xalgorix

Autonomous AI pentesting agents, real-time reconnaissance, vulnerability detection...

npx skills add xalgorix/xalgorix -g -y

40 skills

API Authentication Session

API authentication and session testing, unauthenticated endpoint exposure, token...

xalgorix/xalgorix1.3k

API Bfla

Broken Function Level Authorization (BFLA) testing, invoking administrative API...

xalgorix/xalgorix1.3k

API Bola

Broken Object Level Authorization (BOLA/IDOR) testing for REST and GraphQL APIs, ...

xalgorix/xalgorix1.3k

API Bopla

Broken Object Property Level Authorization testing covering unauthorized property reads...

xalgorix/xalgorix1.3k

API Business Flow Abuse

Testing and exploiting automatable business operations including coupons, referrals...

xalgorix/xalgorix1.3k

API Fuzzing Restler

Stateful REST API fuzzing with RESTler, compiling an OpenAPI spec into a fuzzing...

xalgorix/xalgorix1.3k

API Injection

API injection testing, SQL and NoSQL operator injection through JSON bodies, query...

xalgorix/xalgorix1.3k

API Resource Consumption

Unrestricted resource consumption testing (OWASP API4), rate limit bypass via...

xalgorix/xalgorix1.3k

API Security Misconfiguration

Offensive testing for API security misconfigurations including verbose errors, debug...

xalgorix/xalgorix1.3k

API Ssrf

Server-Side Request Forgery testing on API endpoints that accept URLs, webhooks...

xalgorix/xalgorix1.3k

API Unsafe Third Party Consumption

Testing whether the target trusts data from third-party APIs, webhooks, or callbacks...

xalgorix/xalgorix1.3k

Application Attack Surface Modeling

Build a working model of the application as a system - roles, resources, workflows...

xalgorix/xalgorix1.3k

Application Data Exposure Testing

Distinguish real unauthorized data exposure from harmless metadata - response field...

xalgorix/xalgorix1.3k

Authentication Session Testing

Black-box testing of the full authentication and session lifecycle - registration...

xalgorix/xalgorix1.3k

Authorization Testing

Application-level authorization methodology - horizontal, vertical, and tenant boundary...

xalgorix/xalgorix1.3k

Business Logic Testing

Discover the application intended business rules and violate their assumptions - money...

xalgorix/xalgorix1.3k

Bypassing Binary Exploitation Mitigations

Methodology for identifying and defeating common binary hardening mitigations during...

xalgorix/xalgorix1.3k

Exploiting Arbitrary Write To Execution

Methodology for converting an arbitrary-write (write-what-where) or...

xalgorix/xalgorix1.3k

Exploiting Format String Vulnerabilities

Methodology for exploiting format string bugs where attacker-controlled data reaches...

xalgorix/xalgorix1.3k

Exploiting Glibc Heap Vulnerabilities

Methodology for exploiting glibc ptmalloc2 heap vulnerabilities during authorized...

xalgorix/xalgorix1.3k

Exploiting Integer Overflow Vulnerabilities

Methodology for finding and exploiting integer overflow, underflow, truncation, and...

xalgorix/xalgorix1.3k

Exploiting Linux Kernel Vulnerabilities

Methodology for discovering and exploiting Linux kernel memory-corruption...

xalgorix/xalgorix1.3k

Exploiting Stack Buffer Overflows

Methodology for discovering and exploiting stack-based buffer overflows in native...

xalgorix/xalgorix1.3k

File Processing Pipeline Testing

Model and attack the full file processing pipeline - upload, validation, storage...

xalgorix/xalgorix1.3k

Graphql API Security

GraphQL API security testing covering introspection, field-level authorization...

xalgorix/xalgorix1.3k

Grpc API Security

GRPC API security testing covering reflection, service enumeration, method-level...

xalgorix/xalgorix1.3k

Implementing LLM Guardrails For Security

Implements input and output validation guardrails for LLM-powered applications to...

xalgorix/xalgorix1.3k

Input Boundary Testing

Reason about every parameter expected domain and violate it - boundary values, type and...

xalgorix/xalgorix1.3k

Jwt Security Testing

JWT token security testing covering alg:none, algorithm confusion, weak secrets...

xalgorix/xalgorix1.3k

Oauth Oidc Security

OAuth 2.0 and OpenID Connect implementation testing, redirect URI validation bypass...

xalgorix/xalgorix1.3k

Performing AI Assisted Vulnerability Discovery

Using LLMs to accelerate vulnerability research and pentest workflows, generating...

xalgorix/xalgorix1.3k

Performing Fuzzing With Aflplusplus

Perform coverage-guided fuzzing of compiled binaries using AFL++ (American Fuzzy Lop...

xalgorix/xalgorix1.3k

Performing Return Oriented Programming

Methodology for building Return-Oriented Programming (ROP) chains to bypass NX/DEP by...

xalgorix/xalgorix1.3k

Race Condition Testing

Application-level concurrency abuse - identify race-prone business operations (coupons...

xalgorix/xalgorix1.3k

Rpc API Security

JSON-RPC and XML-RPC API security testing, method enumeration, unauthenticated and...

xalgorix/xalgorix1.3k

Security Control Differential Testing

Find security-relevant interpretation gaps between layers - client, CDN, WAF, reverse...

xalgorix/xalgorix1.3k

Soap API Security

SOAP web service security testing, WSDL analysis, XXE and XML injection, SOAPAction...

xalgorix/xalgorix1.3k

Source Assisted Analysis

Use attached source code as a SECONDARY accelerator for black-box testing - work the...

xalgorix/xalgorix1.3k

Websocket API Security

WebSocket API security testing, upgrade authentication and Origin/CSWSH hijacking...

xalgorix/xalgorix1.3k

Workflow State Machine Testing

Treat multi-step application flows as state machines and abuse them - step skipping...

xalgorix/xalgorix1.3k