Wolf Group Security Team
Official@wgpsec · Earth
Wolf Group Security Team 狼组安全团队 子团队@ffffffff0x
Agent Skills by Wolf Group Security Team
Showing 127 vetted skills indexed across 3 GitHub repositories.
wgpsecaboutsecurity-content-ingestion
Integrates external security knowledge into the AboutSecurity repository following structured SOP phases.
wgpsecagent-security
Tests AI agent systems against OWASP Agentic AI Security Top 10 attack scenarios.
wgpsecmcp-security
Tests MCP servers for tool description poisoning, rug pulls, and hidden instruction injection.
wgpsecai-identity-security
Tests AI agent identity, role boundaries, permissions, sessions, and credential controls for bypass.
wgpsecai-data-security
Tests LLM and AI systems for data leakage, training data extraction, and RAG poisoning risks.
wgpseccot-injection
Tests Chain-of-Thought and ReAct agent reasoning chains for injection and manipulation vulnerabilities.
wgpsecmiddleware-tactics
Exploit Tomcat, WebLogic, JBoss, IIS, Nginx, and Apache middleware via weak credentials, WAR deployment, and parsing flaws.
wgpsecdatabase-tactics
Guides penetration testing attacks against Redis, MSSQL, PostgreSQL, MySQL, and MongoDB services.
wgpsecdisk-forensics-evasion
Analyze disk forensics artifacts and apply anti-forensics techniques on NTFS and ext4 systems.
wgpsecemergency-response
Investigate compromised Linux and Windows hosts through account, process, persistence, and log analysis.
wgpsecfirmware-analysis
Analyzes embedded device firmware through extraction, static analysis, QEMU emulation, and repackaging.
wgpsechttp-smuggling-advanced
Exploit confirmed HTTP request smuggling vulnerabilities through chained attacks and HTTP/2 downgrade techniques.
wgpseccaptcha-bypass-methodology
Bypass and recognize image, click, and slider captchas during authorized penetration tests.
wgpsecpassword-reset-methodology
Tests password reset flows for verification code flaws and unauthorized account modification.
wgpsecmobile-backend
Tests mobile app backend APIs for authentication flaws, IDOR, and business logic vulnerabilities.
wgpsecmssql-pentesting
Tests MSSQL servers on port 1433 through enumeration, xp_cmdshell execution, and privilege escalation.
wgpsecftp-pentesting
Tests FTP services on port 21 for anonymous access, weak credentials, and known exploits.
wgpsecbinary-exploitation-methodology
Guides analysis and exploitation of binary vulnerabilities including stack overflows, heap corruption, and format strings.
wgpsecbinary-exploitation-tools
Guides selection and usage of debugging, exploitation, and reverse engineering tools for binary analysis.
wgpsecweb-vuln-scan
Guides deep vulnerability scanning of a single web target using fingerprint-driven tool selection and manual testing.
wgpsecssti-methodology
Detect, identify, and exploit server-side template injection across Jinja2, Twig, FreeMarker, and other engines.
wgpsechttp-host-header-attacks
Tests HTTP Host header handling for password reset poisoning, cache poisoning, SSRF, and virtual host enumeration.
wgpsecsubdomain-takeover
Detect and exploit dangling DNS records to claim abandoned subdomains on cloud providers.
wgpsecjava-framework-audit
Detects known vulnerability patterns in Spring, Struts2, Shiro, FastJSON, and MyBatis source code.
Frequently Asked Questions About Wolf Group Security Team
FAQPage SchemaWhat specific security tasks are enabled by these methodologies?▼
These methodologies enable comprehensive penetration testing, including web application fuzzing, Active Directory domain enumeration, Kubernetes cluster reconnaissance, and post-exploitation lateral movement across internal networks.
Which technical personas benefit from these security resources?▼
Red-team operators, penetration testers, and cloud security engineers utilize these resources to standardize assessment phases, manage infrastructure deployments, and execute complex security research tasks.
What are the prerequisites for deploying the infrastructure modules?▼
Deployment requires a configured environment with Terraform installed, valid cloud provider credentials for AWS, Azure, or GCP, and basic familiarity with Linux-based command-line operations for VPS management.