source-code-hunting

Agent Skills › Ed1s0nZ/CyberStrikeAI › source-code-hunting

source-code-hunting

GitHub

用于源码安全狩猎，涵盖.git泄露、危险函数扫描、JS混淆破解、Secrets挖掘及供应链风险分析。

skills/source-code-hunting/SKILL.md Ed1s0nZ/CyberStrikeAI

Trigger Scenarios

需要检测源码中的敏感信息泄露分析JavaScript混淆代码以还原逻辑检查项目依赖的供应链安全风险

Install

npx skills add Ed1s0nZ/CyberStrikeAI --skill source-code-hunting -g -y

More Options

Use without installing

npx skills use Ed1s0nZ/CyberStrikeAI@source-code-hunting

指定 Agent (Claude Code)

npx skills add Ed1s0nZ/CyberStrikeAI --skill source-code-hunting -a claude-code -g -y

安装 repo 全部 skill

npx skills add Ed1s0nZ/CyberStrikeAI --all -g -y

预览 repo 内 skill

npx skills add Ed1s0nZ/CyberStrikeAI --list

SKILL.md

Frontmatter

{
    "name": "source-code-hunting",
    "metadata": {
        "tags": [
            "渗透测试",
            "penetration-testing",
            "红队"
        ]
    },
    "description": "源码狩猎:.git泄露,危险函数grep,JS RC4解混淆,semgrep\/CodeQL,trufflehog,patch diff,供应链\/CI。Use when hunting source leaks, secrets, JS deobfuscation, or supply-chain issues."
}

源码狩猎

=== 源码狩猎 ===
.git泄露: git-dumper → git log -p --all(已删敏感文件) | .svn/.DS_Store/composer.lock
危险函数grep: exec/system/eval/unserialize/pickle.loads/render/curl_exec + 硬编码密钥(sk-/ghp_/BEGIN RSA)
JS混淆破解(RC4+base64字符串数组模式): 1)提取字符串数组(var a0G=[...]) 2)找解码函数(a0m(idx,key)→RC4解密+base64) 3)找rotation IIFE(目标偏移量) 4)Node.js重建解码器批量解码全部字符串→得到明文变量名/API路径/配置
  UniApp特征: app-service.js(业务逻辑,常800KB+混淆) + zlsioh.dat(加密配置,native .so解密) + dcloud_uniplugins.json(插件清单)
静态扫描: semgrep --config=auto 快扫 / CodeQL建库写query (taint求解+变体分析方法论见 `zero-day-discovery`)
Secrets深挖: trufflehog/gitleaks 扫git全历史+docker镜像层+npm/PyPI tarball+前端bundle(--only-verified区分死活密钥)
框架Patch Diff: clone前后版本 diff → 修了什么=漏洞在哪 | 依赖链: composer.json/npm audit/pip-audit
供应链/CI: 依赖混淆(内部包名抢注公共registry) | GHA命令注入${{github.event.issue.title}} | self-hosted runner接管 | .npmrc/.pypirc凭据