summersec

GitHub ↗

24 open-source plugins by this GitHub creator are indexed, with 2609 combined stars.

plugins: 24
stars: 2.6k
skills: 23
MCP servers: 0

Last source update: 3 weeks ago

shiro-attack2
ShiroAttack2 — Shiro-550 漏洞利用技能集：探测、密钥爆破、命令执行、内存马注入、Key 修改。
CodexClaude Code1 Skill
2.6kUpdated 4 months ago
blackbox-authz
by DeepSonar
黑盒鉴权与认证绕过挖掘. Includes 1 skill.
Claude Code1 Skill
0Updated 3 weeks ago
blackbox-deserialization
by DeepSonar
黑盒不安全反序列化挖掘. Includes 1 skill.
Claude Code1 Skill
0Updated 3 weeks ago
blackbox-file-access
by DeepSonar
黑盒任意文件读写与危险上传挖掘. Includes 1 skill.
Claude Code1 Skill
0Updated 3 weeks ago
blackbox-injection
by DeepSonar
黑盒注入挖掘（SQL/命令/NoSQL）. Includes 1 skill.
Claude Code1 Skill
0Updated 3 weeks ago
blackbox-rce
by DeepSonar
黑盒远程代码执行挖掘. Includes 1 skill.
Claude Code1 Skill
0Updated 3 weeks ago
blackbox-secrets
by DeepSonar
黑盒高危密钥与凭据暴露挖掘. Includes 1 skill.
Claude Code1 Skill
0Updated 3 weeks ago
blackbox-ssrf
by DeepSonar
黑盒 SSRF 挖掘. Includes 1 skill.
Claude Code1 Skill
0Updated 3 weeks ago
blackbox-xxe
by DeepSonar
黑盒 XXE 挖掘. Includes 1 skill.
Claude Code1 Skill
0Updated 3 weeks ago
mobile-audit
by DeepSonar
移动客户端 App（Android APK / iOS IPA）安全审计方法论：静态解包与攻击面枚举、代码/数据流、混合栈与内嵌 SDK、真机动态验证、PoC 攻击者 App、证据包。不定级；定级配合 vuln-definitions 与 vuln-definitions-mobile。
Claude Code1 Skill
0Updated 3 weeks ago
vuln-definitions
by DeepSonar
漏洞定义模块：每类漏洞的定义，以及严重 / 高危 / 中危 / 无危害的判定标准。白盒与黑盒审计的共用语义基线。OpenHarmony 系统类加载 references/openharmony.md；Chrome / Chromium 浏览器加载 references/chromium.md；数据库（ClickHouse 等 DBMS / 数据库云平台）加载 references/database.md；移动端（Android / iOS App）加载 references/mobile.md（四档 + 调整/无效；项目规则见 vuln-definitions-mobile 的 google-android-devices-rules.md）。
Claude Code1 Skill
0Updated 3 weeks ago
vuln-definitions-chrome
by DeepSonar
Chrome / Chromium 浏览器漏洞定义：官方四档（S0–S3）与缓解/非安全条款，外加进程沙箱、Site Isolation、浏览器形态与 Chrome VRP 资格（不定级）。
Claude Code1 Skill
0Updated 3 weeks ago
vuln-definitions-db
by DeepSonar
数据库领域漏洞定义：DBMS 通用形态（认证/RBAC/查询处理/存储引擎/外部访问/复制/云控制面/泄露/密钥/内存安全）与 Bugcrowd VRT P1–P5 → 四档映射；含 ClickHouse Bugcrowd 项目资产范围、合格条款、赏金资格（不定级）、历史漏洞模式库（定级校准 + 挖掘切入点）与 Langfuse Cloud 厂商文件（安全架构特征 + 挖掘候选）。
Claude Code1 Skill
0Updated 3 weeks ago
vuln-definitions-mobile
by DeepSonar
移动端（Android App + iOS App）领域漏洞定义：形态主表（Deep Link / URL Scheme / WebView / Intent / 组件导出 / Content Provider / 广播 / 文件路径 / 认证逻辑 / 权限与 WIU / UI 覆盖与点按劫持 / 跨用户与 Private Space / 数据存储密钥 / SSL-TLS 证书 / 内存安全）与 HackerOne 移动端赏金惯例 → 四档映射；含调整/无效条款、Gate 门禁、Android·iOS 攻击面索引、历史漏洞模式库（案例归纳 + 定级校准 + 挖掘切入点），以及 Google Bug Hunters 的 Android 与 Google 设备项目规则（范围 / 资格 / PoC 与补丁要求 / 奖金与 SNR 纪律，不定级）。本地 DoS（杀进程 / 纯崩溃 / 资源耗尽）按 INV1 不报；破坏性远程 DoS 按 H8 报。入口面本身（exported / 自定义 scheme / 不校验调用方）按 INV26 不报。
Claude Code
0Updated 3 weeks ago
vuln-definitions-oh
by DeepSonar
OpenHarmony / Phone OS 系统漏洞定义：官方四档与调整/无效条款，外加移动 OS 通用漏洞类型（内核/HDF/IPC/沙箱/Ark/近场软总线/OTA 等，对齐 Android·iOS 形态）。
Claude Code1 Skill
0Updated 3 weeks ago
vuln-scoring
by DeepSonar
漏洞评分模块：支持 CVSS v3.1 与 v4.0（按需加载），映射 DeepSonar 四级定级，并补充 EPSS/SSVC/KEV 优先级指引。
Claude Code1 Skill
0Updated 3 weeks ago
whitebox-authz
by DeepSonar
白盒鉴权与认证绕过审计. Includes 1 skill.
Claude Code1 Skill
0Updated 3 weeks ago
whitebox-deserialization
by DeepSonar
白盒不安全反序列化审计. Includes 1 skill.
Claude Code1 Skill
0Updated 3 weeks ago
whitebox-file-access
by DeepSonar
白盒任意文件读写与危险上传审计. Includes 1 skill.
Claude Code1 Skill
0Updated 3 weeks ago
whitebox-injection
by DeepSonar
白盒注入审计（SQL/命令/NoSQL/LDAP）. Includes 1 skill.
Claude Code1 Skill
0Updated 3 weeks ago
whitebox-rce
by DeepSonar
白盒远程代码执行审计. Includes 1 skill.
Claude Code1 Skill
0Updated 3 weeks ago
whitebox-secrets
by DeepSonar
白盒高危密钥与凭据暴露审计. Includes 1 skill.
Claude Code1 Skill
0Updated 3 weeks ago
whitebox-ssrf
by DeepSonar
白盒 SSRF 审计. Includes 1 skill.
Claude Code1 Skill
0Updated 3 weeks ago
whitebox-xxe
by DeepSonar
白盒 XXE 审计. Includes 1 skill.
Claude Code1 Skill
0Updated 3 weeks ago