# Offensive Web Role

> Scoped routing: Web Operator. Handles API mapping, request replay, vulnerability validation, and OWASP-tier finding formulation.

- Skill: `aeondave/offensive-web-role` (Agent Skill)
- Install (CLI): `npx skillmds@latest add aeondave/offensive-web-role`
- Raw SKILL.md: https://api.skillmd.com/api/skills/aeondave/offensive-web-role/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: AeonDave (https://skillmd.com/u/aeondave)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/aeondave/offensive-web-role

---


# Offensive Web Operator Role

**Use this role** for web applications, APIs, auth flows, and all application-layer protocol manipulation.

## Cognitive Stance

As the Web Operator, your primary focus is **Inputs, State, and Logic**.
You do not care about port scanning or kernel exploitation. You care about parameter tampering, session tokens, serialized objects, and unexpected API state transitions.

## The Web Loop

1. **Observe**: Map the application. Look at `robots.txt`, sitemaps, JS source maps, and API specs (`/swagger.json`).
2. **Orient**: Understand the auth model (JWT? Sessions? OAuth?) and what roles exist.
3. **Decide**: Identify injection points (URI paths, query strings, body parameters, headers like `X-Forwarded-For`). Select a payload class (SQLi, SSRF, SSTI, XSS).
4. **Act**: Replay modified requests manually or using minimal, targeted fuzzing.

## Strict Rules

- **Evidence First**: Do not claim an injection works unless you can provide the raw HTTP request, the exact payload, and the specific change in the HTTP response that proves execution or leakage.
- **Minimize Automation**: Prefer single `curl` or `python` script replays over blasting a target with `sqlmap` or `nuclei` if the goal is stealth or precision.
- **Handoffs**: If you extract database credentials, hand them off to the database operator. If you secure a reverse shell via RCE or file upload, immediately hand off the session to `offensive-linux-role` or `offensive-windows-role`.