Summary
- PHP 审计漏洞链组装方法论。当已完成各分类漏洞审计、需要评估多个漏洞组合利用的可行性时触发。
- 覆盖: 文件写入→文件包含→RCE 链、反序列化→敏感操作链、SQL 注入→文件写入链、
- SSRF→内部服务链、信息泄露→权限提升链。同时包含 Composer 依赖 CVE 扫描方法。
wgpsec/aboutsecurity
php-exploit-chain
Installation
$
npx skills add https://github.com/wgpsec/aboutsecurity
Similar popular skills
Related neighbors and high-traction skills in the same topics — useful to compare before installing.
azure-storage
Same topic
microsoft/azure-skills
Azure Storage Services including Blob Storage, File Shares, Queue Storage, Table Storage, and D…
567.1K installs
azure-kusto
Same topic
microsoft/azure-skills
Query and analyze data in Azure Data Explorer (Kusto/ADX) using KQL for log analytics, telemetr…
566.2K installs
supabase-postgres-best-practices
Same topic
supabase/agent-skills
Postgres best practices maintained by Supabase, for Postgres running anywhere. Load this skill …
391.6K installs
prisma-database-setup
Same topic
prisma/skills
Guides for configuring Prisma with different database providers (PostgreSQL, MySQL, SQLite, Mon…
269.8K installs
prisma-client-api
Same topic
prisma/skills
Prisma Client API reference covering model queries, filters, operators, and client methods. Use…
269.3K installs
prisma-cli
Same topic
prisma/skills
Prisma ORM CLI commands reference covering init, generate, migrate, db, dev, complete, studio, …
267K installsAlso in this package
Other skills from wgpsec/aboutsecurity · top by installs.
npx skills add https://github.com/wgpsec/aboutsecurity
More details
Agent compatibility
Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.
Claude Code
Not declared
Cursor
Not declared
Codex
Not declared
GitHub Copilot
Not declared
Windsurf
Not declared
Gemini CLI
Not declared
Cline
Not declared
OpenCode
Not declared
Repository health
Stars
1.7K
Default branch
master
Open issues
0
Status
Active
History
- First seen on skills.sh
- First recorded snapshot · 16 installs