Security Workflows
A workflow chains 2 or more of the tools above into one named, ordered run against a shared input - the same tools, run together instead of one page at a time.
Offensive Security10 stepsExternal Asset FootprintChain WHOIS, DNS, subdomain discovery, reverse IP, geolocation, HTTP, SSL, tech stack, WAF, and security header checks against one domain.external-asset-footprintOffensive Security8 stepsPublic Network Service ExposureCorrelate IP geolocation, reverse IP, and open-port evidence with SSH, FTP, SMB, SNMP, and RDP/VNC hardening guidance for one public IPv4 address.public-network-service-exposureOffensive Security4 stepsDomain OSINT & Leak ReviewCombine registration and DNS evidence with reusable Google and Shodan dork packs for one domain.domain-osint-leak-reviewOffensive Security5 stepsDatabase Injection Test PackGenerate correlated SQL, NoSQL, LDAP, and XPath injection test cases for an authorized lab, sharing one DBMS family selection.database-injection-test-packOffensive Security6 stepsServer-Side Injection Test PackGenerate LFI/RFI, command injection, SSTI, XXE, and deserialization test cases matched to an authorized test environment, plus an optional SSRF map for a callback IP.server-side-injection-test-packOffensive Security6 stepsBrowser Request Injection Test PackGenerate independent XSS, open redirect, CRLF, cache poisoning, prototype pollution, and ReDoS test cases for a controlled lab.browser-request-injection-test-packDefensive Security5 stepsCredential & Crypto HygieneCheck a password's strength, generate its hashes, identify the generated hash's format, detect its encoding, and - if it looks like one - decode it as a JWT.credential-crypto-hygieneDefensive Security9 stepsPublic Web Exposure & Hardening AuditBuild a web security scorecard from HTTP, TLS, header, stack, CMS, WAF, and email-security checks, then generate a matching hardened config template.web-exposure-hardeningDefensive Security7 stepsCloud & Software Supply-Chain Exposure ReviewAssess a cloud storage bucket, a repository's exposed secrets, a container host, and an optional SBOM, alongside cloud-posture, CIS, and config guidance.cloud-supply-chain-reviewDefensive Security7 stepsSecurity Hardening BlueprintChain a Zero Trust maturity assessment, cloud posture, CIS benchmark, firewall audit, network segmentation, hardened config, and honeypot templates into one blueprint.security-hardening-blueprintDefensive Security4 stepsNetwork Architecture PlannerCorrelate a firewall audit, a segmentation design reference, a Zero Trust maturity assessment, and hardened configuration guidance.network-architecture-plannerDefensive Security6 stepsCompliance & Risk ReadinessCorrelate a compliance self-assessment, a CIS benchmark, cloud posture, quantitative risk analysis, and a generated policy document into one GRC package.compliance-risk-readinessDefensive Security10 stepsIncident Artifact Triage & TimelineConvert a pasted log or artifact into indicators, a chronological timeline, and detection/response content in one pass.incident-artifact-timelineDefensive Security4 stepsEvent Normalization InvestigationNormalize a pasted log or artifact into indicators, structured log entries, and - when possible - a forensic timeline.event-normalization-investigationOffensive Security7 stepsAuthorized Web Content ExposureRun a bounded discovery pass against an authorized URL - reachability, stack/CMS/WAF fingerprinting, directory discovery, web shell exposure, and Git/secrets exposure.authorized-web-content-exposureOffensive Security11 stepsAuthorized Web & API Attack-Surface ReviewChain passive fingerprinting with web and API misconfiguration checklists - tech stack, CMS, WAF, headers, CORS, GraphQL, OAuth, WebSocket, Host header, API fuzz, and WAF test cases.authorized-web-api-reviewOffensive Security9 stepsToken & Session Security ReviewReview a token's structure and generate session-security test cases - JWT decode/attack review, CSRF PoC, OAuth, WebSocket, race condition, Host header, API fuzz, and WAF test cases.token-session-security-reviewOffensive Security4 stepsFile Upload Defense Test PackGenerate upload-bypass and polyglot test cases for an authorized lab, with optional local artifact type/metadata detection.file-upload-defense-test-packOffensive Security2 stepsBinary Exploit ReadinessProduce a checksec-style analysis checklist and exploit-development templates (cyclic pattern, shellcode, ROP gadgets) for an authorized binary-exploitation lab.binary-exploit-readinessDefensive Security11 stepsVulnerability Prioritization & Purple TeamTurn a CVE into severity, ATT&CK mapping, adversary emulation, purple-team exercise, detection content, and an incident-response playbook in one chain.vulnerability-prioritization-purple-teamDefensive Security9 stepsCVE-to-Detection EngineeringBridge CVE enrichment, severity, ATT&CK mapping, and detection content straight into response readiness - a shorter, detection-first sibling of Vulnerability Prioritization & Purple Team.cve-to-detection