Skill · em Proteger

Top 100 Web Vulnerabilities Reference

This skill should be used when the user asks to "identify web application vulnerabilities", "explain common security flaws", "understand vulnerability categories", "learn about injection attacks", "review access control weaknesses", "analyze API security issues", "assess security…

Procedência

Antes de instalar

1 arquivo · 23,7 KB · só texto, nenhum script

Instalar na sua CLI

O comando baixa a versão fixada (commit 57f899e) direto da origem, para a pasta que a CLI lê. Precisa de curl (macOS e Linux); no Windows não há comando, porque o Rook Labs é para macOS.

Claude Code

Neste projeto: O name desta skill (“Top 100 Web Vulnerabilities Reference”) não segue o padrão das CLIs (minúsculas e hífens, igual ao nome da pasta): instalada assim, a CLI pode ignorá-la.

Global: O name desta skill (“Top 100 Web Vulnerabilities Reference”) não segue o padrão das CLIs (minúsculas e hífens, igual ao nome da pasta): instalada assim, a CLI pode ignorá-la.

Codex

Neste projeto: O name desta skill (“Top 100 Web Vulnerabilities Reference”) não segue o padrão das CLIs (minúsculas e hífens, igual ao nome da pasta): instalada assim, a CLI pode ignorá-la.

Global: O name desta skill (“Top 100 Web Vulnerabilities Reference”) não segue o padrão das CLIs (minúsculas e hífens, igual ao nome da pasta): instalada assim, a CLI pode ignorá-la.

Antigravity

Neste projeto: O name desta skill (“Top 100 Web Vulnerabilities Reference”) não segue o padrão das CLIs (minúsculas e hífens, igual ao nome da pasta): instalada assim, a CLI pode ignorá-la.

Global: O name desta skill (“Top 100 Web Vulnerabilities Reference”) não segue o padrão das CLIs (minúsculas e hífens, igual ao nome da pasta): instalada assim, a CLI pode ignorá-la.

Peça ao Rook

Já usa o Rook Labs? Cole no chat do Rook: instale a skill https://rooklabs.sh/marketplace/cct.top-100-web-vulnerabilities-reference

Prévia do SKILL.md

---
name: Top 100 Web Vulnerabilities Reference
description: This skill should be used when the user asks to "identify web application vulnerabilities", "explain common security flaws", "understand vulnerability categories", "learn about injection attacks", "review access control weaknesses", "analyze API security issues", "assess security misconfigurations", "under…
metadata:
  author: zebbern
  version: "1.1"
---

# Top 100 Web Vulnerabilities Reference

## Purpose

Provide a comprehensive, structured reference for the 100 most critical web application vulnerabilities organized by category. This skill enables systematic vulnerability identification, impact assessment, and remediation guidance across the full spectrum of web security threats. Content organized into 15 major vulnera…

## Prerequisites

- Basic understanding of web application architecture (client-server model, HTTP protocol)
- Familiarity with common web technologies (HTML, JavaScript, SQL, XML, APIs)
- Understanding of authentication and authorization concepts
- Access to web application security testing tools (Burp Suite, OWASP ZAP)
- Knowledge of secure coding principles recommended

## Outputs and Deliverables

- Complete vulnerability catalog with definitions, root causes, impacts, and mitigations
- Category-based vulnerability groupings for systematic assessment
- Quick reference for security testing and remediation
- Foundation for vulnerability assessment checklists and security policies

---

## Core Workflow

### Phase 1: Injection Vulnerabilities Assessment

Evaluate injection attack vectors targeting data processing components:

**SQL Injection (1)**
- Definition: Malicious SQL code inserted into input fields to manipulate database queries
- Root Cause: Lack of input validation, improper use of parameterized queries
…

Ver todo o marketplace