Catalog web exploitation patterns for HTTP apps and APIs.
npx skills add https://github.com/0X6C7879/aegissec --skill ctf-web-0x6c7879
Please help me install this Agent Skill. Skill: ctf-web Source: https://github.com/0X6C7879/aegissec/tree/main/skills/ctf-web Command: npx skills add https://github.com/0X6C7879/aegissec --skill ctf-web-0x6c7879
This Skill provides a comprehensive catalog of web exploitation patterns used in CTFs and security assessments, helping practitioners recognize, categorize, and apply techniques across HTTP, API, and browser-based contexts.
Read this skill to align on common web exploitation techniques and draft an initial plan for a target.
High-intent search queries and answers about installing and using this skill.
Web exploitation patterns for CTF challenges are identified by mapping target behaviors to common vulnerability families like XSS, SQLi, SSRF, SSTI, and XXE. This skill provides a metadata-driven catalog to rapidly discover and categorize these techniques across HTTP apps and APIs.
The best way to plan multi-stage attacks for web-heavy CTF puzzles is to reference a structured playbook that maps exploitation patterns to triage heuristics and success criteria. This allows you to generate execution templates and document findings systematically.
Yes, you can use this skill to map server-side template injection (SSTI) and JWT vulnerabilities. It covers these alongside OAuth, SAML, and XXE patterns, providing practical use cases for browser-based and API security assessments.
This skill comprehensively covers practical patterns for SSRF and SQLi in modern web stacks. It includes real-world use cases and maps these common web bugs to typical CTF workflows for rapid discovery and targeted assessments.
To triage web vulnerabilities during a security assessment, you map observed HTTP behaviors against a pattern library covering XSS, SQLi, and SSRF. This approach supports rapid plan generation and provides reusable execution templates for targeted testing.
ricardoo022Identify configurations, secrets, and attack-surface exposure from JS-bundled web applications.
wgpsecTrace inputs to dangerous sinks in CTF challenge source code.
macaughDetect network services and versions on discovered hosts via active probing.
dreadnodeFilter low-quality and false positive vulnerability findings from scanners and agent output.
