offensive-deserialization
De la autor
Insecure deserialization attack checklist: identifying deserialization sinks, Java/PHP/.NET/Python deserialization exploitation, ysoserial gadget chains, magic method abuse, and detection evasion. Use when testing deserialization endpoints or developing deserialization exploits. Use only for authorized security research, training, or assessment.
Instalare
npx skills add 26zl/cybersec-toolkit --skill offensive-deserialization -a claude-code
Se instalează în .claude/skills/offensive-deserialization/ · Fiecare comandă descarcă skill-ul direct de pe GitHub cu utilitarul open source skills.
Identic octet cu octet cu commit-ul scanat, cu licența depozitului și un fișier SOURCE.txt.
Vrei ca agentul să-ți propună skill-uri în timp ce scrii? Vezi cum folosești skill-urile din IDE.
Verificări de siguranță pe SKILL.md
Niciun avertisment.
De ce 83
aiqbench calculează scorul de încredere din semnale publice. Nu este un audit de securitate, așa că citește un skill înainte să-l instalezi.
Skill-uri similare
Cele mai apropiate de acesta prin ce fac și când sunt folosite.
- exploiting-insecure-deserialization26zl/cybersec-toolkitIdentifying and exploiting insecure deserialization vulnerabilities in Java, PHP, Python, and .NET applications to achieve remote code execution during authorized penetration tests.Securitate★ 82
- hunt-deserializationEncod3d-Sec/TORCHInsecure deserialization hunting across Java / .NET / PHP / Python / Ruby / Node. Gadget-chain RCE, OOB-gated blind detection, magic-byte fingerprinting. Wiki-first, FIND schema output.Inginerie★ 335
- object-injection-deserializationwpultimatesecurity/WordPress-Security-SkillsUse when code calls unserialize, maybe_unserialize, or stores serialized PHP in options, meta, or transients from untrusted input. Avoids unserialize on attacker-controlled data, prefers json_encode / json_decode, and when unserialize is unavoidable passes ['allowed_classes' => false]. Prevents PHP object injection and POP-chain remote code execution.Inginerie★ 53
- jackson-securitycxcscmu/SkillLearnBenchSecurity considerations for Jackson JSON deserialization in Java applications. This skill covers common attack patterns such as the Empty Key ("") attack vector, polymorphic type handling, nested injection, and duplicate keys, along with their root causes and recommended mitigation strategies. It provides essential background knowledge and is highly useful for addressing related security vulnerabilities. It is always recommended to invoke this skill before working on relevant security fixes.Securitate★ 91
- offensive-edr-evasion26zl/cybersec-toolkitEDR evasion offensive checklist: hook unhooking (user/kernel), direct syscalls, PPID spoofing, process injection variants, AMSI bypass, ETW patching, memory encryption, and behavior-based evasion. Use when planning EDR bypass during red team engagements or researching AV/EDR evasion techniques. Use only for authorized security research, training, or assessment.Securitate★ 82
- offensive-bug-identification26zl/cybersec-toolkitSystematic bug identification methodology: source code review patterns, black-box testing strategies, taint analysis, dangerous function hunting, data flow tracing, and automated scanning setup. Use for code audits, bug bounty triage, or building vulnerability identification pipelines. Use only for authorized security research, training, or assessment.Securitate★ 82
Note și recenzii
—
nicio recenzie
Ai încercat acest skill? Notează-l ca să-i ajuți pe alții. Autentifică-te
Discuție
Intră în discuție. Autentifică-te