Loading...
Loading...
Found 11 Skills
Analyzes PHP code for SQL injection vulnerabilities. Detects query concatenation, ORM misuse, raw queries, dynamic identifiers, prepared statement bypasses.
PHP Web source code CRLF/response splitting audit tool. Identifies user input that enters HTTP response headers, analyzes filtering and encoding of newlines/control characters, and outputs severity ratings, PoCs and fix suggestions (omission is prohibited).
PHP type juggling and weak comparison (`==`) bypass. Use when authentication, HMAC/signature checks, or token validation uses loose equality, numeric coercion, or hash comparisons without strict types — common in legacy PHP and CTF-style code paths.
Run Psalm with taint analysis on PHP code. Detects SQL injection, XSS, command injection, path traversal, and other taint-flow vulnerabilities in PHP applications.
PHP Web Security Logging and Monitoring Audit Tool. Identifies missing security events, sensitive data written to logs, log injection/forgery risks, and flaws in log and alert links, and outputs exploitability ratings, observable PoCs, and remediation recommendations (no omissions allowed).
PHP Web Business Logic Vulnerability Audit Tool. Identifies logic defects other than authentication/authorization: Mass Assignment, process bypass, race condition, state machine defects, payment/permission timing vulnerabilities, etc., and outputs evidence chains, severity ratings, PoCs and remediation suggestions (no omission allowed).
PHP Web Source Code Encryption and Key Security Audit Tool. Identifies weak hashes/weak encryption/hardcoded keys/signature verification flaws, and outputs severity levels, PoCs and remediation recommendations (omission is prohibited).
Security audit patterns for PHP/OWASP. Use when conducting security assessments, identifying vulnerabilities (XXE, SQL injection, XSS), or CVSS scoring.
Check PHP2Shell patch status with local or server access.
PHP Web Source Code File Upload Audit Tool. Identify upload entry points and save paths, filename processing and validation logic, detect risks such as arbitrary file upload/path traversal/executable file upload, and output exploitability ratings, PoC and repair suggestions (omission is prohibited).
Security Audit Tool for ThinkPHP Framework Special Features. Conducts white-box static audits on common mechanisms of ThinkPHP such as authentication/CSRF/template escaping/ORM writing (Mass Assignment)/debugging and configuration exposure, and maps to a general vulnerability type system (AUTH/CSRF/TPL/XSS/LOGIC/CFG/SESS/SQL, etc.).