Summary
CTF 挑战中的 Flag 搜索策略。当通过 RCE/LFI/SQLi/webshell 等方式获得目标访问权限后、使用常规 ls/cat 命令找不到 flag 时使用。覆盖文件系统、数据库、环境变量、源码、内存等所有 flag 可能的存储位置。按成功率排序的搜索优先级——先试标准路径,再搜索全盘
wgpsec/aboutsecurity
CTF 挑战中的 Flag 搜索策略。当通过 RCE/LFI/SQLi/webshell 等方式获得目标访问权限后、使用常规 ls/cat 命令找不到 flag 时使用。覆盖文件系统、数据库、环境变量、源码、内存等所有 flag 可能的存储位置。按成功率排序的搜索优先级——先试标准路径,再搜索全盘
npx skills add https://github.com/wgpsec/aboutsecurity
CTF 挑战中的 Flag 搜索策略。当通过 RCE/LFI/SQLi/webshell 等方式获得目标访问权限后、使用常规 ls/cat 命令找不到 flag 时使用。覆盖文件系统、数据库、环境变量、源码、内存等所有 flag 可能的存储位置。按成功率排序的搜索优先级——先试标准路径,再搜索全盘
Related neighbors and high-traction skills in the same topics — useful to compare before installing.
Use for blue-team threat hunting, detection engineering with Sigma/YARA, SIEM query design, and…
16 installs>- Hunt threat-intelligence indicators of compromise (IoCs) across Dynatrace logs and spans and…
11 installsConduct proactive, hypothesis-driven threat hunts — search SIEM / EDR / logs for adversaries wh…
221 installsIOC extraction, threat intelligence correlation, MITRE ATT&CK mapping, hunt hypothesis generati…
179 installsRuns a hypothesis-driven threat hunt for web shell deployment (T1505.003) on internet-facing se…
120 installsDetects credential stuffing attacks by analyzing authentication logs for login velocity anomali…
102 installsOther skills from wgpsec/aboutsecurity · top by installs.
npx skills add https://github.com/wgpsec/aboutsecurity
Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.
master