neothecapt/redteamagent
31 skills
$npx skills add neothecapt/redteamagentSkillInstalls
auth-bypassTest for authentication and authorization flaws including credential attacks, session issues, and access control bypassesbusiness-logic-testingBusiness logic vulnerability detection — workflow bypass, price manipulation, state abuse, and application-specific flawscommand-injectionOS command injection detection, exploitation, and filter bypasscors-testingCORS misconfiguration testing for data theft and access control bypasscsrf-testingCross-site request forgery testing for state-changing operationsdeserialization-testingInsecure deserialization detection and gadget chain exploitationdirectory-fuzzingDiscover hidden directories, files, and endpoints on a web serverfile-inclusionDetect and exploit local and remote file inclusion vulnerabilities for sensitive data access and code executionfile-upload-testingFile upload vulnerability testing — webshells, bypass, path traversalgraphql-testingGraphQL security testing — introspection, injection, auth bypass, DoSidor-testingInsecure direct object reference testing for broken access controlinfo-disclosure-testingInformation disclosure detection — error messages, files, headers, debug endpointsjwt-testingJWT token attack techniques — alg bypass, key confusion, claim tamperingopen-redirect-testingTest for unvalidated redirects — URL parameters, login flows, OAuth callbacks that redirect to attacker-controlled domainsosint-reconOpen-source intelligence gathering — CVE lookup, breach search, DNS history, social profilingparameter-fuzzingDiscover hidden parameters, test values, and identify input handling anomaliesport-scanningDiscover open ports, running services, and their versions on a targetrace-condition-testingRace condition and TOCTOU exploitation — parallel request attacksreport-generationEngagement report structure and formatting guidelinesrequest-smugglingHTTP request smuggling via CL.TE/TE.CL desync and cache poisoningsensitive-data-detectionDetect PII, credentials, and corporate sensitive data in API responses, source code, files, headers, and database extractssource-analysisFrontend source code analysis for hidden routes, API endpoints, and secretssqli-testingDetect and exploit SQL injection vulnerabilities in web application parametersssrf-testingDetect and exploit server-side request forgery to access internal resources and cloud metadatassti-testingServer-side template injection detection, engine identification, and RCEsubdomain-enumerationSubdomain discovery via subfinder, DNS brute-force, and passive sourcesuser-enumerationDiscover any interface (HTTP, WebSocket, GraphQL, gRPC, or other) that distinguishes between existing and non-existing users through any observable differenceweb-reconEnumerate web technologies, headers, endpoints, and metadata from a targetwebsocket-testingWebSocket security testing — injection, auth bypass, hijackingxss-testingDetect and exploit cross-site scripting vulnerabilities in web applicationsxxe-testingXML external entity injection for file read, SSRF, and DoS