탐색
총 128개 중 20개 표시
Searches and explores Burp Suite project files (.burp) from the command line. Use when searching response headers or bod...
Structured task planning skill that uses markdown files for persistent plan tracking, progress updates, and subtask deco...
Configure and run AFL++ fuzzing campaigns for C/C++ targets, including harness setup, corpus handling, dictionaries, par...
Set up cargo-fuzz for Rust crates, write effective fuzz targets, manage corpora, and triage panics or sanitizer crashes.
Measure fuzzing or test coverage, identify untested parser and protocol paths, and translate coverage gaps into better h...
Write targeted fuzz harnesses that isolate parsers, state machines, and security-sensitive APIs without hiding bugs behi...
Prepare OSS-Fuzz integrations with build scripts, fuzz targets, seed corpora, dictionaries, and project metadata for con...
Security-focused review of code changes using git history analysis to find regressions.
Use AddressSanitizer to find memory corruption bugs, configure instrumented builds, interpret sanitizer reports, and tur...
Use Atheris to fuzz Python code and native extension boundaries with coverage-guided tests, useful inputs, and reproduci...
Test cryptographic implementations for timing leaks with dudect-style workflows, leakage hypotheses, and reproducible me...
Design high-value fuzzing dictionaries for structured inputs, parsers, protocols, file formats, and smart contract ABI s...
Build libFuzzer harnesses for C/C++ libraries, configure sanitizers and corpora, and turn crashes into minimized reprodu...
Scans Algorand smart contracts for 11 common vulnerabilities including rekeying attacks, unchecked transaction fees, mis...
Scans Cairo/StarkNet smart contracts for 6 critical vulnerabilities including felt252 arithmetic overflow, L1-L2 messagi...
Guides through Trail of Bits' 5-step secure development workflow. Runs Slither scans, checks special features (upgradeab...
Scans TON (The Open Network) smart contracts for 3 critical vulnerabilities including integer-as-boolean misuse, fake Je...
Claude Code and Codex skill that compresses agent communication into terse, high-signal output to reduce token usage whi...
Heads-up display skill that shows real-time context window usage, token counts, and session metadata in a compact dashbo...
Prepares codebases for security review using Trail of Bits' checklist. Helps set review goals, runs static analysis tool...