Menu

Individual skill

pentest-vuln-verify-test

通过原始 HTTP 请求操作和严格验证自动验证 Web 漏洞（开放重定向、XSS）。

skills/pentest-vuln-verify/SKILL.md

Read pinned source

Source commit 12234a11a9d96acef85577afb1fa5682169d6171

What was checked

Matches the observed repository HEAD
Yes
Scanner rules are current
Yes
Repository scan complete
No
Skill scan complete
Yes
Observed behavior
Network or broad shell
Last checked
Nov 6, 2026

These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.

Install this skill

Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.

An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.

Repository context

Repository stars (not skill ratings)
315
Repository last updated
Oct 20, 2026
License
Apache-2.0

Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.

Files and excerpt

File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.

Browse files
Read excerpt

# 漏洞验证自动化

## 描述
此技能专注于通过操作原始 HTTP 请求来自动验证 Web 漏洞（特别是开放重定向和 XSS）。它处理会话上下文切换（Cookie 替换）和严格的成功标准验证。

## 核心能力
- 原始 HTTP 请求解析与重构
- 认证会话操作（Cookie 交换）
- 自动 Payload 投递
- 响应模式匹配（Meta Refresh / HTTP 30x）

## 参考工作流
- [验证逻辑与流程](references/workflows.md#verification-logic)
- [成功标准定义](references/workflows.md#success-criteria)