CyberSecurityUPandClaude Opus 5 40b047b9e7 feat(agents): 10 skills for techniques the catalogue was missing ...

Written against what disclosed bug-bounty reports and public write-ups actually
turn up, and chosen by diffing the existing 245 skills rather than restating
them. Each one is built around the same discipline the harness now enforces:
the client-side discovery is a lead, and the finding is what the SERVER did.

Browser instrumentation and client trust:
- browser_runtime_hooking — hook fetch/XHR/postMessage/storage/WebCrypto at
  document_start to find what the client is trusted to decide, then prove the
  server accepts the tampered value with an independent read-back.
- prototype_pollution_gadget_hunt — pollution is a precondition, not a finding.
  Hunt the gadget with a getter on Object.prototype that breaks into the
  debugger, quote it as file:line from the bundle, and prove the end effect.
- js_source_deep_analysis — recover original sources from source maps, extract
  the API surface the UI never shows, and pair every client-side discovery with
  the server request that confirms or refutes it.
- client_side_path_traversal — the evidence is which URL left the browser, and
  it is Low until chained to something otherwise unreachable.

Authentication:
- webauthn_passkey_downgrade — passkeys as a system: the usual finding is a
  weaker factor nobody removed, or enrollment needing only a session.
- email_verification_bypass — the gate is normally on the login screen, not the
  API; address normalisation is where pre-account-takeover lives.
- jwt_jku_x5u_injection — whether the token gets to choose its own verifier.

Server-side reach and money:
- ssrf_render_pipeline — PDF/screenshot/unfurl renderers browse on the server's
  behalf, usually with no egress restrictions and often with JS enabled; the
  returned document is the exfiltration channel.
- payment_webhook_forgery — prove the ORDER changed state, not that the
  endpoint returned 200; idempotency failures are their own finding.
- presigned_url_abuse — the bug is what the API is willing to SIGN, which is an
  IDOR with a cloud signature on top.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-09-14 00:57:45 -03:00

..

access_control_bypass.md

decision-driven deep exploitation: DECISION doctrine, multi-role /auth, +6 agents

2026-07-06 10:52:40 -03:00

account_registration_and_forms.md

feat: account registration, form analysis, credential vault + cleanup (v3.6.5)

2026-07-30 16:20:58 -03:00

account_takeover_chain.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

ai_api_key_exfiltration.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

api_bola_chained.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

api_bola_numeric_ids.md

browser-driven testing doctrine + 8 SPA/API agents (Juice Shop-ready)

2026-07-05 16:25:34 -03:00

api_excessive_data.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

api_key_exposure.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

api_rate_limiting.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

appserver_exposure.md

v3.5.1: live findings + /finding + Ctrl+O/expand + 3-way /stop (soft validate) + report URL + structured Typst + IIS/CMS/CVE agents

2026-06-24 23:21:43 -03:00

arbitrary_file_delete.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

arbitrary_file_read.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

aspnet_debug_trace.md

v3.5.1: live findings + /finding + Ctrl+O/expand + 3-way /stop (soft validate) + report URL + structured Typst + IIS/CMS/CVE agents

2026-06-24 23:21:43 -03:00

aspnet_viewstate.md

v3.5.1: live findings + /finding + Ctrl+O/expand + 3-way /stop (soft validate) + report URL + structured Typst + IIS/CMS/CVE agents

2026-06-24 23:21:43 -03:00

auth_bypass.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

authenticated_surface_exploit.md

decision-driven deep exploitation: DECISION doctrine, multi-role /auth, +6 agents

2026-07-06 10:52:40 -03:00

aws_imds_v2_bypass.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

azure_blob_public.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

azure_imds_exposure.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

backup_file_exposure.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

bfla.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

blind_xss.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

bola.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

browser_runtime_hooking.md

feat(agents): 10 skills for techniques the catalogue was missing

2026-09-14 00:57:45 -03:00

brute_force.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

business_logic.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

byte_range_cache.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

cache_poisoning.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

captcha_bypass.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

cdn_cache_key_poisoning.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

ci_cd_secret_leak.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

cleartext_transmission.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

clickjacking_poc.md

decision-driven deep exploitation: DECISION doctrine, multi-role /auth, +6 agents

2026-07-06 10:52:40 -03:00

clickjacking.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

client_side_path_traversal.md

feat(agents): 10 skills for techniques the catalogue was missing

2026-09-14 00:57:45 -03:00

client_side_template_injection.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

cloud_iam_privesc.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

cloud_metadata_exposure.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

cms_default_admin.md

v3.5.1: live findings + /finding + Ctrl+O/expand + 3-way /stop (soft validate) + report URL + structured Typst + IIS/CMS/CVE agents

2026-06-24 23:21:43 -03:00

cms_fingerprint.md

v3.5.1: live findings + /finding + Ctrl+O/expand + 3-way /stop (soft validate) + report URL + structured Typst + IIS/CMS/CVE agents

2026-06-24 23:21:43 -03:00

command_injection.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

container_escape_advanced.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

container_escape.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

cors_misconfig.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

coupon_logic_abuse.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

crlf_injection.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

csrf_poc.md

decision-driven deep exploitation: DECISION doctrine, multi-role /auth, +6 agents

2026-07-06 10:52:40 -03:00

csrf.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

css_injection.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

csv_injection.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

cve_exploit_scripter.md

feat(3.6.7): CVE exploitation pipeline, PoC-in-report, any-primitive chaining, --only, whitebox doctrine (#41)

2026-08-04 10:44:18 -03:00

cve_hunter.md

misconfig/CVE/PoC/rate-limit agents, data-safety guardrail, Burp proxy, PoC dir

2026-07-01 23:40:47 -03:00

cve_known_exploitation.md

v3.5.1: live findings + /finding + Ctrl+O/expand + 3-way /stop (soft validate) + report URL + structured Typst + IIS/CMS/CVE agents

2026-06-24 23:21:43 -03:00

cve_poc_finder.md

feat(3.6.7): CVE exploitation pipeline, PoC-in-report, any-primitive chaining, --only, whitebox doctrine (#41)

2026-08-04 10:44:18 -03:00

cve_research_analyst.md

feat(3.6.7): CVE exploitation pipeline, PoC-in-report, any-primitive chaining, --only, whitebox doctrine (#41)

2026-08-04 10:44:18 -03:00

cve_version_fingerprint.md

feat(3.6.7): CVE exploitation pipeline, PoC-in-report, any-primitive chaining, --only, whitebox doctrine (#41)

2026-08-04 10:44:18 -03:00

dangling_markup_injection.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

debug_mode.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

default_credentials.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

dependency_confusion.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

directory_listing.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

docker_socket_exposure.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

dom_clobbering.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

dom_xss_spa.md

browser-driven testing doctrine + 8 SPA/API agents (Juice Shop-ready)

2026-07-05 16:25:34 -03:00

drupal_audit.md

v3.5.1: live findings + /finding + Ctrl+O/expand + 3-way /stop (soft validate) + report URL + structured Typst + IIS/CMS/CVE agents

2026-06-24 23:21:43 -03:00

ecb_pattern_leak.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

ecr_public_exposure.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

edge_side_includes.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

email_injection.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

email_verification_bypass.md

feat(agents): 10 skills for techniques the catalogue was missing

2026-09-14 00:57:45 -03:00

endpoint_flow_linker.md

decision-driven deep exploitation: DECISION doctrine, multi-role /auth, +6 agents

2026-07-06 10:52:40 -03:00

env_file_exposure.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

eol_client_library.md

agents: +8 EOL / end-of-support exploitation agents (library 397)

2026-07-09 19:19:21 -03:00

eol_cms_exploitation.md

agents: +8 EOL / end-of-support exploitation agents (library 397)

2026-07-09 19:19:21 -03:00

eol_framework_exploitation.md

agents: +8 EOL / end-of-support exploitation agents (library 397)

2026-07-09 19:19:21 -03:00

eol_runtime_exploitation.md

agents: +8 EOL / end-of-support exploitation agents (library 397)

2026-07-09 19:19:21 -03:00

eol_stack_detection.md

agents: +8 EOL / end-of-support exploitation agents (library 397)

2026-07-09 19:19:21 -03:00

excessive_data_exposure.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

exposed_admin_panel.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

exposed_api_docs.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

expression_language_injection.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

file_upload.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

forced_browsing.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

formula_injection_excel.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

gcp_metadata_ssrf.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

gcs_bucket_misconfig.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

git_exposed_repo.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

git_svn_exposure_app.md

v3.5.1: live findings + /finding + Ctrl+O/expand + 3-way /stop (soft validate) + report URL + structured Typst + IIS/CMS/CVE agents

2026-06-24 23:21:43 -03:00

graphql_batching_attack.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

graphql_dos_alias_overload.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

graphql_dos.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

graphql_field_suggestion.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

graphql_injection.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

graphql_introspection.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

grpc_reflection_exposure.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

h2c_smuggling.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

header_injection.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

helm_secret_exposure.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

hop_by_hop_abuse.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

host_header_injection.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

html_injection.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

http2_request_smuggling.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

http_desync_cl_te.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

http_desync_te_cl.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

http_methods.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

http_smuggling.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

idempotency_key_abuse.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

idor.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

iis_handler_bypass.md

v3.5.1: live findings + /finding + Ctrl+O/expand + 3-way /stop (soft validate) + report URL + structured Typst + IIS/CMS/CVE agents

2026-06-24 23:21:43 -03:00

iis_tilde_shortname.md

v3.5.1: live findings + /finding + Ctrl+O/expand + 3-way /stop (soft validate) + report URL + structured Typst + IIS/CMS/CVE agents

2026-06-24 23:21:43 -03:00

iis_webdav.md

v3.5.1: live findings + /finding + Ctrl+O/expand + 3-way /stop (soft validate) + report URL + structured Typst + IIS/CMS/CVE agents

2026-06-24 23:21:43 -03:00

improper_error_handling.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

information_disclosure.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

insecure_cdn.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

insecure_cookie_flags.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

insecure_deserialization.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

joomla_audit.md

v3.5.1: live findings + /finding + Ctrl+O/expand + 3-way /stop (soft validate) + report URL + structured Typst + IIS/CMS/CVE agents

2026-06-24 23:21:43 -03:00

js_source_deep_analysis.md

feat(agents): 10 skills for techniques the catalogue was missing

2026-09-14 00:57:45 -03:00

jwt_alg_confusion.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

jwt_forgery_spa.md

browser-driven testing doctrine + 8 SPA/API agents (Juice Shop-ready)

2026-07-05 16:25:34 -03:00

jwt_jku_x5u_injection.md

feat(agents): 10 skills for techniques the catalogue was missing

2026-09-14 00:57:45 -03:00

jwt_jwk_injection.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

jwt_kid_injection.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

jwt_manipulation.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

k8s_exposed_dashboard.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

k8s_exposed_kubelet.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

k8s_rbac_misconfig.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

ldap_injection.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

lfi.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

llm_excessive_agency.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

llm_function_calling_abuse.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

llm_insecure_output_handling.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

llm_jailbreak.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

llm_model_dos.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

llm_pii_leakage.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

llm_rag_poisoning.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

llm_supply_chain_plugin.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

llm_system_prompt_leak.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

llm_tool_invocation_abuse.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

llm_training_data_extraction.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

log4shell_jndi.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

log_injection.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

login_sqli_bypass.md

browser-driven testing doctrine + 8 SPA/API agents (Juice Shop-ready)

2026-07-05 16:25:34 -03:00

mass_assignment.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

mfa_bypass_response.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

misconfig_debug_endpoints.md

misconfig/CVE/PoC/rate-limit agents, data-safety guardrail, Burp proxy, PoC dir

2026-07-01 23:40:47 -03:00

misconfig_default_creds.md

misconfig/CVE/PoC/rate-limit agents, data-safety guardrail, Burp proxy, PoC dir

2026-07-01 23:40:47 -03:00

misconfig_dir_listing.md

misconfig/CVE/PoC/rate-limit agents, data-safety guardrail, Burp proxy, PoC dir

2026-07-01 23:40:47 -03:00

misconfig_exposed_dashboards.md

misconfig/CVE/PoC/rate-limit agents, data-safety guardrail, Burp proxy, PoC dir

2026-07-01 23:40:47 -03:00

misconfig_exposed_files.md

misconfig/CVE/PoC/rate-limit agents, data-safety guardrail, Burp proxy, PoC dir

2026-07-01 23:40:47 -03:00

misconfig_permissive_cors.md

misconfig/CVE/PoC/rate-limit agents, data-safety guardrail, Burp proxy, PoC dir

2026-07-01 23:40:47 -03:00

misconfig_verbose_errors.md

misconfig/CVE/PoC/rate-limit agents, data-safety guardrail, Burp proxy, PoC dir

2026-07-01 23:40:47 -03:00

ml_model_inversion.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

mutation_xss.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

nosql_injection.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

oauth_misconfiguration.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

oauth_open_redirect_chain.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

oauth_pkce_downgrade.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

oidc_misconfig.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

open_redirect.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

orm_injection.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

outdated_component.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

outdated_dependency_cve.md

v3.5.1: live findings + /finding + Ctrl+O/expand + 3-way /stop (soft validate) + report URL + structured Typst + IIS/CMS/CVE agents

2026-06-24 23:21:43 -03:00

padding_oracle.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

param_miner.md

decision-driven deep exploitation: DECISION doctrine, multi-role /auth, +6 agents

2026-07-06 10:52:40 -03:00

parameter_pollution.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

password_reset_poisoning.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

path_traversal.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

payment_webhook_forgery.md

feat(agents): 10 skills for techniques the catalogue was missing

2026-09-14 00:57:45 -03:00

pickle_deserialization.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

poc_developer.md

misconfig/CVE/PoC/rate-limit agents, data-safety guardrail, Burp proxy, PoC dir

2026-07-01 23:40:47 -03:00

postmessage_vulnerability.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

presigned_url_abuse.md

feat(agents): 10 skills for techniques the catalogue was missing

2026-09-14 00:57:45 -03:00

price_manipulation.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

privilege_escalation.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

prompt_injection_direct.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

prompt_injection_indirect.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

prototype_pollution_gadget_hunt.md

feat(agents): 10 skills for techniques the catalogue was missing

2026-09-14 00:57:45 -03:00

prototype_pollution.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

race_condition.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

range_header_dos.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

rate_limit_abuse.md

misconfig/CVE/PoC/rate-limit agents, data-safety guardrail, Burp proxy, PoC dir

2026-07-01 23:40:47 -03:00

rate_limit_bypass.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

refresh_token_abuse.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

regex_dos.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

register_privilege_mass_assign.md

browser-driven testing doctrine + 8 SPA/API agents (Juice Shop-ready)

2026-07-05 16:25:34 -03:00

response_splitting.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

rest_api_versioning.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

reverse_proxy_path_confusion.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

rfi.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

s3_bucket_misconfiguration.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

s3_bucket_takeover.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

saml_signature_wrapping.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

second_order_redirect.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

security_headers.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

sensitive_data_exposure.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

server_side_includes.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

server_side_prototype_pollution.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

serverless_event_injection.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

serverless_misconfiguration.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

session_fixation.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

smtp_injection.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

soap_injection.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

source_code_disclosure.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

spa_api_discovery.md

browser-driven testing doctrine + 8 SPA/API agents (Juice Shop-ready)

2026-07-05 16:25:34 -03:00

spa_business_logic.md

browser-driven testing doctrine + 8 SPA/API agents (Juice Shop-ready)

2026-07-05 16:25:34 -03:00

spa_hidden_admin.md

browser-driven testing doctrine + 8 SPA/API agents (Juice Shop-ready)

2026-07-05 16:25:34 -03:00

sqli_blind.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

sqli_error.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

sqli_time.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

sqli_union.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

ssl_issues.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

ssrf_cloud.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

ssrf_render_pipeline.md

feat(agents): 10 skills for techniques the catalogue was missing

2026-09-14 00:57:45 -03:00

ssrf.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

ssti_freemarker.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

ssti_jinja2.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

ssti_thymeleaf.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

ssti_velocity.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

ssti.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

subdomain_takeover.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

tabnabbing.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

terraform_state_exposure.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

timing_attack.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

timing_side_channel_auth.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

two_factor_bypass.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

twofa_bypass_techniques.md

v3.5.6 — bug-bounty corpus grounding + 2FA bypass agent; Trendshift badge

2026-07-10 00:40:01 -03:00

type_juggling.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

typosquatting_package.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

vector_db_injection.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

version_disclosure.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

vulnerable_dependency.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

weak_encryption.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

weak_hashing.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

weak_jwt_secret_bruteforce.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

weak_password.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

weak_random.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

web_cache_deception.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

web_cache_poisoning_dos.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

webauthn_passkey_downgrade.md

feat(agents): 10 skills for techniques the catalogue was missing

2026-09-14 00:57:45 -03:00

websocket_csrf.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

websocket_hijacking.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

websocket_smuggling.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

wordpress_audit.md

v3.5.1: live findings + /finding + Ctrl+O/expand + 3-way /stop (soft validate) + report URL + structured Typst + IIS/CMS/CVE agents

2026-06-24 23:21:43 -03:00

workflow_step_skip.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

xpath_injection.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

xslt_injection.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

xss_dom.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

xss_reflected.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

xss_stored.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

xxe_billion_laughs.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

xxe_oob_exfiltration.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

xxe.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

yaml_deserialization.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00

zip_slip.md

NeuroSploit v3.3.0 — Autonomous MD-Agent Engine

2026-06-14 20:57:38 -03:00