Summary
SonarQube 代码审计平台攻击。当发现目标运行 SonarQube 实例（默认 9000 端口）、默认凭据 admin/admin 未修改、或需要从 SonarQube 窃取项目源代码和漏洞信息时使用。覆盖默认凭据攻击、项目源代码窃取、漏洞/Issue 枚举（CRITICAL 优先）、用户凭据与 Token…
wgpsec/aboutsecurity
sonarqube-tactics
Installation
$
npx skills add https://github.com/wgpsec/aboutsecurity
Similar popular skills
Related neighbors and high-traction skills in the same topics — useful to compare before installing.
sonarqube-mcp
Similar name
giuseppe-trisciuoglio/developer-kit
Provides SonarQube and SonarCloud integration patterns via the Model Context Protocol (MCP) ser…
2.6K installs
sonarqube
Similar name
claude-dev-suite/claude-dev-suite
SonarQube/SonarCloud integration for continuous code quality. Setup, configuration, quality gat…
100 installsAlso in this package
Other skills from wgpsec/aboutsecurity · top by installs.
npx skills add https://github.com/wgpsec/aboutsecurity
More details
Agent compatibility
Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.
Claude Code
Not declared
Cursor
Not declared
Codex
Not declared
GitHub Copilot
Not declared
Windsurf
Not declared
Gemini CLI
Not declared
Cline
Not declared
OpenCode
Not declared
Repository health
Stars
1.7K
Default branch
master
Open issues
0
Status
Active
History
- First seen on skills.sh
- First recorded snapshot · 15 installs