Detect denial-of-service vulnerabilities in web applications from threat-model and recon data.
npx skills add https://github.com/n4igme/randscript --skill vuln-dos
Please help me install this Agent Skill. Skill: vuln-dos Source: https://github.com/n4igme/randscript/tree/main/llm/skills/scode/vuln-dos Command: npx skills add https://github.com/n4igme/randscript --skill vuln-dos
This skill helps security teams and developers identify and document denial-of-service vulnerabilities early by analyzing threat models and reconnaissance data.
Run vuln-dos with your threat-model and recon documentation to identify DoS vectors and append findings to assessment/vulnerabilities.md.
High-intent search queries and answers about installing and using this skill.
To detect ReDoS and denial-of-service vulnerabilities, you analyze your application's threat model and reconnaissance data to identify dangerous patterns like resource exhaustion and archive bombs. This process evaluates server-side input handling across endpoints to map potential DoS vectors.
Threat-model driven DoS vulnerability scanning uses your existing threat-model and recon documentation to systematically evaluate server-side processing and data flows. It detects specific denial-of-service vectors like XML bombs and ReDoS, producing structured remediation guidance for tracking.
Yes, you can scan for resource exhaustion and archive bombs by providing your threat-model.md and recon.md files as input. The analysis applies to projects with server-side processing and user input handling, evaluating endpoints to detect these specific denial-of-service patterns.
To document and track denial-of-service findings, you can append structured remediation guidance directly to an assessment vulnerabilities.md file. This method records detected DoS vectors like ReDoS and XML bombs, creating an actionable list for developer remediation.
DoS vulnerability scanning for these specific patterns is designed for applications with server-side processing and user input handling. Without server-side endpoints and data flows to analyze in your threat model, detecting resource exhaustion or XML bombs is not applicable.
n4igmeIdentify API endpoints and insecure patterns in REST and GraphQL services.
n4igmeIdentify SSRF vectors in outbound HTTP requests and append findings to vulnerabilities.md.
damianpapadopoulosScan code changes for security vulnerabilities using static and dynamic analysis tools.
dreadnodeTest application-layer DoS vulnerabilities using low-volume legitimate-looking requests.
