vuln-research

Structure vulnerability research into a modular four-layer thinking framework across domains like web injection and binary security.

180|25|Updated Jan 29, 2026
One-click install
npx skills add https://github.com/tanweai/xianzhi-research --skill vuln-research
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: vuln-research
Source: https://github.com/tanweai/xianzhi-research/tree/main
Command: npx skills add https://github.com/tanweai/xianzhi-research --skill vuln-research

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

The vuln-research skill provides a structured thinking framework for security researchers to systematically approach vulnerability discovery, threat modeling, and defense analysis, helping teams capture expert thinking in a repeatable format.

Core Features & Use Cases

  • Systematic research workflow: guides analysts from attack surface identification through hypothesis validation to defensive reversal thinking.
  • Cross-domain applicability: covers Web injection, deserialization, binary security, domain pentesting, and more, enabling consistent methodologies across disciplines.
  • Education and accelerators: helps new researchers learn expert thought patterns, accelerate vulnerability discovery, and document repeatable playbooks for teams.

Quick Start

Start by applying the four-layer model to a CVE or target app and generate a concise attack-chain plan.

Frequently Asked Questions about vuln-research

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I structure vulnerability research for web injection and binary security?

Apply a four-layer modular thinking framework (L1-L4) to structure vulnerability research across domains like web injection and binary security, guiding analysts from attack surface identification through hypothesis validation to defensive reversal thinking.

What is the best way to plan a red-team attack chain during security research?

The best way to plan a red-team attack chain is applying a structured thinking framework that identifies the security research problem, models threats, and generates a concise, actionable attack-chain plan without providing exploit details.

How does threat modeling fit into a systematic code audit workflow?

Threat modeling fits into code audit workflows by applying a modular framework that structures the security research problem, enabling analysts to systematically discover vulnerabilities and document repeatable playbooks for defense reviews.

Can I use this methodology for domain pentesting and deserialization analysis?

Yes, you can use this methodology for domain pentesting and deserialization analysis because the four-layer model is designed for cross-domain applicability, ensuring consistent security research workflows across multiple disciplines.

Do I need prior exploit development knowledge to use this security research framework?

You do not need prior exploit development knowledge because the framework focuses on structured thinking for planning actionable insights and defense reviews while explicitly avoiding the provision of exploit details.