“payloads”的搜索结果

Review forms, API requests, and browser storage to find personal data that no active feature needs. Identify unnecessary collection, suggest removal or anonymisation, and check analytics and logs for exposed personal identifiers and missing retention periods.

中文简介正在准备中。当前显示英语简介。

• Reviewing personal data collected by forms
• Finding personal identifiers in analytics and logs
• Reviewing browser storage and retention periods

Review AI skills and bundles without running their code. Checks for data leaks, suspicious permissions, hidden code, and system changes across desktop and mobile platforms, then reports flagged actions, risk scores, and suggested mitigations.

中文简介正在准备中。当前显示英语简介。

• Review an AI skill before installing it
• Check a skill bundle for data leaks and suspicious actions
• Inspect Android and iOS threats in skill files

Trace how requests become rendered pages in a CTF sandbox. Compare display restrictions with server enforcement, inspect data passed to the browser, and preserve a minimal example that demonstrates where rendering behavior diverges.

中文简介正在准备中。当前显示英语简介。

• Trace routes through server rendering
• Inspect page data passed to the browser
• Compare display restrictions with handler enforcement

Solve sandboxed CTF security challenges by reconstructing encoding and encryption steps, extracting data hidden in media, and tracing mobile app signing or storage behavior. Preserve exact parameters and evidence to reproduce decoded content or signed requests.

中文简介正在准备中。当前显示英语简介。

• Reconstructing encoding and encryption chains in CTF challenges
• Extracting data hidden in images and other media
• Tracing APK or IPA request-signing logic

Investigate Windows malware that runs in memory or abuses legitimate system tools. Use logs, registry entries, and memory dumps to trace persistence, identify suspicious activity, and produce detection rules and an analysis report.

中文简介正在准备中。当前显示英语简介。

• Investigating suspicious PowerShell activity
• Checking WMI persistence mechanisms
• Finding malicious code in memory dumps

Analyze DNS logs to find signs of hidden data transfers. Use query length, character randomness, traffic volume, and response sizes to identify suspicious domains and support monitoring rules with Python, Suricata, and Splunk examples.

中文简介正在准备中。当前显示英语简介。

• Investigating possible data theft through DNS traffic
• Ranking suspicious domains found in DNS logs
• Creating DNS tunneling detection rules

Screen AI application inputs and historical logs for prompt injection, where malicious instructions try to redirect the model. Combine pattern matching, text structure scoring, and a DeBERTa classifier to flag suspicious content and produce JSON results.

中文简介正在准备中。当前显示英语简介。

• Screening chatbot and AI agent inputs
• Checking external text used in retrieval-based AI applications
• Auditing historical interaction logs for injection attempts

Plan authorized spearphishing simulations, personalized phishing tests aimed at specific people. Prepare scenarios and email infrastructure, track delivery and participant responses, and document findings to assess email security controls and improve security awareness.

中文简介正在准备中。当前显示英语简介。

• Designing authorized phishing simulations for specific personnel
• Preparing test email delivery infrastructure
• Measuring delivery, opens, clicks, and reporting behavior

Search Windows PowerShell logs for traces of Empire, a framework used after a system is compromised. Identify characteristic launch commands, encoded code, module calls, and communication paths, then report suspicious events with timelines and severity scores.

中文简介正在准备中。当前显示英语简介。

• Investigating suspected Empire activity
• Checking encoded commands and communication paths
• Building detection rules from Empire indicators

Analyze Windows PowerShell event logs to reconstruct scripts split across records and identify encoded commands, suspicious downloads, and security scanning bypass attempts. Produce a report with recovered scripts, risk scores, and mappings to documented attack techniques.

中文简介正在准备中。当前显示英语简介。

• Investigating suspicious PowerShell activity
• Reconstructing scripts split across log records
• Finding encoded commands and suspicious downloads

Inspect suspicious PDFs without opening them in a reader. Use PDFiD, pdf-parser, and peepdf to examine internal objects, extract scripts, embedded files, and URLs, and document how the suspected attack works.

中文简介正在准备中。当前显示英语简介。

• Triage suspicious PDF email attachments
• Investigate embedded JavaScript and automatic actions
• Extract embedded files and external URLs

Refresh installed NanoClaw channel and agent provider code from its registry branches. Update all integrations or a selected subset, check a structured result report, and validate the updated installation with builds and tests.

中文简介正在准备中。当前显示英语简介。

• Refreshing integrations after a NanoClaw update
• Updating selected channels or agent providers
• Updating from a fork with an upstream remote

Plan a Claude Managed Agent around one clear job, then route work through setup, launch preparation, evaluation, and scheduling. Produce execution plans and curl commands that users run with their own Anthropic API key.

中文简介正在准备中。当前显示英语简介。

• Defining one clear job for a managed agent
• Preparing launch commands for an Anthropic account
• Planning evaluation and revision with an iteration limit

Scope a Claude Managed Agent through six questions about its job, trigger, inputs, actions, success criteria, and recurrence. Produce a validated build sheet with configuration components, deferred features, and an evaluation plan, without requiring an API key.

中文简介正在准备中。当前显示英语简介。

• Turn an agent idea into a concrete build plan
• Define success criteria before implementation
• Separate the initial scope from later integrations

Build Cloud Monitoring requests from metric definitions and resource details. Generate JSON parameters, filters, and aggregation settings for retrieving time series data, then validate the request against the live API.

中文简介正在准备中。当前显示英语简介。

• Build JSON requests to retrieve monitoring data
• Filter metrics for specific VMs or databases
• Set aggregation intervals and resource grouping

Organize authorized phishing exercises from sending infrastructure and email scenarios to landing pages and reporting. Uses GoPhish campaign tracking to review opens, clicks, and submissions while assessing employee awareness and email security controls.

中文简介正在准备中。当前显示英语简介。

• Planning an authorized phishing exercise
• Preparing sending infrastructure and landing pages
• Reviewing email, QR code, and callback scenarios

Support shellcode development for security testing: small machine-code programs executed in memory. The skill covers x86/x64 implementation, code that works regardless of its memory address, loaders, executable conversion, debugging, and platform-specific execution constraints.

中文简介正在准备中。当前显示英语简介。

• Studying address-independent x86/x64 code
• Reviewing loader memory allocation and execution
• Comparing EXE and DLL conversion tools

Plan authorized security tests involving phone calls, text messages, physical access, and USB devices. Helps develop scenarios from public information, document interactions, and assess how staff verification procedures and physical controls respond.

中文简介正在准备中。当前显示英语简介。

• Planning authorized phone and SMS security tests
• Reviewing visitor and badge verification procedures
• Designing USB device security exercises

Assess how applications use encryption, signed tokens, and random values. Identify implementation weaknesses, select relevant testing tools, and document causes and fixes for issues involving encryption modes, RSA parameters, predictable randomness, and key derivation.

中文简介正在准备中。当前显示英语简介。

• Assessing encrypted cookies and tokens
• Checking RSA keys and cryptographic settings
• Testing session token predictability

Assess how Wi-Fi clients respond to impersonated access points using Evil Twin, KARMA, and Mana methods. Covers portal-based credential exposure, traffic interception conditions, client behavior, and limits imposed by modern protections.

中文简介正在准备中。当前显示英语简介。

• Assessing client connections to rogue Wi-Fi
• Planning captive portal security exercises
• Reviewing conditions for traffic interception

Look up compound–target binding data in BindingDB using PDB or UniProt identifiers, or search for similar chemical structures. Receive concise summaries of matching records, with full API responses saved to a file when requested.

中文简介正在准备中。当前显示英语简介。

• Find ligands linked to a PDB identifier
• Look up binding data for a UniProt entry
• Search for compounds with similar structures

Deliver TeamHarness messages to the correct room, channel, or session using recorded reply routes. It covers task handoffs and requester reports, while defining when to reply directly or suppress acknowledgements that could cause message loops.

中文简介正在准备中。当前显示英语简介。

• Deliver progress reports to the original requester
• Hand off a request to a Matrix task room
• Send messages across rooms or channels

This skill should be used when the user asks to "use Metasploit for penetration testing", "exploit vulnerabilities with msfconsole", "create payloads with msfvenom", "perform post-exploitation", "use auxiliary modules for scanning", or "develop custom exploits". It provides comprehensive guidance for leveraging the Metasploit Framework in security assessments.

中文简介正在准备中。当前显示原文说明。

Run the PAIDF Orchestration Image Attribute Augmentation DAG on Kubernetes - person-crop clothing augmentation, attribute search, and augmented dataset generation. Select for requests about image attribute augmentation, person attribute search, person re-identification data, clothing augmentation, attribute captions, augmentation payloads, run status, or result retrieval. Runs environment setup first when controller readiness is unknown. Not for video or defect-image generation.

中文简介正在准备中。当前显示原文说明。