Tagged pentesting

Find exploitable flaws in source code with Strix, each backed by a working exploit

Patch root causes of Strix pentest findings and re-test to confirm each fix works

Reverse binaries, debug crashes and build native exploits for pwn challenges

Find heap spray NOP sleds and shellcode in memory dumps with Volatility3

Find embedded JavaScript and exploits in malicious PDFs without opening them

Harden Windows endpoints with Defender attack surface rules and exploit protection

Red-team LLM apps in CI with Promptfoo and DeepTeam against OWASP LLM Top 10 presets

Test API parameters and request bodies for SQL, NoSQL, LDAP injection and SSRF

Reach admin API endpoints with low-privilege accounts by switching methods and paths

Compare raw API responses with UI output to find leaked PII and internal fields

Find IDOR flaws by swapping object IDs across sessions with Burp Suite

Find insecure deserialization in Java, PHP, Python and .NET apps to get code execution

Test JWT algorithm confusion, alg none and kid injection to bypass auth checks

Inject hidden fields like isAdmin into REST API requests to test mass assignment

Test MongoDB and CouchDB apps for NoSQL injection that bypasses login or leaks data

Find OAuth and OIDC flaws in redirect URIs, token leakage and code theft

Find prototype pollution in client and Node.js code that leads to XSS or RCE

Test race conditions with Burp Turbo Intruder single-packet attacks on rate limits

Reach cloud metadata and internal services through SSRF during authorized pentests

Find and exploit SQL injection with manual payloads and sqlmap in authorized pentests

Run sqlmap to confirm SQL injection and pull database contents in authorized tests

Find server-side template injection in Jinja2, Twig and Freemarker that reaches RCE

Bypass PHP login checks with loose comparison and magic hash type juggling

Test WebSockets for auth bypass, cross-site hijacking and injection flaws

Rank CVE backlogs by EPSS exploitation probability scores from the FIRST API

Enable DEP, ASLR and CFG exploit mitigations to harden endpoints against memory bugs

Find memory corruption in ELF binaries and build ROP exploit PoCs with pwntools

Confirm blind SSRF with out-of-band callbacks and reach internal cloud metadata

Run Atomic Red Team tests and map detection gaps on an ATT&CK Navigator heatmap

Run Atomic Red Team tests with atomic-operator to validate SIEM and EDR coverage

Build STRIDE and LINDDUN threat models with CVE and exploit-data dependency screens

Audit a game for save tampering, cheat vectors and network exploits before release

Attack a plan's load-bearing assumptions and find the cheapest test to disprove them

Audit applications for OWASP Top 10 flaws and CVEs using pentest methods

Challenge an idea with devil's advocate, pre-mortem and red team checks

Run a STRIDE threat model review of a change and report exploit paths by severity

Challenge plans with a pre-mortem, red team and blind-spot audit before committing

Hunt ROP and JOP gadgets and build exploit chains that bypass NX

Run a three-way adversarial code review with red team, auditor and arbiter

Run OWASP checks, vulnerability scans and adversarial red team tests on code

Check exploit intelligence for a vulnerability against this repository

Search exploits by ecosystem, severity, source and EPSS score

Pull AWS Security Agent pentest and code review findings and drive fixes

Write a stakeholder security review report from confirmed findings and exploit chains

Analyze DeFi exploit patterns like flash loans, oracle manipulation and sandwich attacks

Test Kubernetes API servers, RBAC, service accounts and etcd for weaknesses

Find and exploit memory bugs in binaries by weighing protections like NX and PIE

Reference GDB, pwntools, ROPgadget, Ghidra and other binary analysis tools

Exploit leaked cloud access keys from enumeration to resource takeover