327 个 · 按相关度排序
Security payloads, bypass tables, wordlists, gf pattern names, always-rejected bug list, and conditionally-valid-with-chain table. Use when you need specific payloads for XSS/SSRF/SQLi/XXE/NoSQLi/command injection/SSTI/IDOR/path-traversal/HTTP smuggling/WebSocket/MFA bypass, or bypass techniques. Submittability and the always-rejected / what-NOT-to-submit decision are owned by triage-validation.
中文简介正在准备中。当前显示原文说明。
WAF bypass techniques checklist: encoding bypass (URL/HTML/Unicode/double encoding), case variation, comment injection, HTTP header manipulation, chunked encoding, IP rotation, timing attacks, and payload obfuscation per WAF vendor. Use when WAF is blocking payloads during web app tests.
中文简介正在准备中。当前显示原文说明。
用于编写和修改OpenClaw在Docker中的端到端测试，结合模拟服务器与真实服务，核查实际发送的请求、图像理解结果及用户最终看到的聊天回复。
Read and update application settings through APIs, including system prompts, reasoning limits, IP filters, and login requirements. Also manage proxy and cache settings, with guidance on how reasoning settings affect requests sent to AI providers.
中文简介正在准备中。当前显示英语简介。
Review forms, API requests, and browser storage to find personal data that no active feature needs. Identify unnecessary collection, suggest removal or anonymisation, and check analytics and logs for exposed personal identifiers and missing retention periods.
中文简介正在准备中。当前显示英语简介。
Review AI skills and bundles without running their code. Checks for data leaks, suspicious permissions, hidden code, and system changes across desktop and mobile platforms, then reports flagged actions, risk scores, and suggested mitigations.
中文简介正在准备中。当前显示英语简介。
Store and retrieve execution output, model responses, reports, and operation receipts in YYLO Ledger. Choose storage and retention settings, attach provenance describing the source, and verify immutable evidence using record identifiers and content digests.
中文简介正在准备中。当前显示英语简介。
Solve sandboxed CTF security challenges by reconstructing encoding and encryption steps, extracting data hidden in media, and tracing mobile app signing or storage behavior. Preserve exact parameters and evidence to reproduce decoded content or signed requests.
中文简介正在准备中。当前显示英语简介。
Trace how requests become rendered pages in a CTF sandbox. Compare display restrictions with server enforcement, inspect data passed to the browser, and preserve a minimal example that demonstrates where rendering behavior diverges.
中文简介正在准备中。当前显示英语简介。
Organize authorized bug bounty investigations from scope review through reconnaissance, asset discovery, vulnerability testing, and reporting. Use vulnerability-specific guides to prioritize checks and prepare reproducible findings with evidence, impact, and remediation advice.
中文简介正在准备中。当前显示英语简介。
Investigate Windows malware that runs in memory or abuses legitimate system tools. Use logs, registry entries, and memory dumps to trace persistence, identify suspicious activity, and produce detection rules and an analysis report.
中文简介正在准备中。当前显示英语简介。
Analyze DNS logs to find signs of hidden data transfers. Use query length, character randomness, traffic volume, and response sizes to identify suspicious domains and support monitoring rules with Python, Suricata, and Splunk examples.
中文简介正在准备中。当前显示英语简介。
Screen AI application inputs and historical logs for prompt injection, where malicious instructions try to redirect the model. Combine pattern matching, text structure scoring, and a DeBERTa classifier to flag suspicious content and produce JSON results.
中文简介正在准备中。当前显示英语简介。
Plan authorized spearphishing simulations, personalized phishing tests aimed at specific people. Prepare scenarios and email infrastructure, track delivery and participant responses, and document findings to assess email security controls and improve security awareness.
中文简介正在准备中。当前显示英语简介。
Search Windows PowerShell logs for traces of Empire, a framework used after a system is compromised. Identify characteristic launch commands, encoded code, module calls, and communication paths, then report suspicious events with timelines and severity scores.
中文简介正在准备中。当前显示英语简介。
Analyze Windows PowerShell event logs to reconstruct scripts split across records and identify encoded commands, suspicious downloads, and security scanning bypass attempts. Produce a report with recovered scripts, risk scores, and mappings to documented attack techniques.
中文简介正在准备中。当前显示英语简介。
Inspect suspicious PDFs without opening them in a reader. Use PDFiD, pdf-parser, and peepdf to examine internal objects, extract scripts, embedded files, and URLs, and document how the suspected attack works.
中文简介正在准备中。当前显示英语简介。
Examine suspicious Word, Excel, and PowerPoint documents by extracting macros and untangling code designed to hide its purpose. Identify download addresses, execution triggers, and attack steps, then document findings and indicators for detecting related threats.
中文简介正在准备中。当前显示英语简介。
Research malware families through Malpedia, connecting aliases, associated threat groups, and relationships between malware that loads other malware. Collect YARA rules, patterns used to identify malware, and organize references to support investigations and detection work.
中文简介正在准备中。当前显示英语简介。
Analyze malware network captures to investigate command-and-control traffic, data theft, and downloaded files. Use packet analysis tools to identify suspicious destinations and recurring connections, extract artifacts, and create detection rules from observed patterns.
中文简介正在准备中。当前显示英语简介。
Create fillable Word forms with text fields, date controls, dropdowns, and clickable checkboxes. Protect static document content while leaving designated fields editable, or prepare mail-merge placeholders for templates that receive data later.
中文简介正在准备中。当前显示英语简介。
Refresh installed NanoClaw channel and agent provider code from its registry branches. Update all integrations or a selected subset, check a structured result report, and validate the updated installation with builds and tests.
中文简介正在准备中。当前显示英语简介。
Evaluate a Claude Managed Agent against a written rubric, a set of checkable criteria, and guide improvements within a fixed attempt limit. After a version passes, prepare separate evaluation cases to check performance beyond the examples used for revision.
中文简介正在准备中。当前显示英语简介。
Plan a Claude Managed Agent around one clear job, then route work through setup, launch preparation, evaluation, and scheduling. Produce execution plans and curl commands that users run with their own Anthropic API key.
中文简介正在准备中。当前显示英语简介。