testing security debugging Skills
Discover the best skills in this category.
file-path-traversal-testi...
by zebbern
This skill should be used when the user asks to "test for directory traversal", "exploit path traversal vulnerabilities"...
red-team-tools-and-method...
by zebbern
This skill should be used when the user asks to "follow red team methodology", "perform bug bounty hunting", "automate r...
cross-site-scripting-and-...
by zebbern
This skill should be used when the user asks to "test for XSS vulnerabilities", "perform cross-site scripting attacks",...
wireshark-network-traffic...
by zebbern
This skill should be used when the user asks to "analyze network traffic with Wireshark", "capture packets for troublesh...
burp-suite-web-applicatio...
by zebbern
This skill should be used when the user asks to "intercept HTTP traffic", "modify web requests", "use Burp Suite for tes...
Analyze PR diffs and generate review comments from code quality, security, and performance perspectives. Use for code re...
anti-cheat-systems
by gmh5225
Guide for understanding anti-cheat systems and bypass techniques. Use this skill when researching game protection system...
reverse-engineering-tools
by gmh5225
Guide for reverse engineering tools and techniques used in game security research. Use this skill when working with debu...
dma-attack-techniques
by gmh5225
Guide for Direct Memory Access (DMA) attack techniques using FPGA hardware. Use this skill when researching PCIe DMA att...
windows-kernel-security
by gmh5225
Guide for Windows kernel security research including driver development, system callbacks, security features, and kernel...
graphics-api-hooking
by gmh5225
Guide for graphics API hooking and rendering techniques for DirectX, OpenGL, and Vulkan. Use this skill when working wit...
dwarf-expert
by trailofbits
Provides expertise for analyzing DWARF debug files and understanding the DWARF debug format/standard (v3-v5). Triggers w...
address-sanitizer
by trailofbits
AddressSanitizer detects memory errors during fuzzing. Use when fuzzing C/C++ code to find buffer overflows and use-afte...
libfuzzer
by trailofbits
Coverage-guided fuzzer built into LLVM for C/C++ projects. Use for fuzzing C/C++ code that can be compiled with Clang.
burpsuite-project-parser
by trailofbits
Searches and explores Burp Suite project files (.burp) from the command line. Use when searching response headers or bod...
harness-writing
by trailofbits
Techniques for writing effective fuzzing harnesses across languages. Use when creating new fuzz targets or improving exi...
burp-suite
by trailofbits
Burp Suite Professional is an HTTP interception proxy with numerous security testing features. Use when testing web appl...
codeql
by trailofbits
CodeQL is a static analysis framework that queries code as a database. Use when you need interprocedural analysis or com...
audit-context-building
by trailofbits
Enables ultra-granular, line-by-line code analysis to build deep architectural context before vulnerability or bug findi...
constant-time-analysis
by trailofbits
Detects timing side-channel vulnerabilities in cryptographic code. Use when implementing or reviewing crypto code, encou...
coverage-analysis
by trailofbits
Coverage analysis measures code exercised during fuzzing. Use when assessing harness effectiveness or identifying fuzzin...
codeql
by trailofbits
Run CodeQL static analysis for security vulnerability detection, taint tracking, and data flow analysis. Use when asked...
secure-workflow-guide
by trailofbits
Guide you through Trail of Bits' 5-step secure development workflow. Runs Slither scans, checks special features (upgrad...
constant-time-testing
by trailofbits
Constant-time testing detects timing side channels in cryptographic code. Use when auditing crypto implementations for t...