Identify novel security flaws in source code, binaries, and live services.
npx skills add https://github.com/iuliandita/skills --skill zero-day
Please help me install this Agent Skill. Skill: zero-day Source: https://github.com/iuliandita/skills/tree/main/skills/zero-day Command: npx skills add https://github.com/iuliandita/skills --skill zero-day
This Skill provides a rigorous, repeatable methodology for identifying previously unknown security vulnerabilities in source code, binaries, and live systems, moving beyond simple automated scanning.
Invoke the zero-day skill to begin profiling the attack surface of the target repository and identifying high-priority vulnerability classes for deep analysis.
High-intent search queries and answers about installing and using this skill.
To find novel vulnerabilities in compiled binaries, conduct systematic vulnerability research using manual attack surface mapping, taint tracking, and patch diffing. This approach identifies deep memory corruption flaws that standard automated scanning tools often overlook.
Variant analysis is the process of finding similar bugs in related codebases after a CVE is published. You need it during vulnerability research to systematically check whether newly disclosed flaws exist in other target repositories or components.
Conduct patch diffing by analyzing changes between patched and unpatched source code to identify security flaws. This systematic vulnerability research method traces taint data through modified attack surfaces to locate novel memory corruption vulnerabilities.
Yes, you can develop proof-of-concept exploits for responsible disclosure. The systematic vulnerability research lifecycle guides you from intelligence gathering and attack surface profiling through to PoC development while adhering to strict authorization and safety protocols.
Yes, vulnerability research on live services requires strict authorization and safety protocols. Deep manual analysis of live systems demands explicit permission and adherence to responsible disclosure guidelines to ensure legal and ethical testing.
The best way to profile an attack surface is to systematically map the target repository to identify high-priority vulnerability classes. This preparatory step focuses deep manual analysis on critical components most likely to yield novel security flaws.
EntroVyxProvides an operational framework for red-team engagements with structured decision-making and validation.
vrcmsIdentify and validate remotely reachable exploitable security vulnerabilities in a repository.
AcczdyAutomate coverage-guided fuzzing of compiled binaries with AFL++.
icartshAnalyze .NET solutions for code quality, security, and dependency issues.
