performing-blind-ssrf-exploitation
Investigates blind Server-Side Request Forgery vulnerabilities through out-of-band techniques, DNS interactions, and timing analysis. Targets access to internal services and cloud metadata endpoints.
Your agent can do more. Find the skill that makes it happen.
Find your next superpower If you are an agent, refer to our llms.txt for full access.Investigates blind Server-Side Request Forgery vulnerabilities through out-of-band techniques, DNS interactions, and timing analysis. Targets access to internal services and cloud metadata endpoints.
Runs a sample in an instrumented sandbox to observe behavior: process tree, file and registry changes, network activity, and persistence, then summarizes the behavioral report into capabilities and IOCs. Activates for requests to detonate a sample, do dynamic or behavioral analysis, or interpret sandbox output.
Assess the security posture of Kubernetes etcd clusters by evaluating encryption at rest, TLS configuration, access controls, backup encryption, and network isolation.
Evaluates security of SCADA Human-Machine Interface systems and their communication channels with PLCs. Covers web-based HMIs, thin-client configurations, and authentication in alignment with IEC 62443 and NIST SP 800-82 guidance.
Extracts structure and indicators from a Windows PE file without executing it: headers, sections, imports/exports, resources, entropy, and embedded strings to infer capability and packing. Activates for requests to statically analyze a PE, EXE, or DLL, or inspect imports and headers.
Uses ProjectDiscovery Subfinder to enumerate subdomains of target domains. Supports passive reconnaissance and attack-surface mapping during security assessments.
Uses KAPE, MFTECmd, PECmd, LECmd, JLECmd, and Timeline Explorer for Windows forensic analysis. Parses registry hives, prefetch files, event logs, and file system metadata.
使用Test2::V0、Test::More、prove runner、模拟、Devel::Cover覆盖率和TDD方法的Perl测试模式。
Creates and reorganizes documentation, including READMEs, API references, and runbooks. Maintains glossaries and detects discrepancies between documentation and the running system.
Guides building tools that solve personal problems using rapid prototyping, local-first apps, CLI tools, and scripts. Covers using your own tools and evolving them into products for others with similar needs.
Supports selecting, reconciling, or preparing one node in a Pest Patrol controlled-rebuild graph for bounded execution.
Guides plain, conversational prose that develops ideas through visible reasoning and surprising claims. Uses a stylistic model drawn from 18 Paul Graham essays.
Skills give your agent reusable instructions for a specific job. Pick one, read what it does, and bring it into your workflow.
A name only tells half the story. Search the full description and instructions to find the right fit.
Read the skill, visit its source, and see exactly what you’re adding to your agent.
Copy the install command from a skill page and run it in your project.
npx skillycli add owner/repo --skill name