文简介正在准备中。当前显示英语简介。

• Review classic ASP.NET Webforms security
• Check exposure of trace and error logs
• Inspect WCF service metadata access

Investigate HTTP request smuggling, where a proxy and server disagree on request boundaries. The skill guides checks for different server setups, HTTP/2 conversion issues, and evidence that the mismatch affects another client's requests.

中文简介正在准备中。当前显示英语简介。

• Plan checks for CDN and origin server setups
• Investigate HTTP/2 to HTTP/1.1 conversion issues
• Review evidence of cache poisoning or authentication bypass

Guide bug bounty work from asset discovery to validation and reporting, while resolving local locations of security tools, wordlists, and cloned projects. It covers web and AI security testing with an emphasis on demonstrated impact.

中文简介正在准备中。当前显示英语简介。

• Locate installed security tools and wordlists
• Plan reconnaissance within a program's scope
• Investigate related weaknesses and their combined impact

Test for race conditions, where simultaneous requests disrupt expected processing order. Investigate duplicate redemptions, balance or vote changes, and authentication or request-limit failures, then verify actual effects and record reproducibility.

中文简介正在准备中。当前显示英语简介。

• Check coupons and gift cards for duplicate redemption
• Test balance updates and voting limits under concurrent requests
• Investigate timing flaws in authentication and account creation

Assess file upload and import features for weaknesses in file checks and processing. The skill covers extension and content-type bypasses, unsafe image and document handling, archive extraction flaws, and evidence needed to confirm execution or browser-side impact.

中文简介正在准备中。当前显示英语简介。

• Testing avatar and attachment uploads
• Checking Office document and ZIP imports
• Assessing image and video processing