Hands-off coding executor: one command → build → evaluate → localhost ready. Master controller, ephemeral ECC subagents, durable plan.dag.json state, deferred security review,…
Use when setting up or managing pentest environments with Exegol, launching offensive security containers, configuring VPN/network for engagements, or when the user mentions…
Create Harness STO security exemptions (waivers) for vulnerabilities found by SAST, SCA, DAST, secret, container, or IaC scanners.
Use to inventory an existing backend before changing it — framework, structure, API surface, auth/authorization model, data layer, jobs, integrations, tests, security posture.
Use when a codebase already exists, before proposing any changes. It inventories structure, stack, applications present, tests, security posture, and implementation state so…
Audit the Exobrain harness REPO itself — scans tracked files for leaked personal data, checks legibility for stranger cloning, analyzes architecture, and surfaces AI productivity…
Orchestrate evidence-gated AI software delivery from an ambiguous request through product framing, implementation, verification, operational safety, and durable closeout.
Use when the user wants to act on an audit, fix the findings in a line-check/bug-hunt/security-sweep report, work a prioritized backlog, or asks to "fix the findings", "work the…
Coordinate field feeding, hydration, ration quality, and expeditionary aquaculture fallback options for U.S.
Dodaje fakturę zakupu (koszt) do rejestru SQLite — zapisuje sprzedawcę, NIP, kwoty, kategorię, datę wpływu.
Use when designing or configuring public pages on an Experience Cloud site — guest user profile setup, page-level access settings in Experience Builder, object/field visibility…
Use when configuring access controls, sharing, or site security for authenticated or guest Experience Cloud (community) users: external OWD, Sharing Sets, Share Groups, CSP,…
Selects the most relevant experiences, projects, awards, and credentials from the master context based on JD keywords.
Dispatches `forge-expert` subagents in parallel — one per chosen domain — to produce focused analyses of a feature against the codebase before a plan is drafted.
Surfaces inconsistencies, opinion shifts, methodological flaws, and credential discrepancies across expert reports, transcripts, CVs, and publications for impeachment,…
ACTIVATE when the user asks for expert analysis in non-code domains like security audits, product management, competitive analysis, vendor evaluation, or architecture review.
Produces structured expert witness analyses covering qualifications, opinions, methodology, admissibility (Daubert/Frye), and cross-examination vulnerabilities.
Critiques opposing expert witness reports for admissibility challenges, disclosure deficiencies, and cross-examination vulnerabilities.
Analizuje endpoint Express — wyjaśnia co robi, jakie ma wektory ataku (OWASP), jak zabezpieczyć. Używaj przy nauce nowych endpointów lub security.
Explain the SOVD Security Helper project architecture, API, and purpose. Use when someone asks what this project does or needs onboarding context.
Tests OAuth 2.0 and OpenID Connect implementations for security flaws including authorization code interception, redirect URI manipulation, CSRF in OAuth flows, token lea — from…
Custom exploit development workflow — write, test, and iterate on exploit code for discovered vulnerabilities.
Systematic methodology for developing reliable exploits from vulnerability discovery to weaponization
Develop working exploits using pwntools. Includes exploit template and common patterns.
Exploit researcher persona specializing in attack surface analysis, exploit scenario generation, and vulnerability chaining
Real-World Exploit Priority (RWEP) scoring — CVSS plus KEV, PoC, AI-acceleration, blast radius, live-patch factors
Comprehensive knowledge about vulnerability exploitation and initial access. Provides expertise on finding and adapting exploits, adapting proof-of-concepts, gaining shel — from…
Use when you are in the Bayesian optimization loop after fitting a Gaussian Process model to observed LC gradient runs, and you need to propose the next gradient to evaluate.
Comprehensive knowledge about vulnerability exploitation and initial access. Provides expertise on finding and adapting exploits, adapting proof-of-concepts, gaining shel — from…
Exploit misconfigured Active Directory Certificate Services (AD CS) ESC1 vulnerability to request certificates
BloodHound is a graph-based Active Directory reconnaissance tool that uses graph theory to reveal hidden and
Enumerate and exploit Active Directory Certificate Services ESC1 through ESC16 misconfigurations with Certipy, including SAN abuse, NTLM relay to web enrollment (ESC8), and golden…
Tests APIs for injection vulnerabilities including SQL injection, NoSQL injection, OS command injection, LDAP
Runs the Pacu AWS exploitation framework end-to-end — session and credential setup, IAM enumeration, automated privilege-escalation scanning via iam__privesc_scan, and…
Analyzes and simulates BGP hijacking scenarios in authorized lab environments to assess route origin validation,
Tests APIs for Broken Function Level Authorization (BFLA) vulnerabilities where regular users can invoke administrative
Discover and exploit broken link hijacking vulnerabilities by identifying references to expired domains, decommissioned
Exploit Kerberos Constrained Delegation misconfigurations in Active Directory to impersonate privileged users
Tests and exploits deep link (URL scheme and App Link) vulnerabilities in Android and iOS mobile applications
Tests APIs for excessive data exposure where endpoints return more data than the client application needs, relying
Detecting and exploiting HTTP request smuggling vulnerabilities caused by Content-Length and Transfer-Encoding
Identifying and exploiting Insecure Direct Object Reference vulnerabilities to access unauthorized resources
Identifies and exploits insecure local data storage vulnerabilities in Android and iOS mobile applications including
Identifying and exploiting insecure deserialization vulnerabilities in Java, PHP, Python, and .NET applications
Identifies and exploits IPv6-specific vulnerabilities including SLAAC spoofing, Router Advertisement flooding,
Exploits JWT algorithm confusion vulnerabilities where the server''s token verification library accepts the
Perform Kerberoasting attacks using Impacket's GetUserSPNs to extract and crack Kerberos TGS tickets for Active
Discover and exploit mass assignment vulnerabilities in REST APIs to escalate privileges, modify restricted fields,
MS17-010 (EternalBlue) is a critical vulnerability in Microsoft's SMBv1 implementation that allows remote code
Exploit the noPac vulnerability chain (CVE-2021-42278 sAMAccountName spoofing and CVE-2021-42287 KDC PAC confusion)
Detect and exploit NoSQL injection vulnerabilities in MongoDB, CouchDB, and other NoSQL databases to demonstrate
Identifying and exploiting OAuth 2.0 and OpenID Connect misconfigurations including redirect URI manipulation,
Detect and exploit JavaScript prototype pollution vulnerabilities on both client-side and server-side applications
Detect and exploit race condition vulnerabilities in web applications using Turbo Intruder's single-packet attack
Identifying and exploiting SSRF vulnerabilities to access internal services, cloud metadata, and restricted network
Identifies and exploits SMB protocol vulnerabilities using Metasploit Framework during authorized penetration
Identifies and exploits SQL injection vulnerabilities in web applications during authorized penetration tests
Detecting and exploiting SQL injection vulnerabilities using sqlmap to extract database contents during authorized
Detecting and exploiting Server-Side Template Injection (SSTI) vulnerabilities across Jinja2, Twig, Freemarker,
Exploit PHP type juggling vulnerabilities caused by loose comparison operators to bypass authentication, circumvent