290 个 · 按相关度排序
Hunt Spring Boot specific vulnerabilities — Actuator endpoints (heapdump, env, loggers, mappings, shutdown), Spring Expression Language (SpEL) injection → RCE, H2 console RCE, Jolokia JMX exposure, Spring4Shell (CVE-2022-22965), Spring Cloud Function SPEL (CVE-2022-22963), heap dump credential extraction. Use when target runs Spring Boot — detected via X-Application-Context header, /actuator, Whitelabel Error Page, or Java stack traces.
中文简介正在准备中。当前显示原文说明。
End-to-end iOS red-team pipeline — IPA acquisition (App Store extraction, TestFlight, enterprise/ad-hoc sideload), class-dump/Hopper/Ghidra static analysis, Info.plist + entitlements + Keychain secret extraction, App Transport Security (ATS) misconfig + certificate-pinning bypass (frida-ios-dump, objection, SSL Kill Switch 2), URL-scheme / Universal Link hijack, exported-service enumeration, Frida runtime instrumentation. Companion to apk-redteam-pipeline for the iOS side of a mobile app catalogue. Use when target has an iOS app (App Store listing, TestFlight link, enterprise MDM distribution), when an IPA URL is found hosted on a web server, or when post-recon mentions 'iOS app' / 'mobile app' in scope alongside an Apple developer account.
中文简介正在准备中。当前显示原文说明。
一次汇总已记录的AI使用费用，查看总支出、模型费用明细、最高费用会话和预算使用情况。可输出Markdown供阅读，或输出JSON交给脚本和仪表板。
Create a browser board for daily tasks and numeric goals, then track progress alongside conversations with an AI partner. Includes focus mode, gentle task carryover, progress notes, and a recap you can save at the end of the day.
中文简介正在准备中。当前显示英语简介。
Investigate SGLang serving failures by collecting server state, preserving failing requests, and replaying them on a clean target. Summarize evidence and likely causes, then choose the next debugging tool for crashes, stalls, or performance regressions.
中文简介正在准备中。当前显示英语简介。
Investigate Pass-the-Hash attacks, where stolen password hashes are reused for authentication. Examine unusual NTLM logins alongside credential theft indicators, validate suspicious findings across security logs, and document evidence, affected hosts, confidence, and recommended responses.
中文简介正在准备中。当前显示英语简介。
Investigate malicious code placed inside legitimate Windows processes using memory analysis, event logs, and API monitoring. Identify injection methods, examine extracted code, and produce evidence reports and detection rules for suspicious process behavior.
中文简介正在准备中。当前显示英语简介。
Analyze DNS logs to find signs of hidden data transfers. Use query length, character randomness, traffic volume, and response sizes to identify suspicious domains and support monitoring rules with Python, Suricata, and Splunk examples.
中文简介正在准备中。当前显示英语简介。
Deploy decoy credentials, documents, and URLs with Canarytokens to detect suspicious access. Guides token generation, placement, alert testing, and inventory tracking, with email or webhook notifications when someone interacts with a planted token.
中文简介正在准备中。当前显示英语简介。
Support authorized Active Directory assessments of DCSync, which abuses directory replication rights to obtain credential data. Cover replication permission review, Golden Ticket persistence testing, detection validation, and documentation of evidence and remediation recommendations.
中文简介正在准备中。当前显示英语简介。
Use Intel CHIPSEC to inspect firmware protections, including BIOS write locks and Secure Boot settings. Save test results, extract firmware for offline comparison, and review UEFI variables to investigate configuration weaknesses or suspicious changes.
中文简介正在准备中。当前显示英语简介。
Analyze how ransomware encrypts files and manages keys to assess whether decryption is feasible. Examine implementation weaknesses, check existing decryptors, and document recovery options with technical reasons for the assessment.
中文简介正在准备中。当前显示英语简介。
Build formula-driven Excel financial models for linked financial statements, business valuation, and fundraising forecasts. Separate assumptions, calculations, and results, compare scenarios, and check that statement balances and saved calculation results are consistent.
中文简介正在准备中。当前显示英语简介。
Process large email, document, and transcript archives by routing items to AI models according to their importance. Rule-based privacy checks run before model calls, while extracted information becomes linked knowledge pages with progress checkpoints.
中文简介正在准备中。当前显示英语简介。
Restructure raw article text stored in gbrain into summaries, exact quotes, key insights, and links to related pages. Preserve the original text and connect the article's significance to projects and interests already recorded in gbrain.
中文简介正在准备中。当前显示英语简介。
Build a workflow for importing large collections of audio, email, documents, or chats into knowledge pages. Test varied samples first, track progress in a persistent JSON file, and verify outputs before marking work complete.
中文简介正在准备中。当前显示英语简介。
Explore old files and email archives to rediscover personal writing, ideas, and meaningful conversations. Review selected items one at a time, save worthwhile material as organized notes, and track progress within explicitly permitted folders.
中文简介正在准备中。当前显示英语简介。
Turn pull request changes, commits, and test evidence into a self-contained HTML guide. Explain the problem, system context, before-and-after behavior, and key code changes so reviewers know where to focus.
中文简介正在准备中。当前显示英语简介。
Evaluate a machine learning GPU cluster during a cloud trial or acceptance test. Measure GPU computing performance, communication within and between machines, and local and shared storage, then compile the results into a dated Markdown report.
中文简介正在准备中。当前显示英语简介。
Diagnose errors and incorrect inference results in MNN's QNN backend for Qualcomm HTP processors. Compare intermediate calculation data against CPU results to locate the first faulty operator, distinguish bugs from precision limits, and guide operator support and performance fixes.
中文简介正在准备中。当前显示英语简介。
Guides the design and review of agent startup context, including role files and links to authoritative records. It helps identify stale guidance, missing updates, overloaded startup files, and instructions that lose the purpose of the work.
中文简介正在准备中。当前显示英语简介。
Search HTTP traffic and security findings stored in Burp Suite project files from the command line. Filter response headers or bodies with text patterns, extract affected URLs, and review selected proxy history or site map data.
中文简介正在准备中。当前显示英语简介。
Helps plan NetExec commands for penetration testing in Active Directory, the system used to manage Windows domain accounts. Covers authentication checks, shared resources, permissions, and information collection with examples organized by network protocol.
中文简介正在准备中。当前显示英语简介。
Guides security testing of Android and iOS apps through file inspection and observation while the app runs. Covers network traffic, stored secrets, external app interfaces, authentication, and backend APIs, with tool examples and a testing checklist.
中文简介正在准备中。当前显示英语简介。