中文文档 | English

Penetration testing knowledge base with security methodologies in AI Agent-executable format.

Skills/ — 200+ skill methodologies covering the full chain from recon to post-exploitation

• ai-security/ — AI security (prompt injection, model jailbreaking, prompt leaking, agent attack chains)
• cloud/ — Cloud environments (Docker escape, K8s attack chains, AWS IAM, Alibaba Cloud, Tencent Cloud, Serverless)
• code-audit/ — Code auditing (PHP 8-skill system, Java 8-skill system covering injection/file/serialization/auth/framework/exploit chains)
• ctf/ — CTF competitions (Web challenges, reversing, PWN, cryptography, forensics, AI/ML)
• dfir/ — Digital forensics & incident response (memory forensics & anti-forensics, disk forensics, log evasion)
• evasion/ — Evasion techniques (C2 frameworks, shellcode generation, security research)
• exploit/ — Exploitation (organized by subcategory)
  • advanced/ — Advanced exploitation (HTTP smuggling, race conditions, supply chain attacks, OT/ICS, crypto attacks)
  • auth/ — Authentication & authorization (JWT, OAuth/SSO, IDOR, CORS, CSRF, cookie analysis)
  • binary/ — Binary exploitation methodology and tools
  • network-service/ — Network service pentesting by port/protocol (SMB, FTP, SMTP, DNS, LDAP, etc.)
  • web-method/ — Web methodology (injection, XSS, SSRF, SSTI, file upload, deserialization, WAF bypass...)
• general/ — General (report generation, supply chain auditing, mobile backend API)
• hardware/ — Hardware/physical access pentesting
• lateral/ — Lateral movement (AD domain attacks, NTLM relay, database pivoting, Kerberoasting, ACL abuse)
• malware/ — Malware (sample analysis methodology, C2 beacon config extraction, sandbox evasion)
• mobile/ — Mobile app pentesting (Android, iOS)
• postexploit/ — Post-exploitation
  • post-exploit-linux/ / post-exploit-windows/ — OS-level privilege escalation, credential theft
  • persist-maintain/ — Persistence techniques (cron, services, webshell)
  • tool-delivery/ — Tool delivery to compromised hosts (fscan, frp, chisel, linpeas, mimikatz, etc.; Linux/Windows transfer methods: wget/curl/certutil/bitsadmin/PowerShell/python/nc/base64/SMB; no-egress scenarios, AV bypass, post-exec cleanup)