What is aimy-armor-break?

A guide for using aimy-skill's defence-bypass tools when a web request is blocked by a WAF, a web application firewall. It covers identifying the firewall, changing request encodings or formats, and verifying whether a suspected test succeeds.

Use it during authorised security testing to identify WAFs, try payload variations, maintain sessions, and verify suspected injection or command-execution paths.

It provides a controlled process for distinguishing a blocked test from a failed vulnerability check, with comparison requests to reduce false conclusions.

aimy-armor-break — Skill for Claude Code and Codex by Prohao42

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent

npx skills add Prohao42/aimy-skill --skill aimy-armor-break

Clone the repo

git clone --depth 1 https://github.com/Prohao42/aimy-skill

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/prohao42/aimy-skill/aimy-armor-break/github.svg)](https://agentmods.dev/skills/prohao42/aimy-skill/aimy-armor-break)

Your own site

<a href="https://agentmods.dev/skills/prohao42/aimy-skill/aimy-armor-break"><img src="https://agentmods.dev/badge/skills/prohao42/aimy-skill/aimy-armor-break/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/prohao42/aimy-skill/aimy-armor-break"><img src="https://agentmods.dev/badge/skills/prohao42/aimy-skill/aimy-armor-break.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 71 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 1,859 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00071	$0.01859
Opus 5.5	$0.00028	$0.00744
Sonnet 5.5	$0.00014	$0.00372
Haiku 4.5	$0.00007	$0.00186

Measured 2d ago against content hash e68b686a16d4, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

aimy-armor-break scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

ai-mian/hack-skills/skills/aimy-armor-break/SKILL.md · 112 lines

How it starts

The opening of the file, as written. The whole thing — 112 lines — stays where its author put it; the contents beside it link to each section on GitHub.

SKILL: aimy-skill 破甲（防御绕过）全流程

定位：破甲 = 先指纹识别 WAF，再按 WAF 选编码链与 HTTP 协议绕过，最后负对照验证。不是无脑塞 payload，而是"识别甲 → 选对武器 → 穿透 → 证明穿透"。

0. 命令速查（CLI）

目的	命令
破甲一键	`python main.py poja URL --param id --payload "…" [--waf cloudflare] [--session-file sess.json]`
WAF 指纹	`python main.py waf URL`
严格绕过（指纹+重放）	`python main.py waf-heavy URL --param PARAM --session-file sess.json`
payload 变异	`python main.py payload-mutate --payload "…" --param "id"`
模糊测试	`python main.py fuzz-engine --url URL --param PARAM --vuln-type sql --count 200`
反弹 shell 编码	`python main.py reverse-shell --lhost LHOST --lport LPORT --encode b64`

1. 破甲五步

① 指纹识别（先看甲是什么）

python main.py waf https://target.com

30+ 种 WAF 指纹（以源码 WAF_SIGNATURES 为准，README 标的 14 已过期），高频： cloudflare / akamai / aws_waf / mod_security / imperva / f5_bigip / sucuri / barracuda / fortinet / wordfence / citrix_netscaler / aliyun_waf(阿里云盾) / baidu_yunjiasu(百度云加速) / tencent_waf(腾讯) / 360_wangzhan / chaitin_waf(长亭 SafeLine) / hws_waf(华为) / naxsi / webknight 等。

判别依据：响应头（cf-ray / x-sucuri-id / x-amzn-* / x-ts-*）、拦截页文本（拦截提示 / request blocked / 参考号 reference #）。

② 判定拦截（确认是 WAF 而非业务报错）

用 tools/waf_bypass.py 的 is_blocked(resp, threshold) 和 classify_block(resp) 区分：

WAF 拦截：状态码 403/406/412、set-cookie 里出现 __cfduid、body 命中拦截关键词
业务报错：返回 200 但内容为空、框架统一错误页（无表名/版本）

③ 选编码链（按 WAF 与漏洞类型）

tools/waf_bypass.py 的 BypassEncoder 提供 20 个编码器，常用链：

url_encode        double_url_encode   unicode_url_encode  overlong_utf8_encode
ibm037_encode     hex_encode          null_bytes          case_random
scientific_notation  negative_sign    tab_injection       newline_injection
crlf_injection    comment_before_keyword  mixed_case_heavy  logical_swaps
eq_to_like        scientific_alternative  versioned_comment  redundant_url_encode

按 WAF 分派（generate_sqli_payloads(raw, waf_name) 已内置策略）：

Cloudflare / 安全狗 → versioned_comment + comment_before_keyword（/*!50000*/、/**/）
ModSecurity 类 → double_url_encode + case_random（规则按小写关键字匹配）
阿里云盾 / 腾讯 → scientific_notation + eq_to_like（1e0 绕过数字过滤、LIKE 替代 =)
长亭 SafeLine → logical_swaps + negative_sign（语义等价改写）

Read the full file on GitHub · 112 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

2d ago First seen · 112 lines · 71 tokens per session scan A e68b686a16d4

Subscribe to this mod's changes

aimy-armor-break is a skill published in the GitHub repository Prohao42/aimy-skill (69 stars, last pushed 2d ago), licensed MIT. It adds 71 tokens to every session and 1,859 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-11-05.