Results for “proxy-file”

GOF Proxy Pattern

HTTP request smuggling and desynchronization testing. Use when front proxies, CDNs, or load balancers disagree with the origin on message framing (Content-Length vs Transfer-Encoding), on HTTP/2→HTTP/1 translation, or when exploring client-side desync via browser fetch pipelines.

Detect and exploit HTTP request smuggling vulnerabilities caused by Content-Length and Transfer-Encoding parsing discrepancies between front-end and back-end servers.

Detect and respond to Adversary-in-the-Middle (AiTM) phishing attacks that use reverse proxy kits like EvilProxy, Evilginx, and Tycoon 2FA to bypass MFA and steal session tokens.

处理和分析用户上传的文件引用，提取关键信息并提供应用建议。适用于解析@符号引用、自然语言引用、提取短剧策划相关信息

Project Tracking — Structured Active Project Files

JS Proxy Pattern

Anti-distillation defense for employee Skills. Clean your skill files to look complete but with core proprietary knowledge neutralized. Use when user wants to protect trade secrets, sanitize forced knowledge transfers, or create safe-to-submit skill documents.

HTTP client examples including download, POST, auth, JSON, headers, proxy, and FTP operations.

当使用 delegate_task 派生子代理生成文件时，子代理的文件在其隔离上下文中，主代理无法直接读取。本技能记录文件交付的坑点和解决方案。

Provides file paths to language-specific extension files for the code-testing pipeline, enabling discovery of guidance for .NET, Python, TypeScript, and other languages.

Detect domain fronting C2 traffic by analyzing SNI vs HTTP Host header mismatches in proxy logs and TLS certificate discrepancies using pyOpenSSL for certificate inspection.

Provides curl commands for making HTTP requests, testing APIs, and transferring files, including authentication, headers, cookies, and response handling.

Exploit path normalization discrepancies between CDN caching layers and origin servers to cache and retrieve authenticated content.

Proactive self-monitoring of infrastructure, services, and health. Tracks disk/memory/load, service health, cron job status, recent errors. Auto-fixes safe issues. Triggers on: health check, heartbeat, monitor status, service status, infrastructure check.

Builds authentic-looking Reddit accounts through a 30-day progression and uses them to promote brands. Manages state files locally and uses browser-act CLI for all Reddit-facing operations.