skills.rest
n4igme
n4igmeCOMMUNITY
Explore all skills by this author →
Website𝕏@nevrectlGitHub

vuln-deserialization

Detect insecure deserialization and XXE vulnerabilities in codebases.

Updated Jun 23, 2024
Search Tags:#testing#vulnerability#code-review#deserialization#security-scanning#xxe
One-click install
npx skills add https://github.com/n4igme/randscript --skill vuln-deserialization
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vuln-deserialization
Source: https://github.com/n4igme/randscript/tree/main/llm/skills/scode/vuln-deserialization
Command: npx skills add https://github.com/n4igme/randscript --skill vuln-deserialization

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps identify insecure deserialization and XML External Entity (XXE) vulnerabilities in codebases, enabling timely remediation and reporting.

Core Features & Use Cases

  • Pattern detection: Detect common deserialization patterns and unsafe XML parsing configurations across languages (Python, Java, PHP, etc.).
  • Risk-based reporting: Align findings to risk context and append to vulnerabilities.md as part of a bug bounty workflow.
  • Use Case: A security engineer scans a repository with Python pickle usage and unsafe XML parsers to surface exploitable paths.

Quick Start

Execute a vulnerability scan against the target codebase and review the resulting vulnerabilities.md for findings.

Frequently Asked Questions about vuln-deserialization

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find insecure deserialization vulnerabilities in my code?▼

To find insecure deserialization vulnerabilities, this Skill scans your codebase for unsafe deserialization and XML parsing patterns across languages like Python, Java, and PHP. It locates exploitable paths and appends verified findings to vulnerabilities.md.

What is the best way to detect XXE bugs in XML parsers?▼

Detecting XXE bugs involves scanning for unsafe XML parsing configurations in your codebase. This Skill identifies these XML External Entity vulnerabilities across multiple languages and guides remediation reporting for the discovered weaknesses.

Can I scan a PHP repository for unsafe deserialization patterns?▼

Yes, you can scan a PHP repository. This Skill applies to languages with deserialization or XML parsing patterns, including PHP, to locate and verify weaknesses, then appends the results to vulnerabilities.md.

How does a security scan handle Python pickle usage and unsafe XML parsers?▼

A security scan handles Python pickle usage and unsafe XML parsers by detecting common deserialization patterns and unsafe configurations. This Skill surfaces exploitable paths and appends risk-based findings to vulnerabilities.md.

Does this vulnerability scan integrate with a bug bounty workflow?▼

Yes, this vulnerability scan integrates with a bug bounty workflow. It aligns findings to risk context and appends them to vulnerabilities.md, enabling timely remediation and security reporting.

What languages are supported for XML External Entity detection?▼

Supported languages for XML External Entity detection include Python, Java, and PHP. The Skill applies to any languages in your codebase with deserialization or XML parsing patterns to locate and verify weaknesses.

Related Skills

Explore More Software Engineering Skills→
NOMARJNOMARJ
5

sigil-scan

Detect malicious patterns in repositories, packages, MCP servers, and AI skills.

Official
Advanced
n4igmen4igme

sc5-report

Compile validated vulnerability findings into a structured bug bounty report.

Community
Advanced
ArieGoldkinArieGoldkin
10

security-checklist

Apply OWASP Top 10 security controls and run dependency, static, and secret scans.

Community
Intermediate
yhy0yhy0
74

pentest-deserialization-xxe

Identify and exploit deserialization and XXE vulnerabilities in web applications.

Community
Advanced