Netw0rkNoob

Guide systematic security testing of Web applications and APIs across input handling, authentication, business rules, protocols, files, and deployment settings. Use topic-specific references and playbooks, or step-by-step testing guides, to choose checks suited to the target.

中文简介正在准备中。当前显示英语简介。

• Planning input validation and injection testing
• Checking authentication and access control
• Reviewing GraphQL, WebSocket, and OAuth security

Guides authorized testing of injection flaws outside SQL, where crafted input changes how a system interprets a request. Helps agents define scope, choose alternative directions, document reproduction evidence, and decide when findings justify a report.

中文简介正在准备中。当前显示英语简介。

• Defining the scope of non-SQL injection testing
• Reconsidering test directions when progress stalls
• Organizing reproduction evidence and impact assessments

Find relevant references for CTF miscellaneous challenges, including restricted execution environments, layered encodings, hidden data in media, and game or virtual machine analysis. It also covers CTFd platform operations and Linux privilege escalation.

中文简介正在准备中。当前显示英语简介。

• Investigate Python or Bash jail challenges
• Identify layered encodings and hidden media data
• Analyze games and custom virtual machines

Guide authorized reverse engineering by defining scope, choosing alternative approaches when analysis stalls, and setting evidence requirements. It helps agents prepare supported findings and analysis reports for binaries, protocols, and firmware.

中文简介正在准备中。当前显示英语简介。

• Define the scope of binary analysis
• Reconsider an approach when analysis stalls
• Review evidence before reporting findings

Guides authorized source code security reviews across dangerous functions, data flow, authentication, logic flaws, and dependencies. Helps agents prioritize review paths and organize code locations, reproduction evidence, and remediation advice before drawing conclusions.

中文简介正在准备中。当前显示英语简介。

• Prioritizing entry points in a large codebase
• Tracing user input to dangerous functions
• Reviewing authentication, logic, and dependency risks

Guide authorized checks of CORS, the browser rules for sharing resources across sites. Define testing boundaries, assess origin handling and credential exposure, and organize reproduction evidence or reports explaining what was tested without finding a vulnerability.

中文简介正在准备中。当前显示英语简介。

• Define the scope of a CORS configuration review
• Review allowed origins and credential exposure
• Organize evidence for a reproducible finding

Guides authorized API security testing across authentication, access controls, unintended field updates, rate limits, and GraphQL. Helps agents define scope, review alternative testing directions, and organize request evidence for verified findings or reports of unsuccessful checks.

中文简介正在准备中。当前显示英语简介。

• Defining the scope of API security tests
• Reviewing authentication and access control checks
• Organizing HTTP requests and finding evidence

Match identified products and versions against CVEs, records of known security vulnerabilities. Assess relevance, evidence quality, and patch status, then produce a candidate list to guide further investigation without attempting exploitation.

中文简介正在准备中。当前显示英语简介。

• Find CVE candidates for identified products and versions
• Assess applicability when version evidence is incomplete
• Check whether deployed versions include fixes

Guide authorized mobile app security testing across stored data, certificate checks, exposed components, and compiled code analysis. The skill organizes scope, alternative investigation paths, reproduction evidence, and completion criteria for findings and unsuccessful tests.

中文简介正在准备中。当前显示英语简介。

• Define scope for mobile app security testing
• Organize checks for stored data and exposed app components
• Choose another investigation path when app protections block testing

Guides authorized payload construction testing by defining scope, alternative directions when testing stalls, and evidence requirements. Helps agents organize reproduction records and decide when to report results or return to a broader testing plan.

中文简介正在准备中。当前显示英语简介。

• Defining the scope of payload construction tests
• Reviewing alternatives when delivery tests stall
• Organizing reproduction evidence

Guide authorized security reconnaissance, the collection of information about a target. Set investigation boundaries, identify alternative sources when discovery stalls, and organize domains, ports, services, and findings for prioritizing further security testing.

中文简介正在准备中。当前显示英语简介。

• Define the scope of authorized reconnaissance
• Find alternative sources when discovery stalls
• Organize domains, IP addresses, ports, and services

Find specialist playbooks for internal network penetration testing after initial access is established. Covers movement between hosts, credential collection, privilege escalation, persistent access, tunneling, and assessments involving Active Directory, certificate services, Exchange, and SharePoint.

中文简介正在准备中。当前显示英语简介。

• Plan internal network testing after gaining initial access
• Find playbooks for movement between hosts and credential collection
• Review privilege escalation and persistent access test areas

Plan security tests for websites and AI agents using vulnerability cases and risk frameworks. The skill selects relevant references, develops test hypotheses, and separates suspected issues from confirmed findings with source citations.

中文简介正在准备中。当前显示英语简介。

• Plan an authorized web penetration test
• Assess prompt injection and MCP risks
• Develop test hypotheses for a CTF challenge

Quickly find test input families, checks, and validation priorities once a security testing direction is known. Covers web vulnerabilities, authentication, AI, and MCP, with pointers to specialist skills and reference material.

中文简介正在准备中。当前显示英语简介。

• Recall initial checks for a known vulnerability type
• Choose test input families and validation priorities
• Find reference cards for AI and MCP testing

Guide authorized testing of login, authorization, and sessions, including passwords, JWT tokens, OAuth, and multifactor authentication. The skill helps define boundaries, select alternative investigation paths, and document evidence needed to support findings or report unsuccessful tests.

中文简介正在准备中。当前显示英语简介。

• Define scope for login and session security testing
• Organize checks for JWT, OAuth, and multifactor authentication
• Document requests and evidence supporting an authentication bypass

Guide authorized SQL injection testing, where input may change database queries. Define scope, choose alternative investigation paths, and organize requests, responses, and impact evidence, including reports that document unsuccessful checks without claiming a vulnerability is absent.

中文简介正在准备中。当前显示英语简介。

• Define the scope of SQL injection testing
• Reconsider investigation paths after blocked attempts
• Organize reproduction evidence and impact findings

Guide authorized testing of open redirects, where a site sends visitors to an unintended destination. This skill defines test boundaries, alternative investigation paths, and the evidence needed to report findings or conclude an investigation.

中文简介正在准备中。当前显示英语简介。

• Define the scope of an authorized redirect test
• Review evidence for OAuth redirect_uri findings
• Choose another direction when redirect checks stall

Structure authorized cloud security tests covering access permissions, exposed storage, metadata services, and serverless environments. This skill helps agents stay within scope, consider alternative investigation paths, and collect evidence for findings and completion decisions.

中文简介正在准备中。当前显示英语简介。

• Define the scope of an authorized cloud security test
• Organize evidence for permission and storage findings
• Consider other paths when cloud checks stall

Guide authorized testing of security defenses, including web application firewalls, antivirus, and endpoint detection tools. The skill defines scope, alternative testing directions, evidence requirements, and completion criteria for reporting successful bypasses or unsuccessful attempts.

中文简介正在准备中。当前显示英语简介。

• Define scope for authorized security defense testing
• Choose another direction when testing stalls
• Organize evidence for a successful bypass

Guide authorized SSRF assessments, which examine whether a server can be induced to request unintended destinations. The skill sets scope, suggests alternative investigation paths, and defines evidence for confirmed findings or reports of unsuccessful tests.

中文简介正在准备中。当前显示英语简介。

• Define the scope of an authorized SSRF assessment
• Reconsider investigation paths when request restrictions block tests
• Organize evidence that a server initiated a request

Guide web application and API security testing from technology identification and path discovery through vulnerability checks. Examine authentication, input handling, and business logic, then produce a test report and proof-of-concept scripts that demonstrate the findings.

中文简介正在准备中。当前显示英语简介。

• Identifying a web app's technology stack and exposed paths
• Checking authentication and session management
• Testing input handling and file uploads

Solve CTF web challenges using concrete test inputs, request templates, and PHP code review checklists. The reference covers type comparisons, command injection, template injection, deserialization, source extraction, and common locations for challenge flags.

中文简介正在准备中。当前显示英语简介。

• Review PHP source code in a CTF challenge
• Investigate type comparisons and input filters
• Explore template injection and deserialization

Guide authorized web cache poisoning assessments, where a cache stores an attacker-influenced response. The skill defines test boundaries, suggests alternative investigation paths, and specifies evidence needed to report a finding or document unsuccessful attempts.

中文简介正在准备中。当前显示英语简介。

• Define the scope of an authorized cache poisoning assessment
• Reconsider investigation paths when cache tests stall
• Organize evidence of poisoned responses reaching other requests

Guides authorized testing of cryptographic weaknesses, including weak algorithms, key management errors, and predictable randomness. Defines testing boundaries, alternative areas to examine, and evidence needed to document verified findings or report unsuccessful checks.

中文简介正在准备中。当前显示英语简介。

• Defining the scope of cryptographic tests
• Reviewing encryption implementation checks
• Organizing evidence of cryptographic weaknesses