Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/wstg-info-06
Identify Application Entry Points
Passed 19 of 22 test cases with the skill, and 15 of 22 without it.
and 6 more in the full report
4 fixed15 passed either way3 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 4 test cases the skill fixed. Same model, same prompt, with and without the skill.
We have source code for a Java web application and want to discover endpoints statically before dynamic testing. What CLI tool specifically analyzes source code repositories for entry points, and what command syntax launches it against <source>?
| Checked | Without skill | With skill |
|---|---|---|
| Names Attack Surface Detector for static source code entry point analysis. | Missed | Passed |
| Provides the command syntax java -jar asd.jar <source>. | Missed | Passed |
The instructions your model reads when the skill loads.
WSTG-INFO-06
Identify Application Entry Points
Entry points are the interfaces through which user-supplied data enters the application. Identifying all entry points is critical for mapping the application's attack surface before conducting targeted security tests. Entry points include URL parameters, POST body data, HTTP headers, cookies, file uploads, and any other mechanism that accepts user input. A comprehensive understanding of entry points allows penetration testers to systematically test each input vector for vulnerabilities such as injection, access control bypasses, and business logic flaws.
test cases passed, vs 15 / 22 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.