Analyze 20 web2 vulnerability classes with root causes and detection patterns.
npx skills add https://github.com/mlvpatel/sentinel-ai-offensive --skill vuln-matrix
Please help me install this Agent Skill. Skill: vuln-matrix Source: https://github.com/mlvpatel/sentinel-ai-offensive/tree/main/skills/vuln-matrix Command: npx skills add https://github.com/mlvpatel/sentinel-ai-offensive --skill vuln-matrix
Security teams and researchers need a consolidated reference of common web2 vulnerability classes to quickly identify patterns, test ideas, and prioritize bug-bounty submissions. The vuln-matrix provides structured root causes, detection patterns, bypass techniques, exploit references, and paid real-world examples across 20 classes.
Read and study the matrix to understand each class's root causes, patterns, and typical exploit techniques, then apply the patterns to your testing workflow.
High-intent search queries and answers about installing and using this skill.
The major web2 vulnerability classes include IDOR, broken auth, XSS, SSRF, SQLi, OAuth/OIDC, GraphQL, SSTI, subdomain takeover, and HTTP request smuggling. The vuln-matrix identifies and analyzes 20 classes with root causes, detection patterns, and real-world paid examples.
To detect and bypass web2 security patterns, apply the detection patterns and bypass tables provided for each vulnerability class. The matrix guides targeted test design by mapping root causes to specific bypass techniques and practical test scenarios with references to real-world paid findings.
Yes, this vulnerability reference covers modern attack surfaces including LLM/AI and GraphQL. It provides structured root causes, detection patterns, and bypass techniques for 20 web2 bug classes, ensuring rapid class-level triage and targeted test design for modern security assessments.
Yes, you can use this matrix for red-team operations and vulnerability research. It applies to scenarios where rapid class-level triage and targeted test design are needed, capturing core concepts, techniques, and references to surface relevant patterns and primers during assessments.
The best way to map target applications to applicable vulnerability classes is to study the matrix to understand each class's root causes and patterns. You can then apply these structured detection patterns and practical test scenarios directly to your testing workflow.
Your vulnerability triage lacks real-world context because it misses references to paid real-world findings. The vuln-matrix provides exploit references and practical test scenarios across 20 web2 classes to guide security assessments and prioritize bug-bounty submissions effectively.
chainreactorsProbe HTTP services and fingerprint web technologies on target hosts.
guib1Identify and analyze web2 vulnerability classes and exploit patterns.
crazyMarkyDetects and exploits SQL injection vulnerabilities in web applications using automated and manual techniques.
hyperlane-xyzAnalyze Solidity contracts for security vulnerabilities using Trail of Bits methodologies.
