全部 Skills / INSTAVM

instavm/security-skills

mitm-find-insecure

Find insecure configurations in HTTP traffic.

使用方法

复制安装命令，在自己的智能体环境安装前先检查源码包。
从原始文档核对所需工具、凭据和支持的宿主。
说明输入材料与期望交付物，并对照来源检查输出。

npx skills add https://github.com/instavm/security-skills --skill mitm-find-insecure

开始前需了解

安装不包含模型订阅、API 额度或访问文件的权限。
仓库星数和安装量反映活跃情况，不等于独立质量或安全测试。

仓库原始内容

按源仓库内容呈现，保留标题、案例、代码、表格、链接以及原文引用的演示图片。

Find Insecure Configurations

Analyze the mitmproxy dump (log.txt) for insecure configs for: $ARGUMENTS

Requires: log.txt in the current directory. If it's missing, capture traffic first: ``bash mitmdump --set flow_detail=3 2>&1 | tee log.txt

Security Checks

1. HTTP Instead of HTTPS

Sensitive data over plain HTTP
Login/payment pages on HTTP
Mixed content issues

2. Missing Security Headers

Strict-Transport-Security (HSTS)
X-Content-Type-Options
X-Frame-Options
Content-Security-Policy
X-XSS-Protection
Referrer-Policy

3. Insecure Cookies

Missing Secure flag
Missing HttpOnly flag
Missing SameSite attribute
Session cookies without protection

4. CORS Issues

Access-Control-Allow-Origin: *
Credentials allowed with wildcard
Overly permissive origins

5. SSL/TLS Issues

SHA1 certificates (deprecated)
Weak cipher suites
Outdated TLS versions

6. Information Disclosure

Sensitive data in GET params
Debug/verbose errors exposed
Stack traces in responses
Internal file paths revealed

Output Format

For each finding:

Endpoint/Resource: Where issue exists
Issue: What's misconfigured
Current Value: What was observed
Recommended: Secure configuration
Risk: Potential attack vector
Severity: Critical/High/Medium/Low/Info

按任务相关推荐