Use Wireshark to capture and filter network packets, the small units of transmitted data. Examine saved traffic, reconstruct conversations, and review statistics to investigate connection problems, performance issues, or suspicious activity and document findings.
中文简介正在准备中。当前显示英语简介。
Turn a business scenario into a compliance checklist covering GDPR and Chinese privacy, data, and advertising regulations. Organize legal references, risk levels, current status, and recommended actions into a prioritized remediation plan.
中文简介正在准备中。当前显示英语简介。
Use Shodan to investigate internet-exposed devices and services on authorized targets. Guidance covers web searches, command-line tools, and APIs to compile asset inventories, review known vulnerability information, monitor networks, and export findings.
中文简介正在准备中。当前显示英语简介。
Guides security scanning across networks, web applications, wireless systems, and cloud environments. Helps select and configure tools, check findings for false positives, prioritize risks, and prepare reports with remediation recommendations.
中文简介正在准备中。当前显示英语简介。
Assess SSH services by discovering servers, reviewing encryption settings, testing passwords and keys, and investigating known vulnerabilities. Includes guidance on SSH tunnels and port forwarding, with reports covering configuration, authentication weaknesses, and forwarding setups.
中文简介正在准备中。当前显示英语简介。
Trace system behavior across code, APIs, authentication, data, and networks through an interactive workflow. Store steps, branches, and findings in SQLite, then export diagrams and documentation for security audits, debugging, architecture reviews, or incident analysis.
中文简介正在准备中。当前显示英语简介。
Compare login approaches and authentication providers, then use implementation examples and security checklists to plan or review an app’s login flow. Covers sessions, tokens, external login providers, passkeys, and common implementation mistakes.
中文简介正在准备中。当前显示英语简介。
Create code documentation, API specifications, documentation sites, and developer guides. Adapt formats to the language and framework, explain parameters and errors, test documentation examples, and report which public functions and classes have been documented.
中文简介正在准备中。当前显示英语简介。
Guide Windows domain penetration testing through Active Directory reconnaissance, credential attacks, privilege escalation, and certificate service checks. Use references for tools such as BloodHound and Impacket to examine attack paths and understand testing prerequisites.
中文简介正在准备中。当前显示英语简介。
Test REST, SOAP, and GraphQL APIs for authentication flaws, improper access to other users’ records, and unsafe input handling. Guides endpoint discovery and request variations to identify vulnerabilities and document evidence of unauthorized access.
中文简介正在准备中。当前显示英语简介。
Investigate slow PostgreSQL and MySQL queries using execution plans, which show how queries run, and performance measurements. Develop index changes, SQL rewrites, and configuration adjustments, then validate their effects with measurements and monitoring.
中文简介正在准备中。当前显示英语简介。
Explore SQLite and PostgreSQL databases through read-only queries. List tables and row counts, inspect columns and constraints, preview records, and generate Mermaid ER diagrams, which describe how tables relate to one another.
中文简介正在准备中。当前显示英语简介。
Explore a codebase to find tightly coupled or fragmented modules, then compare interface designs that hide complexity behind simpler entry points. Produces a GitHub issue proposing a refactor, including dependency handling, testing impact, and design trade-offs.
中文简介正在准备中。当前显示英语简介。
Assess Linux systems for weaknesses that let a regular user gain administrator access. Guides inspection of permissions, scheduled tasks, and vulnerable components, with findings, evidence, and remediation recommendations documented for review.
中文简介正在准备中。当前显示英语简介。
Analyze JSON, syslog, or Nginx logs to group similar errors, count occurrences, and identify busy error periods. Filter by severity or time range, then view the report in the terminal or export it as JSON.
中文简介正在准备中。当前显示英语简介。
Guides authorized security assessments with Metasploit, from scanning and vulnerability testing to payload generation, code used during a test, and post-exploitation investigation. It also covers session management and recording evidence of findings.
中文简介正在准备中。当前显示英语简介。
Look up commands for authorized penetration tests, from finding hosts and services to checking web vulnerabilities, testing passwords, and analyzing traffic. Examples cover Nmap, Metasploit, Nikto, SQLMap, Hydra, John the Ripper, and other tools.
中文简介正在准备中。当前显示英语简介。
Explains how to assess paths from limited user access to administrator privileges on Linux and Windows. Covers local permission weaknesses and Active Directory, a Windows domain management system, with tool selection and documentation guidance for authorized testing.
中文简介正在准备中。当前显示英语简介。
Get a simulated peer review of a paper, abstract, or selected sections. Receive assessments of originality, methods, results, and writing, with specific revision suggestions, severity ratings, and a prioritized checklist for improving the manuscript.
中文简介正在准备中。当前显示英语简介。
Assess web applications for path traversal, a flaw that exposes files outside intended folders. Follow structured checks to identify vulnerable inputs, document demonstrated access, assess data exposure, and prepare remediation guidance.
中文简介正在准备中。当前显示英语简介。
Create bash scripts for routine Linux administration, including backups, resource monitoring, user management, and log analysis. Templates also cover scheduled tasks, file cleanup, encryption, and network checks, providing starting points for automating recurring maintenance.
中文简介正在准备中。当前显示英语简介。
Estimate software development effort by breaking requirements into tasks and choosing three-point estimates, relative T-shirt sizes, or function points that measure functional scope. Produce workload reports with uncertainty ranges and relevant risk adjustments.
中文简介正在准备中。当前显示英语简介。
Map an authorized target's subdomains, active websites, and technologies, then organize vulnerability checks with security tools. The skill covers reconnaissance workflows, automated scans, and XSS testing for flaws that let injected scripts run in web pages.
中文简介正在准备中。当前显示英语简介。
Test web applications for HTML injection, where user input becomes page markup. Identify affected inputs, verify stored or reflected behavior, assess visual manipulation and phishing risks, and document findings with remediation guidance.
中文简介正在准备中。当前显示英语简介。