Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/wstg-errh-02
Testing for Stack Traces
Passed 17 of 21 test cases with the skill, and 16 of 21 without it.
1 fixed17 passed either way4 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
A test case the skill fixed. Same model, same prompt, with and without the skill.
Under the OWASP Web Security Testing Guide classification, what standard test identifier corresponds to testing for stack trace exposure?
| Checked | Without skill | With skill |
|---|---|---|
| Identifies the test ID as WSTG-ERRH-02. | Missed | Passed |
The instructions your model reads when the skill loads.
WSTG-ERRH-02
Testing for Stack Traces
Stack traces provide detailed information about application internals including function call sequences, file paths, line numbers, and sometimes variable values. When exposed to users, stack traces can reveal sensitive implementation details that help attackers understand the application architecture and identify potential vulnerabilities.
#!/bin/bash
TARGET="https://target.com"
# Force exceptions with various inputs
payloads=(
# Division/null errors
"0"
"null"
test cases passed, vs 16 / 21 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.