transilienceai/communitytools/server-side
Claude Code and agent skill by transilienceai/communitytools
Trust tier 3
- community
Source check pending
Checking that the SKILL.md file is still in the repository.
Server-side vulnerability testing - SSRF, HTTP Request Smuggling, Path Traversal, File Upload, Insecure Deserialization, and Host Header injection.
Install
npx vskill@latest install transilienceai/communitytools/server-sideSKILL.md
Server-Side
Test for server-side vulnerabilities that allow unauthorized access, RCE, or data exfiltration.
Techniques
| Type | Key Vectors | |
|---|---|---|
| SSRF | Internal service access, cloud metadata, protocol smuggling | |
| HTTP Smuggling | CL.TE, TE.CL, TE.TE, CL.0, H2.CL, h2c, multi-layer proxy chains, connection pooling desync | |
| Path Traversal | Directory traversal, null bytes, encoding bypass | |
| File Upload | Extension bypass, content-type manipulation, polyglot files | |
| Deserialization | Java, PHP, Python, .NET gadget chains | |
| Host Header | Password reset poisoning, cache poisoning, routing-based SSRF | |
| CUPS / cups-browsed | CVE-2024-47076/47175/47176/47177 — UDP browse → IPP injection → PPD injection → foomatic-rip RCE (see skills/infrastructure/reference/scenarios/network-recon/cups-browsed-rce.md) |
Workflow
- Identify server-side processing points
- Test for vulnerability class indicators
- Bypass protections (WAF, allowlists, encoding filters)
- Demonstrate impact (file read, RCE, internal access)
- Capture evidence with PoC
Reference
reference/scenarios/ssrf/*.md- SSRF techniques and labsreference/http-request-smuggling*.md- Smuggling techniquesreference/scenarios/path-traversal/*.md- Path traversal bypass methodsreference/file-upload*.md- File upload exploitationreference/insecure-deserialization*.md- Deserialization attacksreference/http-host-header*.md- Host header injectionskills/infrastructure/reference/scenarios/network-recon/cups-browsed-rce.md- CUPS RCE chain (CVE-2024-47076/175/176/177); ipptool false positives vs libcups runtime parser; ippserver Python lib version-1.1 hardcode bug
Security
- Security scanPassed, 90 of 100Pattern checks on the skill's files.
- Model reviewPassed
Quality evaluation
- Task evaluationNot runNo evaluation yet. Run one in Skill Studio.
Source
- SKILL.md in the repositoryCheckingskills/server-side/SKILL.md
Popularity
- Repository stars
- 474
- Repository forks
- 73
- 7-day trend score
- 31
Stars and forks are for the whole GitHub repository, not this skill alone. Refreshed 22 May 2026, 5 months ago.
Works with
Any agent vskill installs to: 56 targets in all. These 39 have a page on this site.
- Claude Code
- Cursor
- GitHub Copilot
- Windsurf
- Codex
- Gemini CLI
- Cline
- Amp
- Roo Code
- Goose
- Continue
- Kilo Code
- Junie
- Trae
- OpenHands
- Qwen Code
- AI Agent
- Tabnine Chat
- Sourcegraph Cody
- Amazon Q
- Firebase Genkit
- Sweep
- Devin
- Phind
- Mentat
- Claude Desktop
- Aider
- GPT Pilot
- Plandex
- bolt.new
- v0
- Replit Agent
- Anse
- TypingMind
- BetterChatGPT
- LibreChat
- Warp AI
- Pieces
- Fig AI
Embed badge
[](https://verified-skill.com/skills/transilienceai/communitytools/server-side)