SkillsAdd

wgpsec/aboutsecurity

race-condition-methodology

条件竞争/并发漏洞的检测与利用。当目标有余额/积分/优惠券消费、文件上传后检查删除、一次性 token 验证、限购/限量操作时使用。通过并发请求在校验与执行之间的时间窗口进行利用（TOCTOU）。CTF 中常见的重复领奖、余额竞态题型

First seen Mar 25, 2026

Installation

$ npx skills add https://github.com/wgpsec/aboutsecurity
View on skills.sh ↗ GitHub repository ↗

Summary

条件竞争/并发漏洞的检测与利用。当目标有余额/积分/优惠券消费、文件上传后检查删除、一次性 token 验证、限购/限量操作时使用。通过并发请求在校验与执行之间的时间窗口进行利用（TOCTOU）。CTF 中常见的重复领奖、余额竞态题型

Similar popular skills

Related neighbors and high-traction skills in the same topics — useful to compare before installing.

evaluation-methodology Similar name
wshobson/agents

PluginEval quality methodology — dimensions, rubrics, statistical methods, and scoring formulas…

5.9K installs
cro-methodology Similar name
wondelai/skills

Audit websites and landing pages for conversion issues and design evidence-based A/B tests. Use…

4.9K installs
recon-and-methodology Similar name
yaklang/hack-skills

>- Reconnaissance and methodology playbook. Use when mapping assets, discovering endpoints, fin…

3.2K installs
benchmark-methodology Similar name
affaan-m/ecc

>- Use after competitive-platform-analysis has produced a tiered competitor set. Scores each co…

2.9K installs
sparc-methodology Similar name
ruvnet/ruflo

SPARC (Specification, Pseudocode, Architecture, Refinement, Completion) comprehensive developme…

1.2K installs
ethical-hacking-methodology Similar name
sickn33/agentic-awesome-skills

Master the complete penetration testing lifecycle from reconnaissance through reporting. This s…

711 installs

Also in this package

Other skills from wgpsec/aboutsecurity · top by installs.

npx skills add https://github.com/wgpsec/aboutsecurity
prompt-jailbreak 62 ctf-reverse 46 ad-domain-attack 45 nuclei-scan 45 efficiency-rules 45 report-generate 43 ctf-web-recon 43 ctf-crypto 43 ctf-pwn 41 passive-recon 41

Browse all from wgpsec/aboutsecurity

More details

Agent compatibility

Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.

Claude Code Not declared
Cursor Not declared
Codex Not declared
GitHub Copilot Not declared
Windsurf Not declared
Gemini CLI Not declared
Cline Not declared
OpenCode Not declared

Repository health

Stars 1.7K
Default branch master
Open issues 0
Status Active

History

  1. First seen on skills.sh
  2. First recorded snapshot · 4 installs