测试设计、漏洞检测、质量保证（1.3万 个）
Use this security testing playbook to check whether proxies, CDNs, and origin servers disagree about HTTP request boundaries. It covers Content-Length and Transfer-Encoding differences, HTTP/2 downgrades, and browser-side desynchronization, with guidance for low-impact probes.
中文简介正在准备中。当前显示英语简介。
Test JavaScript applications for prototype pollution, where untrusted keys alter shared object behavior. The playbook helps inspect parsers and merge operations, verify persistent effects, and assess whether later code paths turn the issue into a security impact.
中文简介正在准备中。当前显示英语简介。
Investigate file path handling in downloads, includes, imports, and archive extraction. The playbook helps distinguish arbitrary file reads from local file inclusion, and maps common encoding, filter, platform, and PHP wrapper behaviors to test.
中文简介正在准备中。当前显示英语简介。
Use this skill to test applications that build NoSQL queries from user input. It covers MongoDB operator injection, authentication bypass, blind data extraction, aggregation pipelines, and Redis or CouchDB risks, with detection ideas and testing checklists.
中文简介正在准备中。当前显示英语简介。
Plan security assessments of network protocols such as ARP, name resolution, DHCPv6, VLANs, DNS, and IPv6. The guide explains how these techniques can expose credentials or redirect traffic, and helps select an approach based on network conditions.
中文简介正在准备中。当前显示英语简介。
A Windows security testing playbook covering ways attackers attempt to evade antivirus and endpoint detection tools. It organizes techniques involving AMSI, ETW telemetry, .NET assemblies, shellcode, process injection, API hooks, and signature checks.
中文简介正在准备中。当前显示英语简介。
Investigate confirmed prototype pollution in Node.js applications and browser code. The playbook covers framework-specific gadgets, filter bypass patterns, detection approaches, and how polluted properties may lead to server-side code execution or client-side script execution.
中文简介正在准备中。当前显示英语简介。
Use this playbook to test web applications for race conditions, where simultaneous requests can pass a check before state changes. It covers one-time actions, balances, inventory, rate limits, and synchronized HTTP/1.1 or HTTP/2 testing, with evidence to confirm inconsistent results.
中文简介正在准备中。当前显示英语简介。
Check OAuth 2.0 and OpenID Connect login flows for configuration weaknesses. The playbook guides reviews of redirect URI checks, state and nonce validation, PKCE, token issuer and audience, scopes, and account binding across web, mobile, and SPA clients.
中文简介正在准备中。当前显示英语简介。
Evaluate macOS protections such as TCC, Gatekeeper, SIP, app sandboxing, and code signing in authorized security assessments. The playbook outlines bypass patterns, version considerations, entitlement checks, and persistence options.
中文简介正在准备中。当前显示英语简介。
Select hash attack techniques for CTF challenges and authorized assessments. The guide explains when length extension applies, how collision and birthday attacks differ, how timing leaks can expose HMAC comparisons, and how to solve hash-based proof-of-work puzzles, alongside relevant tools and limitations.
中文简介正在准备中。当前显示英语简介。
Assess Android apps during authorized security reviews. The playbook covers intercepting pinned HTTPS traffic, checking exposed components and WebViews, testing intent redirection and root detection, and examining overlays, app backups, and stored data for weaknesses.
中文简介正在准备中。当前显示英语简介。
Use this API testing playbook to check whether users can access or change objects and functions beyond their permissions. It guides comparisons between two accounts, nested resource checks, alternate HTTP methods, and attempts to write hidden fields such as roles or verification flags.
中文简介正在准备中。当前显示英语简介。
Use this low-level security playbook to evaluate how an arbitrary memory write could lead to code execution. It compares overwrite targets across glibc versions and binary protections, and explains prerequisites such as address leaks and pointer mangling.
中文简介正在准备中。当前显示英语简介。
Analyze format string vulnerabilities in printf-family calls that use user-controlled input. The playbook explains how to identify the issue, inspect stack values, read or write memory with format specifiers, and reason about leaks and overwrite targets across 32-bit and 64-bit programs.
中文简介正在准备中。当前显示英语简介。
Use this guide to assess spreadsheet formula injection in CSV exports, reports, or imported user data. It explains how to identify formula evaluation in common spreadsheet apps, document the results, and reduce risk when exporting data.
中文简介正在准备中。当前显示英语简介。
Assess iOS app security during authorized mobile testing. The playbook helps inspect Keychain items and stored data, test custom URL schemes and Universal Links, examine binary protections and transport settings, and use Frida or Objection for runtime analysis across jailbroken and non-jailbroken setups.
中文简介正在准备中。当前显示英语简介。
Use this playbook to analyze glibc ptmalloc2 heap bugs, including use-after-free, double free, and overflows. It explains allocator bins, heap and libc leaks, and how exploitation choices change across glibc versions, helping researchers assess paths to arbitrary writes or code execution.
中文简介正在准备中。当前显示英语简介。
Use this guide during an authorized assessment to check for exposed version control data, backups, and configuration files. It explains how to interpret common paths and status codes, and outlines recovery tools for reviewing accessible repository metadata and artifacts.
中文简介正在准备中。当前显示英语简介。
Assess misconfigured Active Directory permissions and trace possible privilege escalation paths. The guide covers BloodHound enumeration and risky ACL rights, including DCSync, shadow credentials, LAPS access, group changes, and writable Group Policy Objects, with examples of how these issues connect.
中文简介正在准备中。当前显示英语简介。
Use this playbook to check whether an API properly limits access to records and privileged actions. It helps organize tests across identifiers, request fields, HTTP methods, related resources, and user roles, so authorization gaps can be identified and documented.
中文简介正在准备中。当前显示英语简介。
Use this skill to assess DNS rebinding, where changing DNS answers can make a victim’s browser reach internal services under the same hostname. It explains attack variants, browser cache behavior, targets, tools, and defenses.
中文简介正在准备中。当前显示英语简介。
Assess whether user supplied input can reach shell commands or other process execution points. The playbook covers common entry points, different quoting contexts, and ways to detect blind injection when the application does not show command output.
中文简介正在准备中。当前显示英语简介。
Review application workflows for business logic weaknesses such as price tampering, race conditions, skipped steps, or missing authorization across multiple actions. It guides testers to map states and one-time actions, then trace where checks and state changes can be abused.
中文简介正在准备中。当前显示英语简介。