web-pentest
Web application penetration testing methodology for Pi agent — reconnaissance, auth handling, per-class attack methodology, detection, confirmation, evasion, and reporting. Use when testing a live web target within a sanctioned engagement. Per-class methodology lives in classes/<slug>.md; read only the class(es) you are assigned.
Pinned to revision b26bce0fa9fc, so it is the text this page describes rather than whatever the author pushed since.
Files
- skills/web-pentest/SKILL.md
- skills/web-pentest/classes/access-control.md
- skills/web-pentest/classes/business-logic.md
- skills/web-pentest/classes/command-injection.md
- skills/web-pentest/classes/cors.md
- skills/web-pentest/classes/database-attacks.md
- skills/web-pentest/classes/deserialization.md
- skills/web-pentest/classes/file-upload.md
- skills/web-pentest/classes/graphql.md
- skills/web-pentest/classes/jwt-saml.md
- skills/web-pentest/classes/oauth-oidc.md
- skills/web-pentest/classes/orm-leak.md
- skills/web-pentest/classes/parser-differential.md
- skills/web-pentest/classes/path-traversal.md
- skills/web-pentest/classes/prototype-pollution.md
- skills/web-pentest/classes/race-conditions.md
- skills/web-pentest/classes/request-smuggling.md
- skills/web-pentest/classes/sql-injection.md
- skills/web-pentest/classes/ssrf.md
- skills/web-pentest/classes/ssti.md
- skills/web-pentest/classes/supply-chain.md
- skills/web-pentest/classes/web-cache-poisoning.md
- skills/web-pentest/classes/xss.md
- skills/web-pentest/classes/xxe.md
Every link opens the file at its source, pinned to the revision this page describes.