Über diesen Skill
Pentest a web app or website end to end — black-box testing of a live URL, staging environment, or local dev server that finds and exploits real vulnerabilities (auth bypass, broken access control, IDOR, injection, XSS, SSRF, business logic) and proves each one with a working proof-of-concept instead of a signature match.
Warum wir es empfehlen
A task from Strix Security Testing Skills. Retain the upstream supporting files and follow the repository’s setup instructions.
Vor der Nutzung
- Strix CLI with its Docker/LLM configuration, or a managed Strix account. Scans require an authorized target and relevant test credentials.
Unterstützte Agents
Claude CodeCodex CLICursorGitHub Copilot
Quellen und Referenzen
Die Originalquellen sind unten verlinkt. Praktische Einstiegsideen sind redaktionelle Vorschläge von SkillHey.