mortal/strix
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Address Greptile review feedback on AWS and deserialization skills

Browse Source 
- Use head-bucket for S3 existence checks instead of duplicating s3 ls
- Add Node.js to insecure_deserialization frontmatter description
This commit is contained in:
Ayush7614
2026-07-02 00:38:03 +05:30
parent 100f561e91
commit ff5b96ea40
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
strix/skills/cloud/aws.md
+3 -3
View File
@@ -41,11 +41,11 @@ AWS misconfigurations frequently expose credentials, data, and lateral movement
**Unauthenticated Enumeration** **Unauthenticated Enumeration**
``` ```
# S3 bucket existence (403 vs 404 reveals existence) # S3 bucket existence (403 = exists but private, 404 = doesn't exist or different region)
aws s3 ls s3://target-bucket --no-sign-request aws s3api head-bucket --bucket target-bucket --no-sign-request 2>&1
curl -I https://target-bucket.s3.amazonaws.com/ curl -I https://target-bucket.s3.amazonaws.com/
# Public listing # Public listing (confirms s3:ListBucket is granted to AllUsers)
aws s3 ls s3://target-bucket --no-sign-request aws s3 ls s3://target-bucket --no-sign-request
``` ```
strix/skills/vulnerabilities/insecure_deserialization.md
+1 -1
View File
@@ -1,6 +1,6 @@
--- ---
name: insecure_deserialization name: insecure_deserialization
description: Insecure deserialization testing for Java, Python, PHP, .NET, and Ruby covering gadget chains, type confusion, and safe validation description: Insecure deserialization testing for Java, Python, PHP, .NET, Ruby, and Node.js covering gadget chains, type confusion, and safe validation
--- ---
# Insecure Deserialization # Insecure Deserialization