mirror of https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git synced 2026-06-12 06:04:56 +03:00

Files

T

mukul975 27c6414ca5 Add folder anatomy (scripts/agent.py + references/api-reference.md) for 648 cybersecurity skills

Complete skill folder anatomy across all cybersecurity skills:
- scripts/agent.py: 80-150 line Python agents using real libraries (impacket,
  boto3, azure-mgmt-*, kubernetes, pefile, yara, scapy, shodan, stix2, etc.)
- references/api-reference.md: real API documentation with method signatures
- LICENSE: MIT license for all skill folders

2026-03-10 21:02:12 +01:00

2.2 KiB

Raw Blame History

API Reference: Forced Browsing Authentication Bypass Agent

Overview

Tests web applications for unprotected endpoints, authentication bypass via HTTP methods and path normalization, and exposed sensitive files. For authorized penetration testing only.

Dependencies

Package	Version	Purpose
requests	>=2.28	HTTP requests to target endpoints

CLI Usage

# Test common admin paths
python agent.py --target https://target.example.com --admin-paths --session-cookie <token>

# Test with custom wordlist
python agent.py --target https://target.example.com --wordlist /path/to/wordlist.txt

Arguments

Argument	Required	Description
`--target`	Yes	Target base URL
`--wordlist`	No	Path to directory/file wordlist
`--session-cookie`	No	Valid session cookie for authenticated comparison
`--admin-paths`	No	Use built-in common admin path list
`--output`	No	Output file (default: `forced_browsing_report.json`)

Key Functions

`test_endpoint(base_url, path, session_cookie)`

Tests an endpoint with and without authentication, comparing response status and size to detect auth bypass.

`enumerate_directories(base_url, wordlist, session_cookie)`

Iterates through wordlist paths, recording responses with status 200, 301, 302, or 403.

`test_http_method_bypass(base_url, path)`

Tests GET, POST, PUT, DELETE, PATCH, OPTIONS, HEAD on protected endpoints to find method-based bypasses.

`test_path_traversal_bypass(base_url, path)`

Tests URL normalization variants (case changes, path traversal, encoding, semicolons) against protected paths.

`check_sensitive_files(base_url)`

Checks for exposed .env, .git, backup files, and configuration files.

`generate_report(findings, method_results, sensitive_files)`

Compiles all findings into a structured JSON pentest report.

Output Schema

{
  "total_endpoints_found": 15,
  "auth_bypass_candidates": [{"path": "/admin", "unauth_status": 200}],
  "accessible_without_auth": [...],
  "http_method_bypass": {"/admin": {"GET": 403, "PUT": 200}},
  "sensitive_files_exposed": [{"path": ".env", "size": 1024}]
}

2.2 KiB Raw Blame History