MingyiSecLab

MingyiSecLab/Mingyi-Atlas

Skill Claude CodeCodex

Build chains where IDOR enables privilege escalation and high-impact control-plane actions.

MingyiSecLab/Mingyi-Atlas

Skill Claude CodeCodex

Build and validate SSRF pivot chains toward metadata/infra control and final code execution impact.

MingyiSecLab/Mingyi-Atlas

Skill Claude CodeCodex

Build chains from XSS into account takeover or privileged action execution.

MingyiSecLab/Mingyi-Atlas

Skill Claude CodeCodex

Hunt OS command injection (CWE-78) — user input reaching shell, exec, or system calls. Covers argument-array bypasses, path confusion, and template-string injection in modern frameworks.

MingyiSecLab/Mingyi-Atlas

Skill Claude CodeCodex

Hunt insecure deserialization (CWE-502) across Python pickle, Java ObjectInputStream / Jackson / SnakeYAML, .NET BinaryFormatter / DataContractJson, PHP unserialize, Ruby Marshal/YAML.load, and Node.js vm. Direct path to unauthenticated RCE.

MingyiSecLab/Mingyi-Atlas

Skill Claude CodeCodex

Hunt Insecure Direct Object Reference (CWE-639) — missing authorization checks on object IDs. Covers horizontal vs vertical privilege escalation, UUID vs integer guessing, and GraphQL introspection-driven IDOR discovery.

MingyiSecLab/Mingyi-Atlas

Skill Claude CodeCodex

Hunt directory traversal and archive traversal (ZipSlip/TarSlip) from user input to filesystem operations.

MingyiSecLab/Mingyi-Atlas

Skill Claude CodeCodex

Systematic pattern exhaustion methodology. Load after finding any confirmed vulnerability to search for all instances of the same root cause pattern across the codebase.

MingyiSecLab/Mingyi-Atlas

Skill Claude CodeCodex

Hunt LLM prompt injection and tool-call hijacking in modern AI-integrated applications (CWE-1427). Covers indirect injection via RAG, tool abuse, exfiltration chains, and jailbreak-to-RCE pivots on agentic systems.

MingyiSecLab/Mingyi-Atlas

Skill Claude CodeCodex

Hunt JavaScript prototype pollution (CWE-1321) — the 2023-2026 meta-vulnerability that chains into RCE, auth bypass, and SSRF on most Node.js stacks.

MingyiSecLab/Mingyi-Atlas

Skill Claude CodeCodex

Hunt SQL injection (CWE-89) via source-level taint tracking. Covers string concat, format-string, ORM raw queries, second-order injection, and NoSQL injection in MongoDB/DynamoDB.

MingyiSecLab/Mingyi-Atlas

Skill Claude CodeCodex

Hunt Server-Side Request Forgery (CWE-918) through taint analysis from user-controlled URLs to HTTP client sinks. Covers cloud metadata pivoting, DNS rebinding, gopher smuggling, and the IMDSv1 → IAM role chain that turns SSRF into RCE.

MingyiSecLab/Mingyi-Atlas

Skill Claude CodeCodex

Hunt server-side template injection across Jinja2/Twig/Freemarker/Velocity/Handlebars and validate progression from expression injection to code execution.

MingyiSecLab/Mingyi-Atlas

Skill Claude CodeCodex

Trust boundary mapping and startup sequence audit for developer tools, CLI apps, and plugin systems. Load when the target is a developer tool, CLI, IDE extension, or any application that loads config from the current directory.

MingyiSecLab/Mingyi-Atlas

Skill Claude CodeCodex

Hunt XML External Entity flaws in parsers and validate file read / SSRF impact with strict negative controls.

MingyiSecLab/Mingyi-Atlas

Skill Claude CodeCodex

Atlas orchestrator workflow — engagement intake, OPPLAN build, execution loop via task() delegation, final report. Tools=[]; everything ships through sub-agents.

MingyiSecLab/Mingyi-Atlas

Skill Claude CodeCodex

Red team engagement lifecycle management — initiation, phase transitions, go/no-go gates, deconfliction, emergency procedures, completion.

MingyiSecLab/Mingyi-Atlas

Skill Claude CodeCodex

Mandatory first-turn startup procedure — checks for existing engagements, resume/new selection, workspace initialization.

MingyiSecLab/Mingyi-Atlas

Skill Claude CodeCodex

Final engagement report generation — executive summary, technical report, findings aggregation, attack path narrative, detection gap matrix, remediation roadmap.

MingyiSecLab/Mingyi-Atlas

Skill Claude CodeCodex

Kill chain analysis and attack path decision-making — findings analysis, attack vector selection, target prioritization, phase transitions.

MingyiSecLab/Mingyi-Atlas

Skill Claude CodeCodex

Atlas orchestrator patterns — delegation, state management, adaptive re-planning, context handoff protocols.

MingyiSecLab/Mingyi-Atlas

Skill Claude CodeCodex

Cloud exploitation lane — AWS IAM privesc, S3 takeover, k8s RBAC abuse, Terraform state leaks, cloud metadata pivoting.

MingyiSecLab/Mingyi-Atlas

Skill Claude CodeCodex

Enumerate AWS IAM policies, detect privilege escalation paths per Rhino Security Labs canonical 21 primitives.

MingyiSecLab/Mingyi-Atlas

Skill Claude CodeCodex

AWS IAM privilege escalation via iam:PassRole chains — Lambda/Glue/Sagemaker/EC2/ECS PassRole to a higher-priv role, AssumeRole chains across accounts, sts:GetCallerIdentity recon, account hijack via legacy root-mfa-bypass.