component-vuln-intel

Files (1)

• SKILL.md

SKILL.md (first lines)

## Internet Vulnerability Intelligence (identify a component → search immediately; results are leads/tentative, not confirmed Facts before validation)

```
🔴 As soon as a framework/component/version is identified → stop local scanning and search online immediately (exploiting without searching = blind attack = violation of the core rule).
🔴 Execute the complete sequence below (not optional); replace {C}=component name and {V}=version. Use browser_navigate or terminal to actually access each step:

1. CVE databases (required; find known vulnerabilities):
  terminal: searchsploit {C} {V}
  terminal: curl -s "https://cve.circl.lu/api/search/{C}/{V}" | python3 -c "import sys,json;[print(x['id'],x.get('summary','')[:80]) for x in json.load(sys.stdin)[:10]]"
  browser_navigate: https://github.com/advisories?query={C}+{V}
  browser_navigate: https://www.cvedetails.com/google-search-results.php?q={C}+{V}&sa=Search

2. Search engines (execute at least 3; find vulnerability analyses and PoCs):
  browser_navigate: https://www.google.com/search?q={C}+{V}+exploit+PoC+RCE+site:github.com
  browser_navigate: https://www.google.com/search?q={C}+{V}+漏洞+利用+复现
  browser_navigate: https://www.baidu.com/s?wd={C}+{V}+漏洞+利用+poc+getshell
  browser_navigate: https://www.bing.com/search?q={C}+{V}+CVE+exploit+poc
  browser_navigate: https://duckduckgo.com/?q={C}+{V}+vulnerability+exploit

3. Chinese security communities (required; Chinese-first disclosures are often earlier and deeper):
  browser_navigate: https://xz.aliyun.com/search?keyword={C}+漏洞
  browser_navigate: https://www.seebug.org/search/?keywords={C}
  browser_navigate: https://paper.seebug.org/search/?keyword={C}
  browser_navigate: https://www.freebuf.com/search?search={C}+{V}
  browser_navigate: https://ti.qianxin.com/vulnerability?keyword={C}
  browser_navigate: https://www.anquanke.com/search?s={C}

4. Search GitHub for PoC/exploit code (required; the most direct source of exploit code):
  terminal: curl -s "https://api.github.com/search/repositories?q={C}+{V}+exploit+OR+poc+OR+CVE&sort=updated&per_page=10" | python3 -c "import sys,json;d=json.load(sys.stdin);[print(x['full_name'],x['html_url'],x.get('description','')[:60]) for x in d.get('items',[])]"
  terminal: curl -s "https://api.github.com/search/code?q={C}+RCE+OR+shell+OR+exploit+language:python&per_page=5" | python3 -c "import sys,json;d=json.load(sys.stdin);[print(x['html_url']) for x in d.get('items',[])]"
  terminal: curl -s "https://api.github.com/search/repositories?q={C}+CVE&sort=stars&per_page=5" | python3 -c "import sys,json;d=json.load(sys.stdin);[print(x['full_name'],x['stargazers_count'],'★',x.get('description','')[:50]) for x in d.get('items',[])]"
  After finding a repository: curl -s "https://api.github.com/repos/{owner}/{repo}/readme" | python3 -c "import sys,json,base64;print(base64.b64decode(json.load(sys.stdin)['content']).decode())"

5. Asset engines (find similar targets/exposure):
  browser_navigate: https://fofa.info/result?qbase64=$(echo -n 'app="{C}"' | base64)
  browser_navigate: https://www.shodan.io/search?query={C}+{V}
  browser_navigate: https://www.zoomeye.org/searchResult?q={C}
  browser_navigate: https://search.censys.io/search?resource=hosts&q=services.software.product:{C}

6. Current intelligence (latest zero-days/in-the-wild exploitation):
  browser_navigate: https://x.com/search?q={C}+CVE+OR+0day+OR+exploit&f=live
  browser_navigate: https://www.reddit.com/r/netsec/search/?q={C}&sort=new&t=month
  browser_navigate: https://www.exploit-db.com/search?q={C}

7. Dependency expansion (required): after searching {C}, extract its dependencies (package.json/pom.xml/requirements.txt/go.mod) and repeat steps 1–6 for every dependency.

🔴 If searching is blocked (403/CAPTCHA/empty result/timeout), execute this fallback sequence in order and do not give up:
  ① Change UA: curl -H "User-Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "{URL}"
  ② Jina reader: browser_navigate: https://r.jina.ai/{ORIGINAL_URL}
  ③ Google cache: browser_navigate: https://webcache.googleusercontent.com/search?q=cache:{DOMAIN}+{KEYWORD}
  ④ Archive: browser_navigate: https://web.archive.org/web/{URL}
  ⑤ GitHub API alternative (GitHub page blocked but API available): use the curl command from step 4
  ⑥ Switch engine: Google blocked → Bing/DuckDuckGo/Baidu; Baidu blocked → Google/Bing
  ⑦ Use a proxy: obtain a SOCKS5 proxy through the `proxy-tool-bootstrap` sequence and retry
  If all routes remain blocked with no results → write the negative Fact "searched {C} {V} across all channels; no public vulnerabilities found" → switch to `zero-day-discovery`
```

From Akapi895/RedForge, Apache-2.0.

More from Akapi895/RedForge