feat: add skills for specific tools (#366)
Co-authored-by: 0xallam <ahmed39652003@gmail.com>
This commit is contained in:
@@ -81,6 +81,21 @@ Protocol-specific testing techniques.
|
||||
| --------- | ------------------------------------------------ |
|
||||
| `graphql` | GraphQL introspection, batching, resolver issues |
|
||||
|
||||
### Tooling
|
||||
|
||||
Sandbox CLI playbooks for core recon and scanning tools.
|
||||
|
||||
| Skill | Coverage |
|
||||
| ----------- | ------------------------------------------------------- |
|
||||
| `nmap` | Port/service scan syntax and high-signal scan patterns |
|
||||
| `nuclei` | Template selection, severity filtering, and rate tuning |
|
||||
| `httpx` | HTTP probing and fingerprint output patterns |
|
||||
| `ffuf` | Wordlist fuzzing, matcher/filter strategy, recursion |
|
||||
| `subfinder` | Passive subdomain enumeration and source control |
|
||||
| `naabu` | Fast port scanning with explicit rate/verify controls |
|
||||
| `katana` | Crawl depth/JS/known-files behavior and pitfalls |
|
||||
| `sqlmap` | SQLi workflow for enumeration and controlled extraction |
|
||||
|
||||
## Skill Structure
|
||||
|
||||
Each skill is a Markdown file with YAML frontmatter for metadata:
|
||||
|
||||
Reference in New Issue
Block a user