Loading...
Loading...
Found 4 Skills
This skill should be used when the user asks to "test for directory traversal", "exploit path traversal vulnerabilities", "read arbitrary files through web applications", "find LFI vu...
Prototype pollution testing for JavaScript stacks. Use when user input is merged into objects (query parsers, JSON bodies, deep assign), when configuring libraries via untrusted keys, or when hunting RCE gadgets via polluted Object.prototype in Node or the browser.
Use when operating the vigolium CLI for web vulnerability scanning, security testing, traffic ingestion, server management, AI agent-driven scanning and code review, cloud-storage management, or writing custom JavaScript extensions. Invoke for scan commands, scan-url, scan-request, run, ingest, server, agent (query/autopilot/swarm/olium/piolium/audit/session), traffic browsing, database queries, storage uploads/downloads, module management, extension scripting, export, project management, and configuration tuning.
Security Audit Tool for ThinkPHP Framework Special Features. Conducts white-box static audits on common mechanisms of ThinkPHP such as authentication/CSRF/template escaping/ORM writing (Mass Assignment)/debugging and configuration exposure, and maps to a general vulnerability type system (AUTH/CSRF/TPL/XSS/LOGIC/CFG/SESS/SQL, etc.).