web-exploit

What problem does it solve?

This Skill teaches an LLM to conduct thorough post‑discovery exploitation on web applications, turning initial findings into full‑scale attacks and reliable proof‑of‑concepts.

Core Features & Use Cases

• Comprehensive Attack Surface: Handles SQLi, NoSQL, GraphQL, XSS, SSTI, SSRF, file upload, XXE, deserialization, command injection, path traversal, race conditions, CSRF, JWT attacks, request smuggling, CRLF injection, open redirects, CORS, cache poisoning, OAuth misconfigurations, and business logic flaws.
• Automated Tool Integration: Uses sqlmap, commix, xsser, wapiti, davtest, and custom http actions for payload generation and verification.
• Chaining Capability: Seamlessly pivots from /pentester or /api-security into deeper exploitation phases and hands off to /post-exploit or /ai-redteam when appropriate.

Quick Start

Invoke the web-exploit skill with a target URL and optional vulnerability type to begin automated deep exploitation.