Strix•信息泄露测试
Strix 信息泄露测试手册,覆盖报错、调试端点、元数据泄露与源码暴露;触发名:strix-information-disclosure
Profile →npx skills add asdfgh1445/ctf-super-hub --skill strix-information-disclosure --agent codex
Same command for any agent — swap --agent for claude-code, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# Information Disclosure Information leaks accelerate exploitation by revealing code, configuration, identifiers, and trust boundaries. Treat every response byte, artifact, and header as potential intelligence. Minimize, normalize, and scope disclosure across all channels. ## Attack Surface - Errors and exception pages: stack traces, file paths, SQL, framework versions - Debug/dev tooling reachable in prod: debuggers, profilers, feature flags - DVCS/build artifacts and temp/backup files: .git, .svn, .hg, .bak, .swp, archives - Configuration and secrets: .env, phpinfo, appsettings.json, Docker/K8s manifests - API schemas and introspection: OpenAPI/Swagger, GraphQL introspection, gRPC reflection - Client bundles and source maps: webpack/Vite maps, embedded env, `__NEXT_DATA__`, static JSON - Headers and response metadata: Server/X-Powered-By, tracing, ETag, Accept-Ranges, Server-Timing - Storage/export surfaces: public buckets, signed URLs, export/download endpoints - Observability/admin: /metrics, /actuator, /health, tracing UIs (Jaeger, Zipkin), Kibana, Admin UIs - Directory listings and indexing: autoindex, sitemap/robots revealing hidden routes ## High-Value Surfaces ### Errors a
- Attack Surface
- High-Value Surfaces
- Errors and Exceptions
- Debug and Env Modes
- DVCS and Backups
- Configs and Secrets
- API Schemas and Introspection
- Client Bundles and Maps
- Headers and Response Metadata
- Storage and Exports
- Observability and Admin
- Cross-Origin Signals
- File Metadata
- Cloud Storage
What does the Strix•信息泄露测试 skill do?
Strix 信息泄露测试手册,覆盖报错、调试端点、元数据泄露与源码暴露;触发名:strix-information-disclosure
How do I install it?
Run `npx skills add asdfgh1445/ctf-super-hub --skill strix-information-disclosure --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From asdfgh1445/ctf-super-hub, a repository with 718 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.