From 5906d74b2d56ec4712aeb4d40789dd8479d2ea61 Mon Sep 17 00:00:00 2001 From: yhc <1964366186@qq.com> Date: Mon, 10 Aug 2026 19:11:06 +0800 Subject: [PATCH] chore: remove stale evolution counters, unify capability/tool counts to source of truth MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - Remove hand-maintained comments from 12 journal/seed files (counters were contradictory: 21/7/8/11/12/94/18; template keeps the placeholder for future guidance) - Capability lists in RULES.md / RULES_zh.md / skills/SKILL.md now match bootstrap-manifest.json (24 capabilities: add jeb-pro, reqable-mcp, bkcrack) - Burp tool count in RULES_zh.md: 63 -> 78 (verified against getToolList() in burp-mcp-full/McpHttpServer.java; RULES.md already said 78) --- RULES.md | 2 +- RULES_zh.md | 4 ++-- skills/SKILL.md | 2 +- ...25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md | 1 - skills/field-journal/2026-06-29_burp-mcp-full-test-and-fix.md | 1 - .../2026-07-14_android-arm64-self-extract-source-recovery.md | 1 - .../2026-07-20_reverse-toolchain-windows-bootstrap.md | 1 - .../2026-07-22_electron-bytenode-privileged-update-chain.md | 1 - ...08-01_nextjs-cdk-contract-faithful-local-reconstruction.md | 1 - ...st-encryption-oracle-public-template-sql-admin-takeover.md | 1 - ...-08-08_client-neutral-structured-routing-pr-integration.md | 1 - skills/field-journal/seed-001_elf-packed-loader.md | 1 - skills/field-journal/seed-002_go-malware-stripped.md | 1 - skills/field-journal/seed-003_web-api-auth-bypass.md | 1 - skills/field-journal/seed-004_js-sign-webpack.md | 1 - 15 files changed, 4 insertions(+), 16 deletions(-) diff --git a/RULES.md b/RULES.md index 73a5729..2190985 100644 --- a/RULES.md +++ b/RULES.md @@ -312,7 +312,7 @@ Windows (PowerShell): powershell -NoProfile -ExecutionPolicy Bypass -File "/skills/scripts/bootstrap-reverse.ps1" -Capability @('tool_name') -StartServices Supported capability names (must match `skills/scripts/bootstrap-manifest.json`): -jadx, apktool, frida, frida-ps, idalib-mcp, jshookmcp, anything-analyzer, idapro, r2, rabin2, adb, agent-browser, ghidra-mcp, nmap, seclists, proxycat, burpsuite-mcp, pentestswarm, binwalk, pwntools, yara +jadx, apktool, jeb-pro, frida, frida-ps, idalib-mcp, reqable-mcp, jshookmcp, anything-analyzer, idapro, r2, rabin2, adb, agent-browser, ghidra-mcp, seclists, proxycat, burpsuite-mcp, nmap, pentestswarm, binwalk, yara, pwntools, bkcrack Do NOT invent capabilities. Tools not listed require manual install steps in the skill docs. ``` diff --git a/RULES_zh.md b/RULES_zh.md index 3cd2d28..38e46e8 100644 --- a/RULES_zh.md +++ b/RULES_zh.md @@ -277,7 +277,7 @@ | anything-analyzer | 23816 | 浏览器自动化 + HTTP 捕获 | `pnpm dev`（项目目录） | | jshookmcp | — | JS Hook/CDP/Network/AST | `npx -y @jshookmcp/jshook@0.3.4`（stdio） | | ghidra | 8765 | Ghidra 免费反编译 | Ghidra GUI 启动后自动监听 | -| burpsuite | 9876 | BurpSuite 63 工具全控制（Proxy/Intruder/Repeater/Scanner/Collaborator） | Burp 启动后扩展自动加载 | +| burpsuite | 9876 | BurpSuite 78 工具全控制（Proxy/Intruder/Repeater/Scanner/Collaborator） | Burp 启动后扩展自动加载 | 使用 MCP 工具前： 1. 先确认 `tool-index.md` 中该服务的 `MCP 已注册` 状态 @@ -463,7 +463,7 @@ Kali Linux（Bash，含 Kali 原生工具链）： bash <本包根目录>/kali/scripts/bootstrap-reverse.sh 工具名 --start-services ``` -支持的能力名（与 `skills/scripts/bootstrap-manifest.json` 保持一致，共 21 项）：jadx、apktool、frida、frida-ps、idalib-mcp、jshookmcp、anything-analyzer、idapro、r2、rabin2、adb、agent-browser、ghidra-mcp、seclists、proxycat、burpsuite-mcp、nmap、pentestswarm、binwalk、yara、pwntools +支持的能力名（与 `skills/scripts/bootstrap-manifest.json` 保持一致，共 24 项）：jadx、apktool、jeb-pro、frida、frida-ps、idalib-mcp、reqable-mcp、jshookmcp、anything-analyzer、idapro、r2、rabin2、adb、agent-browser、ghidra-mcp、seclists、proxycat、burpsuite-mcp、nmap、pentestswarm、binwalk、yara、pwntools、bkcrack ## 刷新工具索引 diff --git a/skills/SKILL.md b/skills/SKILL.md index 2923c43..187dc6e 100644 --- a/skills/SKILL.md +++ b/skills/SKILL.md @@ -143,7 +143,7 @@ description: Routes reverse engineering, exploitation, penetration testing, malw powershell -NoProfile -ExecutionPolicy Bypass -File "\scripts\bootstrap-reverse.ps1" -Capability @('工具名') -StartServices ``` -支持的能力（以 `scripts/bootstrap-manifest.json` 为准）：jadx、apktool、frida、frida-ps、idalib-mcp、jshookmcp、reqable-mcp、anything-analyzer、idapro、r2、rabin2、adb、agent-browser、ghidra-mcp、nmap、seclists、proxycat、burpsuite-mcp、pentestswarm、binwalk、pwntools、yara +支持的能力（以 `scripts/bootstrap-manifest.json` 为准）：jadx、apktool、jeb-pro、frida、frida-ps、idalib-mcp、reqable-mcp、jshookmcp、anything-analyzer、idapro、r2、rabin2、adb、agent-browser、ghidra-mcp、seclists、proxycat、burpsuite-mcp、nmap、pentestswarm、binwalk、yara、pwntools、bkcrack > JEB Pro 已登记为**手动许可安装**能力：bootstrap 只输出指引，绝不下载或规避商业许可。Reqable MCP 仅登记固定版本的官方运行时，仍需要用户自行安装 Reqable 桌面客户端。 > diff --git a/skills/field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md b/skills/field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md index 74a91da..f12253f 100644 --- a/skills/field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md +++ b/skills/field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md @@ -200,4 +200,3 @@ export default { - 命令 PoC 中所有 `{ }` 占位符提交前已替换,**没有公网 IP / 真实域名 / 真实 token 泄露** --- - diff --git a/skills/field-journal/2026-06-29_burp-mcp-full-test-and-fix.md b/skills/field-journal/2026-06-29_burp-mcp-full-test-and-fix.md index 6cda4d8..66cd771 100644 --- a/skills/field-journal/2026-06-29_burp-mcp-full-test-and-fix.md +++ b/skills/field-journal/2026-06-29_burp-mcp-full-test-and-fix.md @@ -138,5 +138,4 @@ activeAudit.addRequest(seedReq); 2. 更新「累计统计」的计数与"最近更新"日期 --- - diff --git a/skills/field-journal/2026-07-14_android-arm64-self-extract-source-recovery.md b/skills/field-journal/2026-07-14_android-arm64-self-extract-source-recovery.md index d2bca83..a5bce43 100644 --- a/skills/field-journal/2026-07-14_android-arm64-self-extract-source-recovery.md +++ b/skills/field-journal/2026-07-14_android-arm64-self-extract-source-recovery.md @@ -105,5 +105,4 @@ curl.exe -sS -I '/radareorg/radare2/releases/latest' 已在 `_index.md` 的“二进制 / 固件 / CTF”分类中增加本条记录并更新统计。 --- - diff --git a/skills/field-journal/2026-07-20_reverse-toolchain-windows-bootstrap.md b/skills/field-journal/2026-07-20_reverse-toolchain-windows-bootstrap.md index 95d4f95..8b95a61 100644 --- a/skills/field-journal/2026-07-20_reverse-toolchain-windows-bootstrap.md +++ b/skills/field-journal/2026-07-20_reverse-toolchain-windows-bootstrap.md @@ -80,5 +80,4 @@ cdb -g -G C:\Windows\System32\where.exe cmd 已更新 `_index.md` 的统计与“工具链与环境”分类。 --- - diff --git a/skills/field-journal/2026-07-22_electron-bytenode-privileged-update-chain.md b/skills/field-journal/2026-07-22_electron-bytenode-privileged-update-chain.md index d492c96..71564c9 100644 --- a/skills/field-journal/2026-07-22_electron-bytenode-privileged-update-chain.md +++ b/skills/field-journal/2026-07-22_electron-bytenode-privileged-update-chain.md @@ -98,5 +98,4 @@ signtool verify /pa /all /v '{native_game_sdk}' 本文仅保留通用版本、API 路径结构、数量级和分析方法。样本名、发布者、真实域名、案件目录、哈希、配置密钥、token 与用户标识均已替换或省略；未附带样本文件。 --- - diff --git a/skills/field-journal/2026-08-01_nextjs-cdk-contract-faithful-local-reconstruction.md b/skills/field-journal/2026-08-01_nextjs-cdk-contract-faithful-local-reconstruction.md index 538dd04..c4bb8b1 100644 --- a/skills/field-journal/2026-08-01_nextjs-cdk-contract-faithful-local-reconstruction.md +++ b/skills/field-journal/2026-08-01_nextjs-cdk-contract-faithful-local-reconstruction.md @@ -133,5 +133,4 @@ BASE_URL=http://127.0.0.1:{port} npm run smoke - [x] 交付经验仅保留方法、结构与验证模式 --- - diff --git a/skills/field-journal/2026-08-01_pentest-encryption-oracle-public-template-sql-admin-takeover.md b/skills/field-journal/2026-08-01_pentest-encryption-oracle-public-template-sql-admin-takeover.md index a752d7b..e40ae8b 100644 --- a/skills/field-journal/2026-08-01_pentest-encryption-oracle-public-template-sql-admin-takeover.md +++ b/skills/field-journal/2026-08-01_pentest-encryption-oracle-public-template-sql-admin-takeover.md @@ -138,5 +138,4 @@ PROOF=PASS 本文件已加入 Web/API 场景、高频 Web/API 授权模式和 .NET CMS 模板解析实体倒排；统计日期同步为 2026-08-01。 --- - diff --git a/skills/field-journal/2026-08-08_client-neutral-structured-routing-pr-integration.md b/skills/field-journal/2026-08-08_client-neutral-structured-routing-pr-integration.md index d7edd89..4e3d65c 100644 --- a/skills/field-journal/2026-08-08_client-neutral-structured-routing-pr-integration.md +++ b/skills/field-journal/2026-08-08_client-neutral-structured-routing-pr-integration.md @@ -96,5 +96,4 @@ bash skills/scripts/master-route.sh --hint "case review evidence graph" 本条目不包含真实目标、凭据、内部地址或个人身份信息。 --- - diff --git a/skills/field-journal/seed-001_elf-packed-loader.md b/skills/field-journal/seed-001_elf-packed-loader.md index fabc859..14069f3 100644 --- a/skills/field-journal/seed-001_elf-packed-loader.md +++ b/skills/field-journal/seed-001_elf-packed-loader.md @@ -90,5 +90,4 @@ cbz w4, refill # 如果移空了，从输入加载新的 32 位 本条目为种子数据，基于公开技术模式编写，不涉及真实目标。 --- - diff --git a/skills/field-journal/seed-002_go-malware-stripped.md b/skills/field-journal/seed-002_go-malware-stripped.md index 03efd35..deb4a71 100644 --- a/skills/field-journal/seed-002_go-malware-stripped.md +++ b/skills/field-journal/seed-002_go-malware-stripped.md @@ -86,5 +86,4 @@ cat symbols.json | jq '.Functions[] | select(.PackageName == "main")' 本条目为种子数据，基于公开技术模式编写，不涉及真实目标。 --- - diff --git a/skills/field-journal/seed-003_web-api-auth-bypass.md b/skills/field-journal/seed-003_web-api-auth-bypass.md index 62db735..f91c822 100644 --- a/skills/field-journal/seed-003_web-api-auth-bypass.md +++ b/skills/field-journal/seed-003_web-api-auth-bypass.md @@ -84,5 +84,4 @@ curl https://target.example.com/api/v1/users/USER_B_ID 本条目为种子数据，基于公开技术模式编写，不涉及真实目标。 --- - diff --git a/skills/field-journal/seed-004_js-sign-webpack.md b/skills/field-journal/seed-004_js-sign-webpack.md index 862cadb..4755b7d 100644 --- a/skills/field-journal/seed-004_js-sign-webpack.md +++ b/skills/field-journal/seed-004_js-sign-webpack.md @@ -94,5 +94,4 @@ console.log(generateSign(params, timestamp, secretKey)); 本条目为种子数据，基于公开技术模式编写，不涉及真实目标。 --- -