Search
By langbyyi
Skills
Sort:BestMost starsTrending todayTrending this weekTrending this monthNewestRecently updatedName
| # | Skill | Repository | Stars | Used in | Tokens | Auto-check | Licence | Updated |
|---|---|---|---|---|---|---|---|---|
| 1 | Automate low-impact web vulnerability verification through Burp MCP. | langbyyi/ | 135 | — | ~3.1k | Automated safety check: Pass | Apache-2.0 | 2 days ago |
| 2 | Authentication bypass testing playbook. An agent skill from langbyyi/CyberStrikeAI-SRC. | langbyyi/ | 135 | 1 repo | ~3.9k | Automated safety check: Pass | Apache-2.0 | 2 days ago |
| 3 | HTTP Parameter Pollution (HPP): duplicate query/body keys parsed differently by servers, proxies, WAFs, and app frameworks. | langbyyi/ | 135 | 1 repo | ~2.2k | Automated safety check: Pass | Apache-2.0 | 2 days ago |
| 4 | Source control and artifact exposure (.git, .svn, .hg, backups, .env). | langbyyi/ | 135 | 1 repo | ~1.3k | Automated safety check: Notes | Apache-2.0 | 2 days ago |
| 5 | PHP type juggling and weak comparison (==) bypass. An agent skill from langbyyi/CyberStrikeAI-SRC. | langbyyi/ | 135 | 1 repo | ~2.9k | Automated safety check: Pass | Apache-2.0 | 2 days ago |
| 6 | WebSocket handshake, CSWSH, tooling (wsrepl, ws-harness, Burp), and common flaws. | langbyyi/ | 135 | 1 repo | ~1.8k | Automated safety check: Pass | Apache-2.0 | 2 days ago |
| 7 | XSLT injection testing: processor fingerprinting, XXE and document() SSRF, EXSLT write primitives, PHP/Java/.NET extension RCE surfaces. | langbyyi/ | 135 | 1 repo | ~3k | Automated safety check: Pass | Apache-2.0 | 2 days ago |
| 8 | Reconnaissance and methodology playbook. An agent skill from langbyyi/CyberStrikeAI-SRC. | langbyyi/ | 135 | 1 repo | ~3.1k | Automated safety check: Warn | Apache-2.0 | 2 days ago |
| 9 | 浏览器交互式挖洞:登录态操作、双账号越权对比、SPA渲染取证、DOM XSS确认、验证码登录、前端隐藏功能绕过. An agent skill from langbyyi/CyberStrikeAI-SRC. | langbyyi/ | 135 | — | ~434 | Automated safety check: Pass | Apache-2.0 | 2 days ago |
| 10 | 安全事件响应深度专业技能（v3.0高级版）：NIST 800-61r3六阶段响应框架、攻防视角入侵链还原与MITRE ATT&CK映射、Volatility 3/KAPE内存与主机取证深度、无文件攻击追查、云与容器(K8s)事件响应专项、勒索软件专项响应流程、假设驱动威胁猎捕、AI辅助应急响应(LLM日志分析/事件聚合/响应决策/报告生成)、大模型安全事件(提示注入/LLM滥用)响应、红蓝对抗与… | langbyyi/ | 135 | — | ~8.1k | Automated safety check: Pass | Apache-2.0 | 2 days ago |
| 11 | 移动应用安全深度测试专业技能（v3.0）：移动端深层攻击链（App→API→后端→云）、Android/iOS深度逆向与动态调试、Frida全面对抗与加固脱壳、iOS越狱检测绕过/ObjC Runtime/LLDB调试/证书固定绕过、跨平台框架漏洞（Flutter/React… | langbyyi/ | 135 | — | ~12k | Automated safety check: Pass | Apache-2.0 | 2 days ago |
| 12 | 安全自动化顶级专业技能：DevSecOps全流程集成、CI/CD安全管道、SAST/DAST/SCA/容器/IaC自动化扫描编排、安全工具链集成实战、攻防双视角自动化（红队打点/蓝队检测响应）、SOAR深度编排、Agentic AI安全自动化（LLM Agent编排扫描与响应）、大模型安全运营（AI告警降噪/剧本生成）、误报治理与质量保障、合规自动化（证据收集/报告） | langbyyi/ | 135 | — | ~6k | Automated safety check: Pass | Apache-2.0 | 2 days ago |
| 13 | 安全意识培训深度专业技能（v3.0高级版）：AI时代社工威胁升级、深度伪造语音/视频钓鱼、AI生成个性化钓鱼、Evilginx2全链路仿真演练、防御方角色化培训体系、Kirkpatrick四层量化效果评估、AI大模型结合（LLM生成教材/演练内容/数据分析/大模型使用安全规范）、新威胁面培训（提示注入/Deepfake识别/供应链/QR钓鱼）、红蓝对抗演练组织方法论，从"意识培训"升级为"行为安… | langbyyi/ | 135 | — | ~5.8k | Automated safety check: Notes | Apache-2.0 | 2 days ago |
