Tagged testing

Run end-to-end tests in CI against real Kubernetes environments with mirrord

Edit live Roblox Studio projects safely while keeping structure and testing clients

Keep red-team testing offensive so real findings are not missed or retracted

Pull payloads, bypass tables and wordlists for web vulnerability testing

Set up Husky pre-commit hooks that run Prettier, type checks and tests

Choose statistical tests, check assumptions and write APA-style results

Have ChatGPT design and review a local project while Codex writes and tests the code

Automate Chrome for screenshots, clicks and mobile layout tests without Playwright

Intercept, modify and scan web traffic with Burp Suite during security testing

Test web apps for path traversal and LFI flaws during authorized security tests

Test web pages for HTML injection flaws during authorized security assessments

Find insecure direct object references and broken access control in web apps

Use Metasploit for authorized exploit testing, payloads and post-exploitation

Configure HTTP, SNMP and SMB services in a lab to practice network testing

Review privilege escalation techniques for Linux and Windows in authorized tests

Test for SQL injection flaws and extract data during authorized assessments

Automate SQL injection testing with sqlmap during authorized database assessments

Test for cross-site scripting and client-side injection in authorized web tests

Show a live iOS Simulator preview while building and testing a SwiftUI app

Delegate research, coding and tests to cheaper subagents to save cost

Run OWASP checks, vulnerability scans and adversarial red team tests on code

Run tests, open a PR, then merge or discard a finished feature branch

Build behavior changes test-first with a red, minimal green and consolidation loop

Choose paired, rank-based and multiple-comparison tests the way referees expect

Drive desktop and browser GUIs with Cua for app tests and screenshots

Strip AI-generated code smells from branch changes behind regression tests

Check HackerOne program scope and rules before testing each in-scope asset

Run lateral movement, credential theft and AD attack tests inside authorized networks

Guide authorized Active Directory red-team testing with scope, evidence and exit rules

Guide authorized API security testing for BOLA, auth bypass and mass assignment

Guide authorized testing of authentication, JWT, OAuth and MFA weaknesses

Guide authorized web cache poisoning tests with unkeyed inputs and CDN behavior

Guide authorized clickjacking tests covering frame options and CSP bypasses

Guide authorized cloud security tests for IAM, storage, metadata and serverless flaws

Guide authorized command injection tests, including blind and out-of-band variants

Guide authorized container and Kubernetes security tests including escape paths

Guide authorized CORS tests for origin reflection, null origins and credential exposure

Guide authorized cryptography weakness tests on algorithms, padding and key handling

Guide authorized CSRF tests covering token bypasses, SameSite gaps and JSON CSRF

Match recon findings to CVEs with evidence before deeper red-team testing

Guide authorized insecure deserialization tests across Java, PHP, Python and .NET

Guide authorized defense evasion tests for WAF bypass, EDR and traffic obfuscation

Guide authorized file vulnerability tests for path traversal, uploads and LFI

Guide authorized NoSQL, LDAP, XPath and expression injection tests

Guide authorized business logic tests for races, price tampering and permission flaws

Guide authorized mobile app tests on storage, pinning bypass and exposed components

Guide authorized network security tests for exposed services and segmentation bypass

Guide authorized open redirect tests, including OAuth redirect_uri abuse

Guide authorized payload construction and staging choices for red-team testing