Skill UI

A comprehensive skill for performing deep security audits and writing secure code in Go. It guides developers through identifying vulnerabilities like SQL injection, XSS, path traversal, and crypto misuse. The framework incorporates advanced techniques such as STRIDE/DREAD threat modeling, data flow tracing, and multi-stage review modes (Audit, Review, Coding), ensuring defense in depth for robust Go applications.

A utility for interacting with the Lark/Feishu communication directory. It allows users to search for employees by name or email to obtain an open_id, or use an open_id to retrieve comprehensive profile data, including department, contact details, status, and signature. Ideal for preparing information before sending messages or scheduling events. Note that department tree traversal and organizational structure mapping require native OpenAPI calls.

This technique is used when the required answer in a case query is not directly stated but must be deduced by following a sequence of connected roles, people, or events. It involves mapping complex relationships, such as Victim -> Defendant -> Lawyer -> Witness, to trace indirect connections and reach the final piece of information. Ideal for advanced investigative research and deep knowledge graph traversal.

A comprehensive checklist and methodology for penetration testing file upload endpoints. Covers critical vulnerabilities such as MIME type bypass, extension bypass, magic byte manipulation, path traversal, and stored XSS. Essential for web application security assessment and bug bounty hunting, guiding testers through basic testing to advanced exploitation techniques like Null Byte injection and double extensions.

This comprehensive guide serves as a reference for offensive security professionals developing custom x86/x64 shellcode. It details advanced concepts including Position-Independent Code (PIC), PEB traversal for API resolution, safe memory allocation (avoiding RWX), and sophisticated process injection methods (e.g., APC injection, threadless techniques). Learn how to bypass modern AV/EDR detection using advanced evasion techniques like API hashing, encryption, direct syscalls, and abusing PE structures.

This skill provides a comprehensive framework for security auditing LLM agents that possess external tools (file system access, command execution, network calls). It employs advanced dialogue probing techniques—such as command injection, path traversal, and SSRF attempts—to identify vulnerabilities where the agent might be induced to execute unexpected or malicious code, or access sensitive resources. Essential for red teaming and securing agent functionalities.

A comprehensive playbook for bypassing 401/403 Forbidden errors. Covers advanced techniques like path normalization tricks (encoding, traversal), HTTP method tampering, IP spoofing headers, and protocol downgrade attacks. Essential knowledge for penetration testing and security auditing.

This router entry point is designed for comprehensive testing of file access, download endpoints, and file upload workflows. Use this guide when validating file paths, detecting Local File Inclusion (LFI), or analyzing vulnerabilities in preview, storage, or extraction processes. It helps categorize whether the security issue relates to path traversal or insecure data processing chains.

A sophisticated payload bypass technique targeting Java applications. It exploits the silent loss of high 8 bits when 16-bit Java characters are cast or written as 8-bit bytes. This allows attackers to bypass WAF/IDS security measures by making the WAF see harmless Unicode, while the backend service processes the original malicious ASCII byte payload. Ideal for blind SQLi, deserialization RCE, and path traversal. This primitive affects major frameworks like Tomcat, Spring, Jackson, and HttpClient.

A deep-dive playbook covering expert techniques for Path Traversal and Local File Inclusion (LFI). It details multiple bypass methods (encoding, null bytes, wrappers), target file enumeration on Linux and Windows, and advanced Remote Code Execution (RCE) escalation paths, such as log poisoning via PHP wrappers.

A comprehensive, expert playbook for challenging insecure file upload mechanisms. It provides advanced attack vectors covering validation bypass (magic bytes, extension), storage path abuse (traversal, overwrite), and exploitation of post-upload processing chains (XXE, RCE, CMDi). Essential for deep security auditing of file-handling workflows.

This tool performs pathfinder traversal across a knowledge graph starting from a specified seed entity. It expands outward through causal edges, calculates path relevance scores, and prunes low-similarity branches. It is ideal for conducting impact analyses, tracing dependency chains, or understanding complex relationships within a structured knowledge base.