Testing

LDAP注入深度测试与域渗透联动高级技能：RFC 4515过滤器语义深度、AND/OR注入、通配符滥用横向接管、认证绕过、RDN/过滤器混淆、盲注高效提取（二分/位运算OID/OAST外带）、非标准属性与AD专属属性利用、LDAPS/StartTLS/通道绑定与NTLM Relay、Spring Data…

移动应用安全深度测试专业技能（v3.0）：移动端深层攻击链（App→API→后端→云）、Android/iOS深度逆向与动态调试、Frida全面对抗与加固脱壳、iOS越狱检测绕过/ObjC Runtime/LLDB调试/证书固定绕过、跨平台框架漏洞（Flutter/React…

网络渗透测试/红队攻击链深度专业技能（资深攻防专家版 v3.0）：红队攻击链整体规划与MITRE ATT&CK TTP映射、目标建模与决策树、高级外网打点(钓鱼联动/供应链/云资产入口)、隧道代理与C2隐蔽、内网信息收集与BloodHound CE图分析、AD域渗透深化(Kerberoast/DCSync/ADCS…

XPath/XQuery注入深度攻防专业技能：认证绕过、盲注高效提取（二分/字符集二分/位运算/超时外带/OAST）、任意节点读取完整攻击链、XPath 1.0/2.0/3.1差异、XQuery注入面（BaseX/eXist/MarkLogic）、XML安全联动（XXE/XInclude/XSLT…

Designer's eye QA: finds visual inconsistency, spacing issues, hierarchy problems, AI slop patterns, and slow interactions — then fixes them.

Live-device iOS QA for SwiftUI apps.

内网渗透测试深度专业技能：本地信息收集与凭证窃取(mimikatz/LSASS/ntds.dit)、内网探测与隐藏隧道(frp/Chisel/DNS/ICMP)、Windows/Linux提权、横向移动矩阵(IPC/WMI/DCOM/PSEXEC)、AD域渗透与域控接管(Zerologon/Kerberoast/AD…

Build a tight, red-capable feedback loop before diagnosing failures, then minimize, test ranked hypotheses, and lock the fix with a regression test.

Feature verification (READ-ONLY, P0-P5).

Sets up and runs AFL++ for multi-core fuzzing of C/C++ projects built with afl-clang-fast or afl-gcc-fast.

Builds custom fuzzers with LibAFL, the modular Rust fuzzing library.

Sets up and runs libFuzzer, the coverage-guided fuzzer built into LLVM, on C/C++ code that compiles with Clang.

Validates cryptographic implementations against Project Wycheproof's test vectors, which encode known attacks and edge cases across AES, RSA, ECDSA, ECDH, and…

Build and deploy a full local OpenMetadata stack with Docker to test your connector in the UI.

Smart contract security testing and blockchain CTF exploitation.

Core pentesting tools and methodology - Burp Suite usage, Playwright automation, binary analysis, testing methodology, and professional reporting standards.

Builds, runs, and debugs Nextflow DSL2 pipelines and nf-core workflows.

Security header auditing, TLS configuration testing, HTTP method analysis, CSP bypass assessment, and deployment hardening verification.

Provides Python/HTSlib workflows for genomic files.

API fuzzing for bug bounty.

HTTP request smuggling, desync attacks, cache poisoning, and protocol-level vulnerability testing.

Disciplined diagnosis loop for hard problems, diagnosing bugs and regressions.

Extract structured data from Axure prototypes using Playwright — screenshots, design tokens, interaction maps, annotations, and page text.

Produce a Mobius self-evolution demo video for requests that ask to show an existing UI, submit the same requirement to the Xiao Mo assistant, implement the…