security-master - Full-Spectrum Web Security Playbook
Guides authorized web application reconnaissance, vulnerability testing, manual verification, exploitation, reporting, and hardening.
Tags
Updated: 2026-10-06Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Enumerate subdomains
- Analyze JavaScript files
- Discover exposed files
- Fingerprint web technologies
- Scan web vulnerabilities
- Verify findings manually
- Test XSS and SQL injection
- Assess authentication and authorization
- Analyze JWT security
- Test SSRF behavior
- Generate proof-of-concept reports
- Track security findings
Inputs
- Target domain or URL
- Authorization scope
- Authentication tokens
- HAR capture
- Request data
- JWT tokens
Outputs
- Reconnaissance results
- Vulnerability scan results
- Verified exploit evidence
- Proof-of-concept report
- Security findings tracker
- Hardening recommendations
Requirements
- Linux, macOS, or Windows
- Authorization to test targets
- Command-line execution environment