Summary
单目标 Web 深度漏洞扫描策略。当已知目标 URL、需要对一个 Web 应用进行深度漏洞测试时使用。与 recon-full(资产发现)不同——本技能假设目标已确定,聚焦漏洞层面的深度测试。覆盖指纹驱动的扫描策略选择、自动化+手动测试结合、漏洞优先级排序。优先发现 RCE、SQL注入等高危漏洞
wgpsec/aboutsecurity
单目标 Web 深度漏洞扫描策略。当已知目标 URL、需要对一个 Web 应用进行深度漏洞测试时使用。与 recon-full(资产发现)不同——本技能假设目标已确定,聚焦漏洞层面的深度测试。覆盖指纹驱动的扫描策略选择、自动化+手动测试结合、漏洞优先级排序。优先发现 RCE、SQL注入等高危漏洞
npx skills add https://github.com/wgpsec/aboutsecurity
单目标 Web 深度漏洞扫描策略。当已知目标 URL、需要对一个 Web 应用进行深度漏洞测试时使用。与 recon-full(资产发现)不同——本技能假设目标已确定,聚焦漏洞层面的深度测试。覆盖指纹驱动的扫描策略选择、自动化+手动测试结合、漏洞优先级排序。优先发现 RCE、SQL注入等高危漏洞
Related neighbors and high-traction skills in the same topics — useful to compare before installing.
Fix security vulnerabilities found by a Strix pentest (open-source CLI or app.strix.ai cloud) —…
224 installsFind security vulnerabilities in a codebase or repository with Strix — a white-box AI security …
233 installsScans Solana programs for 6 critical vulnerabilities including arbitrary CPI, improper PDA vali…
24 installsScans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical vulnerabiliti…
24 installsScans Algorand smart contracts for 11 common vulnerabilities including rekeying attacks, unchec…
24 installsScans TON (The Open Network) smart contracts for 3 critical vulnerabilities including integer-a…
24 installsOther skills from wgpsec/aboutsecurity · top by installs.
npx skills add https://github.com/wgpsec/aboutsecurity
Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.
master