w00
Community@woohyun212 · Republic of South Korea
CASPER
Agent Skills by w00
Showing 55 vetted skills indexed across 1 GitHub repositories.
whois-lookup
Perform WHOIS lookups for domains or IP addresses and parse registration details.
web-vuln-cache-poisoning
Detect web cache poisoning and deception in cached HTTP responses.
cve-lookup
Retrieve CVE details from the NVD API with curl and jq.
threat-model
Generates STRIDE-classified threat catalog and prioritized mitigation roadmap from system architecture artifacts.
cert-parse
Parse X.509 certificate details from PEM files or remote hosts.
ssl-check
Inspect SSL/TLS certificate validity, protocol support, and cipher suites for a target host.
entry-point-analyzer
Identify and classify state-changing entry points in smart contracts, web APIs, and CLI tools.
secret-scan
Scan source code and Git history for secrets using trufflehog or gitleaks.
web3-smart-contract
Audit Solidity smart contracts for ten DeFi vulnerability classes using grep-pattern scans and Foundry PoC templates.
web-vuln-http-smuggling
Detect HTTP request smuggling via timing and header-obfuscation probes.
mitre-attack-lookup
Query ATT&CK techniques, groups, software, and mitigations from local markdown files.
siem-rule
Convert threat objectives into Sigma rules and cross-platform SIEM detection queries.
encoding-toolkit
Detect input string encoding and convert across Base64, URL, Hex, HTML entities, ROT13, and JWT.
cert-transparency
Query crt.sh Certificate Transparency logs to extract deduplicated subdomains.
constant-time-analysis
Identify timing side-channel vulnerabilities in C/C++ cryptographic source code.
ad-pentest
Perform six-phase Active Directory penetration testing with BloodHound and ADCS enumeration.
web-vuln-business-logic
Map application workflows and test state transitions for skip, replay, and manipulation attacks.
property-based-testing
Generate diverse inputs to test security invariants across Python, Rust, JavaScript, Solidity, and Go.
differential-review
Identify security regressions and unsafe changes in git diffs and PRs.
subdomain-enum
Enumerate subdomains with subfinder and amass, then validate live hosts using httpx.
insecure-defaults
Scan source code for insecure default configurations and generate remediation reports.
exploit-chain-building
Escalate low-severity findings into high-impact exploit chains.
port-scan
Detect open ports and services on a network host using nmap.
log-analysis
Analyze security logs to detect anomalies and summarize suspicious activity.