diff --git a/skills/pentest/playbooks/anti-automation.md b/skills/pentest/playbooks/anti-automation.md index 2bd8bd1..eb82492 100644 --- a/skills/pentest/playbooks/anti-automation.md +++ b/skills/pentest/playbooks/anti-automation.md @@ -6,7 +6,6 @@ **CWE:** CWE-799 (Improper Control of Interaction Frequency), CWE-307 (Improper Restriction of Excessive Authentication Attempts) Broken anti-automation occurs when the application lacks effective defenses against automated, scripted, or high-frequency interactions. Attackers exploit missing CAPTCHA, absent rate limiting, predictable timing windows, or weak lockout policies to perform brute-force, credential stuffing, or manipulation attacks at scale. - --- ## Types @@ -198,4 +197,3 @@ done | **Bypassing CAPTCHA at scale (>100 requests)** | Operational disruption | --- - diff --git a/skills/pentest/playbooks/cryptographic-issues.md b/skills/pentest/playbooks/cryptographic-issues.md index 67e0ed4..d2abf61 100644 --- a/skills/pentest/playbooks/cryptographic-issues.md +++ b/skills/pentest/playbooks/cryptographic-issues.md @@ -6,7 +6,6 @@ **CWE:** CWE-327 (Use of a Broken or Risky Cryptographic Algorithm), CWE-328 (Reversible One-Way Hash), CWE-311 (Missing Encryption of Sensitive Data) Cryptographic issues encompass weak or missing cryptography: unsalted/weak password hashing, predictable pseudorandom number generation, hardcoded keys, insufficient entropy, reversible obfuscation, and forged tokens/credentials. - --- ## Types @@ -192,4 +191,3 @@ echo "Token: $TOKEN" | **Weakening security controls "to prove a point"** | System integrity violation | --- - diff --git a/skills/pentest/playbooks/csrf.md b/skills/pentest/playbooks/csrf.md index 75fe8be..6a0c53d 100644 --- a/skills/pentest/playbooks/csrf.md +++ b/skills/pentest/playbooks/csrf.md @@ -6,7 +6,6 @@ **CWE:** CWE-352 (Cross-Site Request Forgery) CSRF occurs when an application allows an attacker to trick a victim's browser into making unintended requests to an authenticated application. If the application relies solely on cookies (or other browser-automated credentials) for authentication and has no anti-CSRF controls, any external site can forge state-changing requests on behalf of authenticated users. - --- ## Types @@ -233,4 +232,3 @@ curl -X PUT "https://target.com/api/Users/1" \ | **Using CSRF for privilege escalation beyond proof** | Unauthorized access / data modification | --- - diff --git a/skills/pentest/playbooks/input-validation.md b/skills/pentest/playbooks/input-validation.md index 2e526cf..79407bb 100644 --- a/skills/pentest/playbooks/input-validation.md +++ b/skills/pentest/playbooks/input-validation.md @@ -6,7 +6,6 @@ **CWE:** CWE-20 (Improper Input Validation), CWE-1287 (Improper Validation of Specified Type of Input) Improper input validation encompasses a wide range of flaws where the application fails to validate user-supplied input for correctness, type, range, format, or boundary limits. This includes file upload flaws, boundary value issues, missing encoding validation, and type coercion bugs. - --- ## Types @@ -188,4 +187,3 @@ curl -X POST "https://target.com/api/files/upload" \ | **Canonicalize filenames** | Resolve `..`, null bytes, and alternate encodings before validation | --- - diff --git a/skills/pentest/playbooks/observability-failures.md b/skills/pentest/playbooks/observability-failures.md index 9a30e64..ba35ecb 100644 --- a/skills/pentest/playbooks/observability-failures.md +++ b/skills/pentest/playbooks/observability-failures.md @@ -6,7 +6,6 @@ **CWE:** CWE-532 (Insertion of Sensitive Information into Log File), CWE-200 (Exposure of Sensitive Information) Observability failures occur when an application leaks sensitive information through its monitoring, logging, or metrics infrastructure. Attackers can exploit exposed endpoints to learn about internal architecture, discovered credentials, user activity patterns, and system configuration. - --- ## Types @@ -155,4 +154,3 @@ curl -s "https://target.com/api/Products/invalid" 2>&1 | grep -oE "(Error:|at |S | **SIEM integration** | Forward security-relevant events to SIEM with alerting on suspicious patterns | --- - diff --git a/skills/pentest/playbooks/redirects-unvalidated.md b/skills/pentest/playbooks/redirects-unvalidated.md index a7bde2a..60de623 100644 --- a/skills/pentest/playbooks/redirects-unvalidated.md +++ b/skills/pentest/playbooks/redirects-unvalidated.md @@ -6,7 +6,6 @@ **CWE:** CWE-601 (URL Redirection to Untrusted Site) Unvalidated redirect (open redirect) occurs when an application accepts user-controlled input that specifies a redirect destination, without validating that the destination is safe. Attackers can use this to phish users, bypass access controls, or trick users into visiting malicious sites. - --- ## Types @@ -148,4 +147,3 @@ curl -v "https://target.com/login?redirect=https://target.com.evil.com" | **Canonicalize before check** | Normalize URLs before comparing to allowlist | --- - diff --git a/skills/pentest/playbooks/security-misconfiguration.md b/skills/pentest/playbooks/security-misconfiguration.md index bc70a78..ecb70f3 100644 --- a/skills/pentest/playbooks/security-misconfiguration.md +++ b/skills/pentest/playbooks/security-misconfiguration.md @@ -6,7 +6,6 @@ **CWE:** CWE-16 (Configuration) Security misconfiguration covers a wide range of flaws arising from improper system, application, or framework configuration. This includes missing security headers, debug/error exposure, deprecated endpoints left active, default configurations not hardened, unnecessary features enabled, and overly permissive cross-origin settings. - --- ## Types @@ -176,4 +175,3 @@ curl -s "https://target.com/ftp/" | grep -oE 'href="[^"]+"' | head -10 | **Regular configuration audits** | Automate security header and endpoint scanning in CI/CD | --- - diff --git a/skills/pentest/playbooks/security-through-obscurity.md b/skills/pentest/playbooks/security-through-obscurity.md index e5bfc4e..3ef45e4 100644 --- a/skills/pentest/playbooks/security-through-obscurity.md +++ b/skills/pentest/playbooks/security-through-obscurity.md @@ -6,7 +6,6 @@ **CWE:** CWE-656 (Reliance on Security Through Obscurity) Security through obscurity relies on hiding assets, data, or mechanisms rather than implementing proper security controls. Attackers can discover hidden data through steganography analysis, metadata inspection, source code review, hidden endpoint discovery, and blockchain/protocol-specific analysis. - --- ## Types @@ -201,4 +200,3 @@ curl -s "https://target.com/" | grep -oE '"[A-Za-z0-9+/=]{20,}"' | head -3 | **Metadata policy** | Enforce metadata removal in CI/CD for all build artifacts | --- - diff --git a/skills/pentest/playbooks/supply-chain.md b/skills/pentest/playbooks/supply-chain.md index 0946d7e..f5141f9 100644 --- a/skills/pentest/playbooks/supply-chain.md +++ b/skills/pentest/playbooks/supply-chain.md @@ -6,7 +6,6 @@ **CWE:** CWE-1104 (Use of Unmaintained Third-Party Components), CWE-1357 (Reliance on Insufficiently Trustworthy Components) Supply chain vulnerabilities arise from using third-party components, libraries, or services that contain known security flaws. This includes outdated libraries with known CVEs, typosquatting attacks, dependency confusion, and vulnerable transitive dependencies. - --- ## Types @@ -183,4 +182,3 @@ nmap --script ssl-enum-ciphers -p 443 target.com 2>/dev/null | grep -E "(TLS|SSL | **Dependency review** | Review transitive dependencies; remove unused dependencies | --- -