instavm
- 18 skills
- 0 followers
- 9 hours ago last updated
- ▌ Use Instavm · instavm bundleUse InstaVM to run short-lived sandboxes and durable VMs, host apps, manage storage, snapshots, control egress, shares, SSH access, desktop workflows, OpenAI Agents sandbox runs, and platform APIs. Trigger this when the user mentions InstaVM, instavm.io, the `instavm` Python SDK or CLI, `ssh instavm.dev`, app hosting, agent creation on InstaVM, OpenAI Agents sandboxing, or VM lifecycle work, even if they do not explicitly say "InstaVM".
- ▌ Mitm Report · instavmGenerate a security vulnerability report. Use when user asks for a report, summary of findings, or formatted vulnerability documentation.
- ▌ Mitm Find Otp · instavmFind OTP implementation vulnerabilities. Use when user asks about OTP security, verification bypass, SMS security, or two-factor authentication issues.
- ▌ Mitm Find Pii · instavmFind PII (Personally Identifiable Information) leakage in API responses. Use when user asks about data exposure, privacy issues, or sensitive data in traffic.
- ▌ Mitm Find Auth · instavmFind authentication and session vulnerabilities. Use when user asks about auth bypass, session issues, login security, or token problems.
- ▌ Mitm Find Idor · instavmFind IDOR (Insecure Direct Object Reference) vulnerabilities in captured traffic. Use when user asks about authorization issues, sequential IDs, or accessing other users' data.
- ▌ Mitm Find Sqli · instavmFind SQL Injection vulnerabilities in captured traffic. Use when user asks about database security, injection attacks, or data extraction.
- ▌ Mitm Find Ssrf · instavmFind SSRF (Server-Side Request Forgery) vulnerabilities in captured traffic. Use when user asks about URL fetching, webhooks, integrations, or internal network access.
- ▌ Mitm List Apis · instavmList all APIs from mitmproxy traffic capture. Use when user asks to see APIs, endpoints, or wants an overview of captured HTTP traffic for a website or app.
- ▌ Mitm Subdomains · instavmEnumerate subdomains from captured traffic. Use when user asks about subdomain discovery, attack surface mapping, or domain reconnaissance.
- ▌ Mitm Find Referer · instavmFind Referer header leakage vulnerabilities. Use when user asks about URL leakage, third-party data exposure, or sensitive data in headers.
- ▌ Mitm Find Secrets · instavmFind leaked secrets, API keys, and credentials in traffic. Use when user asks about exposed keys, hardcoded secrets, or credential leakage.
- ▌ Mitm Find Bizlogic · instavmFind Business Logic vulnerabilities in captured traffic. Use when user asks about payment bypass, race conditions, workflow abuse, or application logic flaws.
- ▌ Mitm Find Callback · instavmFind payment callback and webhook vulnerabilities. Use when user asks about payment security, callback tampering, hash validation, or transaction manipulation.
- ▌ Mitm Find Checksum · instavmFind checksum and signature vulnerabilities. Use when user asks about hash validation, signature bypass, checksum manipulation, or cryptographic weaknesses.
- ▌ Mitm Find Insecure · instavmFind insecure configurations in HTTP traffic. Use when user asks about security headers, cookie security, CORS issues, or transport security.
- ▌ Mitm Security Audit · instavmComprehensive security audit of mitmproxy traffic. Use when user wants to analyze captured HTTP traffic for vulnerabilities, or mentions pentesting, security testing, or vulnerability assessment.
- ▌ Mitm Find Enumerable · instavmFind enumerable endpoints that leak data through iteration. Use when user asks about data scraping, bulk data access, or iterating through records.