mcpField
P
pentest-vuln-verify-test

pentest-vuln-verify-test

github.com/jd-opensourceSecurity31549 installsUpdated 28w ago
Repository

About pentest-vuln-verify-test

A security-testing skill that automates web vulnerability verification by parsing and rebuilding raw HTTP requests. It focuses on open redirects and XSS, including cookie-based session switching and response checks.

Key features

  1. 01Raw HTTP request parsing and reconstruction
  2. 02Cookie-based session switching
  3. 03Automated payload delivery
  4. 04Meta Refresh and HTTP 30x response matching

Use cases

  1. 01Verify an open redirect with a crafted request
  2. 02Test XSS payloads across authenticated sessions

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/jd-opensource/joysafeter --skill pentest-vuln-verify-test

After installing, type/pentest-vuln-verify-testin Claude Code to confirm it loaded.

Bundled files

References and scripts installed along with SKILL.md.

scan_demo.sh
verify.sh
references/
tools.md
workflows.md

Details

From the project README

漏洞验证自动化

描述

此技能专注于通过操作原始 HTTP 请求来自动验证 Web 漏洞（特别是开放重定向和 XSS）。它处理会话上下文切换（Cookie 替换）和严格的成功标准验证。

核心能力

  • 原始 HTTP 请求解析与重构
  • 认证会话操作（Cookie 交换）
  • 自动 Payload 投递
  • 响应模式匹配（Meta Refresh / HTTP 30x）

参考工作流

工具

  • Curl (HTTP 客户端)
  • Bash (脚本编写)
  • Grep (响应解析)
  • Burp Suite (用于生成原始请求)

Comments

Markdown supported