Skill UI

This skill guides the comprehensive process of crash triage, enabling the assessment of vulnerability exploitability. It covers advanced techniques using debuggers (WinDbg/GDB), sanitizers (ASAN/MSAN), and interpreting low-level data like stack traces and register dumps. It is essential for vulnerability researchers analyzing crash dumps or fuzzer-generated failures to identify root causes and potential attack vectors.

A powerful technique used when full XSS is blocked by CSP, sanitizers, or WAFs, but HTML injection is possible. It leverages unclosed HTML tags (like <img> or <link>) to capture and exfiltrate sensitive page data (CSRF tokens, session IDs, form values) by forcing the browser to include the subsequent content in a request URL.

This guide outlines a comprehensive, agent-focused testing workflow for modern C++ (C++17/20) using GoogleTest and CMake/CTest. It teaches key concepts like the TDD cycle (Red-Green-Refactor), utilizing mocking (gmock) and fixtures for isolation, setting up robust CI/CD integration, and debugging complex issues using sanitizers (ASAN, TSAN) and coverage analysis. Use this when writing, updating, or ensuring the functional robustness of C++ codebases.