妃子笑
Community@lycheer1126
Offensive security skill suite covering reconnaissance, API fuzzing, vulnerability exploitation, and HackerOne-format reporting for web application penetration testing.
Agent Skills by 妃子笑
Showing 18 vetted skills indexed across 1 GitHub repositories.
lycheer1126bypass-agent
Bypass 401, 403, and 405 access controls using path, method, header, and JWT techniques.
lycheer1126ai-security-agent
Tests AI and LLM features for prompt injection, jailbreak, RAG poisoning, and tool call abuse.
lycheer1126report-agent
Converts triage-approved security findings into HackerOne-format reports with CVSS scoring.
lycheer1126recon-agent
Extracts API endpoints, request signatures, and secrets from JavaScript during authorized reconnaissance.
lycheer1126api-fuzz
Generates semantic-type-based API fuzzing payloads for IDOR, SQLi, XSS, SSRF, SSTI, and command injection testing.
lycheer1126mail-code
Automates temporary email account creation and verification code retrieval via the mail.tm API.
lycheer1126business-flow
Tests authenticated business logic endpoints for IDOR, authorization bypass, and stored XSS.
lycheer1126subdomain-takeover
Detects dangling DNS records and verifies claimable third-party resources for subdomain takeover.
lycheer1126passive-recon
Collects subdomains, favicon hashes, and historical URLs via passive OSINT sources.
lycheer1126js-analysis
Extracts complete API request signatures, credentials, and SPA routes from JavaScript files.
lycheer1126vuln-classes
Documents detection signals, exploitation payloads, and WAF bypass techniques for twelve web vulnerability classes.
lycheer1126source-leak
Detect leaked source code and credentials via GitHub, Gitee, and search engine dorking.
lycheer1126oauth-sso
Tests OAuth 2.0, OIDC, and SSO implementations for redirect_uri, state, and token flaws.
lycheer1126websocket-test
Tests WebSocket endpoints for authentication bypass, CSWSH, IDOR, injection, and replay vulnerabilities.
lycheer1126api-gateway-bypass
Tests API gateway access control bypasses via path normalization and method override discrepancies.
lycheer1126crypto-attack
Detect, identify, and decrypt encrypted fields in web application traffic and JavaScript.
lycheer1126hunt-ssrf
Detects and confirms SSRF vulnerabilities using OOB callbacks, cloud metadata payloads, and bypass variants.
lycheer1126race-condition
Tests web APIs for race condition and TOCTOU vulnerabilities using concurrent request scripts.
Frequently Asked Questions About 妃子笑
FAQPage SchemaWhat tasks can I perform with lycheer1126's offensive security skills?▼
You can run full penetration testing phases: passive reconnaissance via crt.sh/Shodan, JS endpoint extraction, semantic API fuzzing, authentication bypass, JWT and AES/RSA cryptographic attacks, SSRF hunting, HTTP request smuggling, cache poisoning, GraphQL testing, and exploit confirmation with report generation.
Who is the target audience for these skills?▼
Penetration testers, bug bounty hunters, and red team operators conducting authorized web application security assessments. The pipeline structure (recon → bypass → fuzz → exploit → report) suits SRC and HackerOne-style bounty workflows requiring evidence-backed findings.
How does the testing pipeline execute in practice?▼
Recon-agent produces _endpoint_params.json and leaked-value pools from JS analysis; bypass-agent handles 401/403 blocks; api-fuzz-agent runs semantic fuzzing driven by response-mined values; exploit-agent confirms vulnerabilities via a 6-check triage gate; report-agent outputs HackerOne-format reports.
What prerequisites and dependencies do these skills require?▼
Skills reference Burp Suite for smuggling/timing analysis, headless browser probing for JS collection, Go/Python concurrency templates for race conditions, and free external services like crt.sh, Shodan, Censys, Wayback Machine, and mail.tm for temp-email registration flows.
Do these skills cover AI/LLM security testing?▼
Yes. The ai-security skill tests prompt injection, jailbreaks, system prompt extraction, MCP/Agent attacks, RAG poisoning, tool/function call abuse, model extraction, and adversarial samples, with a full test vector library included as an optional pipeline phase.