SkillsAdd

wgpsec/aboutsecurity

privilege-escalation-web

First seen Mar 25, 2026

Installation

$ npx skills add https://github.com/wgpsec/aboutsecurity
View on skills.sh ↗ GitHub repository ↗

Summary

Web 应用层权限提升。当 Web 应用存在用户注册/登录、角色权限管理、API 参数传输用户身份信息时使用。覆盖 Mass Assignment（批量赋值）攻击、角色/权限字段注入、HTTP 方法/Header 绕过、Cookie/Session 篡改。注册后立即检查普通用户能否越权访问管理员功能——这是第一优先级

Similar popular skills

Related neighbors and high-traction skills in the same topics — useful to compare before installing.

customer-escalation Similar name
anthropics/knowledge-work-plugins

Package an escalation for engineering, product, or leadership with full context. Use when a bug…

2.5K installs
linux-privilege-escalation Similar name
yaklang/hack-skills

>- Linux privilege escalation playbook. Use when you have low-privilege shell access and need t…

2.9K installs
windows-privilege-escalation Similar name
yaklang/hack-skills

>- Windows local privilege escalation playbook. Use when you have low-privilege shell access on…

2.9K installs
escalation-flagger Similar name
anthropics/claude-for-legal

Route a contract issue to the right approver per the escalation matrix in `~/.claude/plugins/co…

516 installs
linux-privilege-escalation Similar name
sickn33/agentic-awesome-skills

Execute systematic privilege escalation assessments on Linux systems to identify and exploit mi…

435 installs
windows-privilege-escalation Similar name
sickn33/agentic-awesome-skills

Provide systematic methodologies for discovering and exploiting privilege escalation vulnerabil…

383 installs

Also in this package

Other skills from wgpsec/aboutsecurity · top by installs.

npx skills add https://github.com/wgpsec/aboutsecurity
prompt-jailbreak 62 ctf-reverse 46 ad-domain-attack 45 nuclei-scan 45 efficiency-rules 45 report-generate 43 ctf-web-recon 43 ctf-crypto 43 ctf-pwn 41 passive-recon 41

Browse all from wgpsec/aboutsecurity

More details

Agent compatibility

Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.

Claude Code Not declared
Cursor Not declared
Codex Not declared
GitHub Copilot Not declared
Windsurf Not declared
Gemini CLI Not declared
Cline Not declared
OpenCode Not declared

Repository health

Stars 1.7K
Default branch master
Open issues 0
Status Active

History

  1. First seen on skills.sh
  2. First recorded snapshot · 20 installs