hilang avatar

hilang

Community

@langbyyi

5Followers
|
12Public Repos
|
50Published Skills

写代码,也拆代码;研究安全,也制造点有趣的东西。

Agent Skills by hilang

Showing 50 vetted skills indexed across 1 GitHub repositories.

langbyyilangbyyi
96

dependency-confusion

Detect dependency confusion vulnerabilities across npm, pip, RubyGems, Maven, Composer, and Docker.

Community
Advanced
langbyyilangbyyi
96

prototype-pollution

Detect prototype pollution vulnerabilities in JavaScript stacks via injection probes.

Community
Intermediate
langbyyilangbyyi
96

unauthorized-access-common-services

Verify unauthorized access to exposed databases, caches, and admin panels.

Community
Intermediate
langbyyilangbyyi
96

api-sec

Triage API security testing across REST, GraphQL, SOAP, and WebSocket interfaces.

Community
Intermediate
langbyyilangbyyi
96

ssti-server-side-template-injection

Detect and exploit server-side template injection vulnerabilities across web applications.

Community
Advanced
langbyyilangbyyi
96

ctf-forensics

Analyze disk images, memory dumps, and network captures to recover flags.

Community
Advanced
langbyyilangbyyi
96

csv-formula-injection

Detect CSV and spreadsheet formula injection vulnerabilities in exported files.

Community
Intermediate
langbyyilangbyyi
96

websocket-security

Detect WebSocket security vulnerabilities including CSWSH, missing authentication, and message injection.

Community
Intermediate
langbyyilangbyyi
96

graphql-and-hidden-parameters

Identify GraphQL API vulnerabilities including hidden parameters and authorization gaps.

Community
Advanced
langbyyilangbyyi
96

ldap-injection-testing

Detect, exploit, and remediate LDAP injection vulnerabilities in directory-integrated applications.

Community
Intermediate
langbyyilangbyyi
96

ctf-misc

Solve miscellaneous CTF challenges with decoding, sandbox escapes, and constraint solving.

Community
Intermediate
langbyyilangbyyi
96

burp-mcp-vuln-check

Verify web vulnerabilities via Burp MCP proxy history and HTTP replay.

Community
Advanced
langbyyilangbyyi
96

ctf-reverse

Analyze CTF binaries with static and dynamic reverse engineering workflows.

Community
Advanced
langbyyilangbyyi
96

nosql-injection

Detect and triage NoSQL injection vulnerabilities in MongoDB, CouchDB, and Elasticsearch applications.

Community
Intermediate
langbyyilangbyyi
96

clickjacking

Detect clickjacking vulnerabilities by validating framing headers and generating PoC exploits.

Community
Intermediate
langbyyilangbyyi
96

ctf-malware

Analyze obfuscated malware and decrypt C2 traffic for CTF challenges.

Community
Advanced
langbyyilangbyyi
96

path-traversal-lfi

Detect and exploit path traversal and LFI vulnerabilities in web applications.

Community
Advanced
langbyyilangbyyi
96

solve-challenge

Triage CTF challenge inputs and categorize them into standard types.

Community
Advanced
langbyyilangbyyi
96

xlsx

Create, edit, analyze, and validate Excel spreadsheet files with pandas and openpyxl.

Community
Advanced
langbyyilangbyyi
96

pdf

Extract text, merge documents, fill forms, and OCR scanned PDFs.

Community
Intermediate
langbyyilangbyyi
96

type-juggling

Identify PHP type juggling vulnerabilities and magic hash bypasses.

Community
Intermediate
langbyyilangbyyi
96

authbypass-authentication-flaws

Identify and exploit authentication bypass vulnerabilities across login, password reset, MFA, and session systems.

Community
Intermediate
langbyyilangbyyi
96

ctf-ai-ml

Generate adversarial examples and bypass LLM safety filters for CTF challenges.

Community
Intermediate
langbyyilangbyyi
96

ctf-pwn

Solve CTF binary exploitation challenges with pwntools, ROPgadget, and GDB-pwndbg.

Community
Advanced