一个面向 Web 版桌面 安全测试的 AI Agent 平台，集成侦察、分析、规划、工具调用与反馈学习，实现自主完成渗透测试工作流An AI Agent platform for web-based security testing, integrating reconnaissance, analysis, planning, tool orchestration, and feedback-driven learning to autonomously execute penetration testing workflows.
CuriousLearnerDev/Online_Tools-AI
Skill Claude CodeCodex
A PHP web security checker for archive extraction, such as unpacking ZIP files. It checks whether archive paths can escape the intended folder, a problem known as Zip Slip or path traversal.
CuriousLearnerDev/Online_Tools-AI
Skill Claude CodeCodex
A multi-file PHP web security audit pipeline that coordinates several specialized checks. It uses sink types, meaning risky operations where untrusted data may cause harm, to choose the relevant audits.
CuriousLearnerDev/Online_Tools-AI
Skill Claude CodeCodex
A PHP web security checker for authentication and authorization code. Authentication verifies who a user is; authorization controls what that user may access.
CuriousLearnerDev/Online_Tools-AI
Skill Claude CodeCodex
A PHP source-code checker for command injection. It traces user-controlled input into functions that run operating-system commands, such as exec or system.
CuriousLearnerDev/Online_Tools-AI
Skill Claude CodeCodex
A source-code security checker for the CodeIgniter PHP framework. CodeIgniter is a framework for building PHP web applications.
CuriousLearnerDev/Online_Tools-AI
Skill Claude CodeCodex
A PHP web configuration security checker. It reviews settings such as cross-origin access rules, error display, debugging, security headers, and risky runtime options.
CuriousLearnerDev/Online_Tools-AI
Skill Claude CodeCodex
A PHP web security checker for CRLF and HTTP response-splitting flaws. These flaws can occur when user input reaches response headers with unsafe line-break characters.
CuriousLearnerDev/Online_Tools-AI
Skill Claude CodeCodex
A PHP source-code checker for cryptography and secret-key safety. It reviews hashing, encryption, embedded keys, and signature verification.
CuriousLearnerDev/Online_Tools-AI
Skill Claude CodeCodex
A security review tool for PHP web source code that checks protection against cross-site request forgery (CSRF), an attack that tricks a logged-in user into changing data.
CuriousLearnerDev/Online_Tools-AI
Skill Claude CodeCodex
A security review tool for PHP web source code that checks for unsafe object deserialization, where data is turned back into PHP objects.
CuriousLearnerDev/Online_Tools-AI
Skill Claude CodeCodex
A tool for linking confirmed or suspected vulnerabilities into a multi-stage attack path based on the conditions needed to exploit them.
CuriousLearnerDev/Online_Tools-AI
Skill Claude CodeCodex
A PHP source-code auditing tool for expression injection, where user-controlled text is evaluated as an expression and may run sensitive operations.
CuriousLearnerDev/Online_Tools-AI
Skill Claude CodeCodex
A security audit tool for PHP web source code that checks for arbitrary file reads and path traversal. Path traversal is a flaw that can let someone access files outside the intended folder.
CuriousLearnerDev/Online_Tools-AI
Skill Claude CodeCodex
A security review tool for PHP web code that handles file uploads. It examines how uploaded files are checked, named, and saved.
CuriousLearnerDev/Online_Tools-AI
Skill Claude CodeCodex
A security review tool for PHP web code that traces user-controlled data into file-writing operations.
CuriousLearnerDev/Online_Tools-AI
Skill Claude CodeCodex
A security review tool for PHP code that performs file-system operations such as creating, deleting, linking, or changing permissions on files and folders.
CuriousLearnerDev/Online_Tools-AI
Skill Claude CodeCodex
A white-box security-audit skill for Laravel applications. Laravel is a PHP framework, and the audit checks framework-specific areas such as permissions, request forgery protection, sessions, model assignment, and template output.
CuriousLearnerDev/Online_Tools-AI
Skill Claude CodeCodex
A security-audit skill for PHP web source code that checks for LDAP injection. LDAP is a directory system, and injection can happen when user-controlled text changes a directory search or record path.
CuriousLearnerDev/Online_Tools-AI
Skill Claude CodeCodex
A PHP security audit tool for application logs and monitoring. It checks whether security events are recorded safely, whether sensitive data is logged, and whether logs and alerts can be forged or fail to work.
CuriousLearnerDev/Online_Tools-AI
Skill Claude CodeCodex
A PHP source-code checker for business-logic flaws: mistakes in how an application handles steps, states, payments, or data updates. It covers issues beyond basic login and permission checks.
CuriousLearnerDev/Online_Tools-AI
Skill Claude CodeCodex
A PHP source-code checker for NoSQL injection, where untrusted input changes a document-database query. It focuses on MongoDB or DocumentDB query construction and operators such as `$gt`, `$ne`, and `$where`.
CuriousLearnerDev/Online_Tools-AI
Skill Claude CodeCodex
A PHP source-code checker for open redirects, where user-controlled input sends a visitor to an unintended website. It follows redirect destinations into `Location` headers and redirect functions and reviews validation and allowlists.
CuriousLearnerDev/Online_Tools-AI
Skill Claude CodeCodex
A PHP source-code analyzer that lists web entry routes and their parameters. It produces request templates and a complete parameter list for those routes.
CuriousLearnerDev/Online_Tools-AI
Skill Claude CodeCodex
A PHP source-code data-flow tracer that follows a chosen web route from its handler to a final sensitive operation, called a sink. It tracks parameters and variables and reports whether user input can control them, without declaring a vulnerability.