Identify server-side vulnerabilities across web applications and APIs.
npx skills add https://github.com/YukiIto1999/ctf-sleuth --skill server-side
Please help me install this Agent Skill. Skill: server-side Source: https://github.com/YukiIto1999/ctf-sleuth/tree/main/.claude/skills/server-side Command: npx skills add https://github.com/YukiIto1999/ctf-sleuth --skill server-side
Server-side security is often fragile due to misconfigured backends and complex vulnerability chains. This Skill helps identify, analyze, and mitigate server-side weaknesses across common attack vectors such as SSRF, HTTP request smuggling, path traversal, file upload, and insecure deserialization, enabling faster remediation.
Run this skill to scan a target web application for common server-side vulnerabilities and apply mitigation guidance.
High-intent search queries and answers about installing and using this skill.
To test for SSRF vulnerabilities, this Skill provides testing workflows that identify server-side request forgery risks by analyzing backend request handling and applying mitigation guidance to secure configurations.
Detecting insecure deserialization involves analyzing data parsing workflows in APIs, and this Skill offers reference materials and cheat sheets to identify exploitation risks and implement secure coding practices for remediation.
Yes, you can scan for path traversal and file upload vulnerabilities across web applications and APIs, receiving actionable steps to apply secure configurations and harden the server-side security posture against these attacks.
HTTP request smuggling testing works by identifying discrepancies in how frontend and backend servers interpret HTTP requests, utilizing provided reference materials to understand exploit mechanisms and apply defensive best practices.
Yes, it provides defensive best practices for server-side security hardening, delivering mitigation-focused guidance and actionable steps to implement secure configurations across vulnerable web application and API endpoints.
Yes, reference materials including cheat sheets and lab resources are consolidated within the Skill to provide a deep understanding of server-side vulnerabilities, exploitation techniques, and their corresponding defenses.
zebbernDiscover web endpoints and historical URLs using Katana, Gospider, and GAU.
fengshao1227Scan codebases for security vulnerabilities and dangerous patterns.
jcastillotxIntercept and analyze HTTP traffic with Burp Suite proxy tools.
cxnaivePerform authorized web application penetration testing with reconnaissance, vulnerability analysis, and proof-based exploitation.
