查找技能

Z-Wave attack methodology — sniffing with Z-Force / EZ-Wave / RTL-SDR + ZniffMobile, S0 (legacy) network-key derivation flaw and key reuse, S2 (modern) ECDH commissioning analysis, replay/injection on unauthenticated nodes, default-key brute-force on test deployments, and home-automation hub pivots. Use when targeting Z-Wave smart home devices (door locks, sensors, garage controllers) — common in mid-2010s smart home deployments still in production.

中文简介正在准备中。当前显示原文说明。

Zigbee, Thread, and Matter mesh-protocol attack methodology — IEEE 802.15.4 sniffing with TI CC2531 / CC2540 / Sonoff Zigbee Dongle E, KillerBee toolkit, Touchlink commissioning abuse with the well-known transport key, replay/injection attacks, Zigbee Cluster Library command abuse for door locks and bulbs, Thread network credential theft, Matter commissioning chain analysis, and 6LoWPAN/IPv6 routing exploitation. Use when targeting smart-home or commercial mesh deployments, Zigbee-based door locks, lighting, or sensor networks.

中文简介正在准备中。当前显示原文说明。

You are helping a penetration tester exploit server-side request forgery. The

中文简介正在准备中。当前显示原文说明。

You are helping a penetration tester exploit OS command injection. The target

中文简介正在准备中。当前显示原文说明。

You are helping a penetration tester exploit OAuth 2.0 and OpenID Connect

中文简介正在准备中。当前显示原文说明。

You are helping a penetration tester exploit error-based SQL injection. The

中文简介正在准备中。当前显示原文说明。

You are helping a penetration tester exploit Java deserialization

中文简介正在准备中。当前显示原文说明。

You are helping a penetration tester exploit .NET deserialization

中文简介正在准备中。当前显示原文说明。

You are helping a penetration tester exploit server-side template injection in a

中文简介正在准备中。当前显示原文说明。

You are helping a penetration tester bypass two-factor authentication. The

中文简介正在准备中。当前显示原文说明。

You are helping a penetration tester exploit Insecure Direct Object Reference

中文简介正在准备中。当前显示原文说明。

You are helping a penetration tester exploit JWT (JSON Web Token)

中文简介正在准备中。当前显示原文说明。

You are helping a penetration tester exploit browser-based attack surfaces. This

中文简介正在准备中。当前显示原文说明。

You are helping a penetration tester exploit stored (persistent) cross-site

中文简介正在准备中。当前显示原文说明。

You are a vulnerability researcher reviewing application source code for

中文简介正在准备中。当前显示原文说明。

You are helping a penetration tester exploit DOM-based cross-site scripting. The

中文简介正在准备中。当前显示原文说明。

You are helping a penetration tester exploit NoSQL injection vulnerabilities.

中文简介正在准备中。当前显示原文说明。

You are helping a penetration tester bypass file upload restrictions to achieve

中文简介正在准备中。当前显示原文说明。

You are helping a penetration tester exploit race conditions and TOCTOU

中文简介正在准备中。当前显示原文说明。

You are helping a penetration tester exploit HTTP request smuggling

中文简介正在准备中。当前显示原文说明。

You are helping a penetration tester exploit blind SQL injection. The target

中文简介正在准备中。当前显示原文说明。

You are helping a penetration tester exploit stacked query SQL injection

中文简介正在准备中。当前显示原文说明。

Wi-Fi reconnaissance methodology — adapter selection, monitor mode and packet injection setup, regulatory domain handling, multi-band airspace mapping, hidden SSID discovery, BSSID/ESSID/channel/PMF/encryption fingerprinting, client probe analysis, vendor OUI lookup, war-driving with Kismet/airodump-ng/Wigle, and structured airspace data capture for downstream attacks. Use at the start of any wireless engagement to build the target map before active attacks; covers 2.4 GHz, 5 GHz, and 6 GHz (Wi-Fi 6E) bands and adapter compatibility for each.

中文简介正在准备中。当前显示原文说明。

You are helping a penetration tester exploit server-side template injection in a

中文简介正在准备中。当前显示原文说明。