antoninoLorenzo
- 9 skills
- 0 followers
- 1 week ago last updated
- ▌ Network Enumeration · antoninolorenzoUse this skill when a task requires identifying hosts, open ports, or running services on a target network.
- ▌ Source Code Analysis · antoninolorenzoUse this skill when the task requires reading, searching, or understanding source code in a repository. Covers finding files, searching for patterns, reading specific lines, tracing function references, and running AST-aware analysis. This skill teaches tool discipline — what command to run, in what order, and how to control output volume. It does not prescribe a fixed investigation process; follow the evidence.
- ▌ Network Traffic Analysis · antoninolorenzoCapture and analyze network traffic to extract credentials, session tokens, flags, or other sensitive data in transit. Load when the objective involves intercepting traffic between hosts or observing network communications.
- ▌ Linux Privilege Escalation · antoninolorenzoany task where you have a shell on a Linux target and need to escalate privileges.
- ▌ Web File Upload · antoninolorenzoBypass file upload validation to upload and execute malicious payloads. Load when the target exposes a file upload endpoint and the objective requires code execution or file write on the server.
- ▌ Web SQL Injection · antoninolorenzoDetect and exploit SQL injection vulnerabilities in web applications. Load when user-controlled input is incorporated into database queries, or when authentication bypass, data extraction, or error-based information disclosure is the objective.
- ▌ Web Path Traversal · antoninolorenzoDiscover and exploit directory traversal and local file inclusion vulnerabilities. Load when the target exposes file-serving, download, preview, or template endpoints, or when a parameter appears to reference a filename or path.
- ▌ Web Reconnaissance · antoninolorenzoPerform initial HTTP/HTTPS reconnaissance on a target to identify the web stack, exposed endpoints, security headers, and surface-level misconfigurations. Load at the start of any web-facing task before running exploitation tools.
- ▌ Bruteforce · antoninolorenzoUse this when you need to perform bruteforce attacks. Note that bruteforce attacks are most common in CTF environment, avoid bruteforce attacks during real assessments.