Source

instavm/security-skills

17 skills · 1K combined installs

Skills from this source

#
Skill
Source
8W Activity
Installs
1
mitm-find-bizlogic Find Business Logic vulnerabilities in captured traffic. Use when user asks about payment bypass, race conditions, wo…
instavm/security-skills
66
2
mitm-find-checksum Find checksum and signature vulnerabilities. Use when user asks about hash validation, signature bypass, checksum man…
instavm/security-skills
66
3
mitm-find-auth Find authentication and session vulnerabilities. Use when user asks about auth bypass, session issues, login security…
instavm/security-skills
64
4
mitm-find-sqli Find SQL Injection vulnerabilities in captured traffic. Use when user asks about database security, injection attacks…
instavm/security-skills
64
5
mitm-find-otp Find OTP implementation vulnerabilities. Use when user asks about OTP security, verification bypass, SMS security, or…
instavm/security-skills
61
6
mitm-find-ssrf Find SSRF (Server-Side Request Forgery) vulnerabilities in captured traffic. Use when user asks about URL fetching, w…
instavm/security-skills
60
7
mitm-list-apis List all APIs from mitmproxy traffic capture. Use when user asks to see APIs, endpoints, or wants an overview of capt…
instavm/security-skills
60
8
mitm-find-enumerable Find enumerable endpoints that leak data through iteration. Use when user asks about data scraping, bulk data access,…
instavm/security-skills
58
9
mitm-find-idor Find IDOR (Insecure Direct Object Reference) vulnerabilities in captured traffic. Use when user asks about authorizat…
instavm/security-skills
58
10
mitm-find-pii Find PII (Personally Identifiable Information) leakage in API responses. Use when user asks about data exposure, priv…
instavm/security-skills
58
11
mitm-find-secrets Find leaked secrets, API keys, and credentials in traffic. Use when user asks about exposed keys, hardcoded secrets, …
instavm/security-skills
58
12
mitm-security-audit Comprehensive security audit of mitmproxy traffic. Use when user wants to analyze captured HTTP traffic for vulnerabi…
instavm/security-skills
58
13
mitm-find-callback Find payment callback and webhook vulnerabilities. Use when user asks about payment security, callback tampering, has…
instavm/security-skills
57
14
mitm-find-insecure Find insecure configurations in HTTP traffic. Use when user asks about security headers, cookie security, CORS issues…
instavm/security-skills
56
15
mitm-find-referer Find Referer header leakage vulnerabilities. Use when user asks about URL leakage, third-party data exposure, or sens…
instavm/security-skills
56
16
mitm-report Generate a security vulnerability report. Use when user asks for a report, summary of findings, or formatted vulnerab…
instavm/security-skills
56
17
mitm-subdomains Enumerate subdomains from captured traffic. Use when user asks about subdomain discovery, attack surface mapping, or …
instavm/security-skills
56