encod3d-sec/torch 已索引

源文件证据覆盖

已存储的包版本在这个仓库中引用的固定源文件的原始计数。它反映已记录了什么，不代表仓库有多完整。

引用了 56 个固定源文件

• 56 已知
• 0 提交中不存在
• 0 文件列表截断
• 0 不受支持
• 0 尚无记录
• 0 读取失败

按仓库、提交和路径去重；同一路径出现在两个提交中，按两个文件身份计数。不是组件组数。

读取失败的提交 0

尚无记录的文件没有对应的提交读取失败记录。

关联的包 56

按仓库的已验证身份关联。数量是历史登记记录，不是当前可用性。

第 1–20 条，共 56 条结果

• arsenal技能

  Wiki-first "what do I use" lookup - pick the automated TOOL (wiki/tools/), then the PAYLOAD/technique (wiki/payloads/ + wiki/cheatsheets/), for a surface/service/vuln-class BEFORE hand-rolling or working from memory. Use for "tool for <ser…

  d21b6c94982c

• bb-workflow技能

  Autonomous bug-bounty campaign driver. Runs a full programme end to end with no operator approvals - the deterministic driver (scripts/campaign.py) owns pass state, generates the killchain board from recon, and prints the exact next action…

  d21b6c94982c

• campaign-health技能

  Health check for the bb/pt/ctf workflow driver subsystem - verifies everything is in place so every machine runs the same. Checks vault-content consistency (scripts present, JSON valid, routing wired, all 69 tool pages carry phase:, the to…

  d21b6c94982c

• chrome-devtools-browser技能

  Bring up a REAL, visible, interactive chromium on the Kali VM that the operator logs into (Smart-ID / Mobile-ID / any manual auth or MFA/CAPTCHA), while the agent drives and observes it live through the chrome-devtools MCP (navigate, DOM s…

  d21b6c94982c

• claude-md-improver技能

  OFFLINE FALLBACK for the claude-md-management plugin - prefer that plugin when it is installed. Audit and improve CLAUDE.md files - scan for CLAUDE.md files, evaluate quality against templates, output a report, then make targeted updates. …

  d21b6c94982c

• coverage技能

  Show per-asset vuln-class coverage gaps for the active engagement so nothing in scope is skipped. Use when asked "coverage", "what haven't we tested", "test gaps", "are we thorough", or before calling an engagement done.

  d21b6c94982c

• ctf-box技能

  Boot-to-root methodology for a full machine (THM/HTB/PG/CTF box, "get user.txt+root.txt", "root the box", "foothold to root"). Enforces basic-tool recon (nmap, nc, ffuf, nuclei, dig) before anything custom, wiki-first lookups, and ALWAYS p…

  d21b6c94982c

• ctf-category技能

  CTF challenge router - fingerprint a challenge (file type / prompt / artifacts) into its category (pwn, rev, crypto, forensics, stego, web, osint, hash) and route to the matching wiki page, tools, and first moves. Wiki-first.

  d21b6c94982c

• ctf-workflow技能

  Autonomous CTF / boot-to-root campaign driver. Runs a box end to end with no operator approvals - the deterministic driver (scripts/campaign.py) owns pass state, generates the killchain board from recon, and prints the exact next action (S…

  d21b6c94982c

• delegate技能

  Autonomous sub-agent hand-off for a fiddly, fully-specified exploit-compile / escalation RUN - the main agent stays on strategy and the board while a cheap sub-agent runs an exact copy-paste checklist behind a false-root/hostname guardrail…

  d21b6c94982c

• disclosure技能

  Drive responsible disclosure of a proven finding to a CVE. Package the report, find the vendor contact, report privately, coordinate a timeline, request the CVE (vendor CNA / GitHub / MITRE), and publish an advisory. Closes the research lo…

  d21b6c94982c

• evidence技能

  Evidence hygiene before any FIND moves to Completed or enters a report. Cookie redaction, PII black-bar, HAR sanitization, screenshot metadata strip. Run after /triage passes and before final report assembly.

  d21b6c94982c

• fuzz技能

  Adaptive, targeted web fuzzing - deterministic wordlist selection (wl-pick.sh) plus judgment. Picks the right SecLists list per surface (content/vhost/api/params/artifacts) smallest-first, calibrates filters against soft-404s, recurses, es…

  d21b6c94982c

• hunt-ad技能

  Active Directory attack hunting - enumeration to domain dominance. Spray-safe (lockout gate), AS-REP/Kerberoast, ACL + ADCS (ESC1-16), delegation, DCSync, lateral movement. Wiki-first, FIND schema output.

  d21b6c94982c

• hunt-api技能

  API attack hunting (REST / GraphQL / gRPC) - BOLA/IDOR, BFLA, mass assignment, excessive data exposure, auth/JWT, introspection + batching, rate-limit abuse. OWASP API Top 10. Wiki-first, FIND schema output.

  d21b6c94982c

• hunt-auth技能

  Auth bypass and ATO hunting - legacy protocol matrix (XMLRPC, SharePoint /_vti_bin/, EWS, Citrix, etc.), JWT manipulation, password reset poisoning, SAML auth bypass, session fixation. Wiki-first, FIND schema output.

  d21b6c94982c

• hunt-bizlogic技能

  Business-logic flaw hunting - workflow/state bypass, price/quantity tampering, negative/overflow values, coupon/refund abuse, mass assignment, and logic races. The top-paying bug class with no scanner coverage. Wiki-first, FIND schema outp…

  d21b6c94982c

• hunt-burp技能

  Drive Burp Suite over its MCP server as an AI triage + attack layer - review proxy history for signals, replay via Repeater/send, OOB-gate blind bugs with Collaborator, fuzz via Intruder (RoE-safe), then hand off to the matching vuln-class…

  d21b6c94982c

• hunt-cache技能

  Web cache poisoning + cache deception hunting - unkeyed input poisoning, cache-key analysis, path-confusion deception, header/parameter cloaking. Wiki-first, FIND schema output.

  d21b6c94982c

• hunt-cicd技能

  CI/CD pipeline attack hunting (GitHub Actions focus) - pwn requests (pull_request_target), script injection, self-hosted runner takeover, cache poisoning, OIDC-to-cloud token theft, poisoned pipeline execution. Wiki-first, FIND schema outp…

  d21b6c94982c

已保存的扫描说明 0

没有保存额外的扫描说明。

记录的别名 0

这些名称在上次记录时指向这个仓库。这是记录下来的解析结果，不是实时的 GitHub 检查；本站不会因此合并包或元数据。

没有记录到指向这个仓库的别名。

不支持的市场条目 0

这个仓库的市场清单里、本站暂不支持的条目。它们是原样保存的来源数据，不会被抓取或执行。

没有记录到不支持的条目。