This skill should be used when the user asks to "perform SMTP penetration testing", "enumerate email users", "test for open mail relays", "grab SMTP banners", "brute force email credentials", or...

网络渗透测试的专业技能和方法论

This skill should be used when the user asks to "perform cloud penetration testing", "assess Azure or AWS or GCP security", "enumerate cloud resources", "exploit cloud misconfigurations", "test...

This skill should be used when the user asks to "automate SQL injection testing," "enumerate database structure," "extract database credentials using sqlmap," "dump tables and columns from a...

This skill should be used when the user asks to "pentest SSH services", "enumerate SSH configurations", "brute force SSH credentials", "exploit SSH vulnerabilities", "perform SSH tunneling", or...

This skill should be used when the user asks to "pentest AWS", "test AWS security", "enumerate IAM", "exploit cloud infrastructure", "AWS privilege escalation", "S3 bucket testing", "metadata...

反序列化漏洞测试的专业技能和方法论

XSS跨站脚本攻击测试的专业技能

XXE XML外部实体注入测试的专业技能和方法论

CSRF跨站请求伪造测试的专业技能和方法论

IDOR不安全的直接对象引用测试的专业技能和方法论

SSRF服务器端请求伪造测试的专业技能和方法论

This skill should be used when the user asks to "perform SMTP penetration testing", "enumerate email users", "test for open mail relays", "grab SMTP banners", "brute force email credentials", or...

容器安全测试的专业技能和方法论

命令注入漏洞测试的专业技能和方法论

API安全测试的专业技能和方法论

SQL注入测试的专业技能和方法论

LDAP注入漏洞测试的专业技能和方法论

文件上传漏洞测试的专业技能和方法论

业务逻辑漏洞测试的专业技能和方法论