noverdy-skills

Plugin noverdy-skills from marketplace noverdy in noverdy/skills. Commands read from the repo's manifest — 19 days ago.

Skills (8)

• receiving-temp-email

  Creates a disposable email inbox (Mail.tm, with Maildrop as backup) and reads incoming mail such as verification codes and magic links. Use when a task needs a temp, throwaway or burner email address, e.g. for test sign-ups or grabbing an OTP.

• checking-wordpress-duplicates

  Checks whether a WordPress plugin or theme vulnerability is already known before it is reported, by merging Patchstack, Wordfence, NVD and optionally WPScan records for the slug and matching version range, bug type and parameter. Use before submitting a WordPress finding to Patchstack, Wordfence or

• looking-up-wordpress-plugins

  Looks up wordpress.org plugins for bug bounty work: real install range and Wordfence band, versions with release dates, closed status, source code of any version, diffs between versions or of one SVN commit, and targets in an install band. Use when a task names a WordPress plugin slug, needs a vulne

• estimating-patchstack-bounties

  Estimate what a WordPress plugin or theme vulnerability earns on the Patchstack bug bounty, as XP and dollars, check it is in scope, and spot zero-day bounties. Use when pricing a finding for Patchstack, deciding between Patchstack and Wordfence, or reading Patchstack's XP, VDP or leaderboard rules.

• estimating-wordfence-bounties

  Estimate the Wordfence bug bounty payout for a WordPress plugin or theme vulnerability, and check whether it is in scope. Use when pricing a finding, comparing which bug class or install band is worth hunting, or reading the Wordfence bounty estimator.

• snapshotting-http-requests

  Renders an HTTP request and response as a Burp-style snapshot PNG for a bug bounty or pentest report, with the evidence boxed, notes, and secrets blurred. Use when a finding needs a request/response screenshot, proof image, or "Burp screenshot" without Burp.

• receiving-oob-callbacks

  Creates an out-of-band callback host on the public interactsh servers and reports the DNS and HTTP hits the target makes to it. Use when confirming blind SSRF, blind XSS, XXE, blind command injection or any bug where the target must call out, or when the user mentions OAST, interactsh or Burp Collab

• running-wordpress-labs

  Starts a throwaway local WordPress with an exact plugin or theme version and a user per role, then maps its AJAX actions and REST routes with their nonce and capability checks and hands out cookies and nonces for any role. Use when reproducing or testing a WordPress plugin or theme vulnerability, wr

Similar plugins