0x-Professor

Scaffold frontend architecture, components, routing, and UI dependencies from project config and wireframes.

Test APIs against OWASP API Security Top 10 including discovery, auth abuse, and protocol-specific checks.

Map application security findings to OWASP Top 10 categories and generate remediation checklists. Use for normalized AppSec review outputs and category-level prioritization.

Assess lateral movement and pivot paths across authorized internal trust boundaries.

Assess AWS, Azure, and GCP controls for IAM escalation and cloud service exposure.

Validate database schema, migrations, indexes, and query behavior with structured pass/fail reporting.

Perform passive reconnaissance and leak intelligence collection with no direct contact to target systems.

Correlate scanner results with CVE and exploit intelligence and prioritize by CVSS and exploitability.

Create and evolve production-ready skills with reusable scripts, references, and validation. Use for new skill creation, skill upgrades, and enforcing consistent metadata and structure.

Systematically test authorized targets for SQL, XSS, SSTI, XXE, command, and request-smuggling injection classes.

Aggregate SAST, SCA, DAST, secrets, API, frontend, and backend security checks into one report.

Prioritize vulnerability remediation using KEV-style exploitation context plus asset criticality. Use for CVE triage, patch order decisions, and remediation reporting.