sk Skill · PentesterFlow
webvuln
Web vulnerability hunting playbook. Use after recon, when you have specific hosts/endpoints to test for IDOR/BAC, injection, auth flaws, SSRF, and known CVEs. Emphasizes real PoC + concrete impact.
Open on skills.sh ↗read 2026-09-17
- installs 8w
- 0
- 30-day movement
- starts with the next reading
- Related entries
- 1
- Connections
- 5
TypeScript
- Host repository
- PentesterFlow/agent
- Allowed tools
- shell, http, web_search, web_fetch, file_write
- Host stars
- 1,360
- Host language
- TypeScript