php-session-cookie-audit

A CodeIgniter framework security audit skill that performs white-box static analysis covering CSRF protection, XSS output filtering, SQL injection via query concatenation, session/cookie security, and authentication/access control, mapping findings to standard vulnerability type codes.

A ThinkPHP framework security audit skill that performs white-box static analysis covering authentication bypass, CSRF protection gaps, template engine XSS via raw output, ORM mass assignment vulnerabilities, raw SQL injection points, and debug/config exposure risks.

A WordPress framework security audit skill that performs white-box static analysis on nonce/capability checks, AJAX actions, output escaping, $wpdb query parameterization, redirect safety, file uploads, and remote requests, mapping findings to vulnerability categories like CSRF, XSS, SQL injection, and SSRF.

A PHP source code audit skill that identifies SQL injection vulnerabilities by tracing user input to SQL execution points across PDO, mysqli, and ORM patterns, then outputs detailed reports with severity ratings, proof-of-concept payloads, and remediation guidance.

A PHP XSS security audit skill that analyzes PHP source code to identify cross-site scripting vulnerabilities across HTML, attribute, JavaScript, URL, and template contexts, with severity grading, proof-of-concept payloads, and remediation guidance.

A PHP source code command injection audit skill that identifies command execution sinks (exec, system, shell_exec, etc.), traces user input into command construction points, and outputs exploitability ratings with PoC exploits and remediation recommendations.

A white-box security audit skill for the Yii2 PHP framework that statically analyzes access control (AccessControl/RBAC), CSRF protection, input filtering, output encoding, and URL/redirect safety, mapping findings to a standardized vulnerability taxonomy.

A Laravel framework security audit skill that performs white-box static analysis covering authentication and route protection, CSRF token handling, session and cookie security, Eloquent mass assignment vulnerabilities, Blade template XSS risks, and signed URL verification.

A PHP source code audit skill focused on file upload security, detecting arbitrary file upload, path traversal, and executable upload risks through static analysis with structured evidence grading and PoC generation.

A PHP security audit skill that identifies Server-Side Request Forgery (SSRF) vulnerabilities by tracing user-controllable URLs into network request sinks like curl_exec, file_get_contents, and fsockopen. Outputs exploitability ratings, proof-of-concept payloads, and remediation recommendations.