SkillsAdd

wgpsec/aboutsecurity

php-exploit-chain

PHP 审计漏洞链组装方法论。当已完成各分类漏洞审计、需要评估多个漏洞组合利用的可行性时触发。 覆盖: 文件写入→文件包含→RCE 链、反序列化→敏感操作链、SQL 注入→文件写入链、 SSRF→内部服务链、信息泄露→权限提升链。同时包含 Composer 依赖 CVE 扫描方法。

First seen Apr 22, 2026

Installation

$ npx skills add https://github.com/wgpsec/aboutsecurity
View on skills.sh ↗ GitHub repository ↗
Feature your product here Skill page unit · reach builders installing agent skills View pricing →

Summary

  • PHP 审计漏洞链组装方法论。当已完成各分类漏洞审计、需要评估多个漏洞组合利用的可行性时触发。
  • 覆盖: 文件写入→文件包含→RCE 链、反序列化→敏感操作链、SQL 注入→文件写入链、
  • SSRF→内部服务链、信息泄露→权限提升链。同时包含 Composer 依赖 CVE 扫描方法。

Similar popular skills

Related neighbors and high-traction skills in the same topics — useful to compare before installing.

heap-exploitation Similar name
yaklang/hack-skills

>- Heap exploitation playbook. Use when targeting ptmalloc2/glibc heap vulnerabilities includin…

17 installs
format-string-exploitation Similar name
yaklang/hack-skills

>- Format string exploitation playbook. Use when printf-family functions receive user-controlle…

17 installs
kernel-exploitation Similar name
yaklang/hack-skills

>- Linux kernel exploitation playbook. Use when exploiting kernel vulnerabilities (UAF, OOB, ra…

16 installs
browser-exploitation-v8 Similar name
yaklang/hack-skills

>- Browser and V8 exploitation playbook. Use when exploiting JavaScript engine vulnerabilities …

16 installs
patch-diff-exploit Similar name
zhaoxuya520/reverse-skill

N-day 补丁差分到利用。从厂商发布的补丁里反推漏洞点、写 PoC、做成可用的攻击模块。 适用场景：已知…

1 installs
exploiting-sql-injection-vulnerabilities Similar name
mukul975/anthropic-cybersecurity-skills

Identifies and exploits SQL injection vulnerabilities in web applications during authorized pen…

1 installs

Also in this package

Other skills from wgpsec/aboutsecurity · top by installs.

npx skills add https://github.com/wgpsec/aboutsecurity
prompt-jailbreak 62 ctf-reverse 46 ad-domain-attack 45 nuclei-scan 45 efficiency-rules 45 report-generate 43 ctf-web-recon 43 ctf-crypto 43 ctf-pwn 41 passive-recon 41

Browse all from wgpsec/aboutsecurity

More details

Agent compatibility

Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.

Claude Code Not declared
Cursor Not declared
Codex Not declared
GitHub Copilot Not declared
Windsurf Not declared
Gemini CLI Not declared
Cline Not declared
OpenCode Not declared

Repository health

Stars 1.7K
Default branch master
Open issues 0
Status Active

History

  1. First seen on skills.sh
  2. First recorded snapshot · 16 installs