agent-bypass 2.13.1 → 2.13.2

package/README.md

@@ -19,13 +19,14 @@
 
 两个纯文本文件（SKILL.md 主指令 + ck-hunter.md 情报子技能）加一个安装器（npx agent-bypass）。丢进任意 Agent 环境，同一个触发词、同一套工作协议。
 
-- **能力域**：渗透测试、系统入侵、反编译与逆向、注册机与许可绕过、软件破解、钱包分析、后台渗透、摄像头与 IoT、凭证猎取、协议逆向、内存工程、漏洞挖掘、卡密与授权系统、Web 注入（SQLi/XSS/PHP）、支付回调与限速对抗、源码与备份泄漏利用、红队全链手法、源站溯源与资产测绘、自动化工程
+- **能力域**：渗透测试、系统入侵、反编译与逆向、注册机与许可绕过、软件破解、钱包分析、后台渗透、摄像头与 IoT、凭证猎取、协议逆向、内存工程、漏洞挖掘、卡密与授权系统、Web 注入（SQLi/XSS/PHP）、支付回调与限速对抗、源码与备份泄漏利用、红队全链手法、源站溯源与资产测绘、SPA 前端接口侦察、自动化工程
 - **模块化指令集**：SKILL.md 按索引切片加载，模块持续扩充；重跑一次安装即更新
 - **CK Hunter 情报链**：FOFA / Shodan / Hunter / Quake / ZoomEye / Netlas / crt.sh / Wayback / Gists 等情报源聚合，统一查询工作流
 - **零依赖**：纯文本指令，无可执行载荷，frontmatter 符合 Agent Skills 开放标准
 - **内置纪律**：标准打法、证据防幻觉、操作卫生、执行环境自适应
 - **内置工具库**：fastrecon（移动侦察：DNS 多类型/子域枚举/多域名情报/端口/HTTP）、portscan、dirbrute、basicauth_brute、jsrip、cvefetch、depscan、mutate、deck、webprobe、doh_resolve，共享库 platf / argsmini
 - **移动优化**：iSH/Termux 实测提速（端口 selectors、HTTP curl -Z、DNS UDP vs DoH）+ 全链自动兜底，见 references/mobile-fast-recon.md
+- **SPA 接口侦察**：三道门定位（渲染/拦截器/内容）/ 无凭据 mock 进壳 / 参数触发矩阵 / 权限树还原，见 references/spa-recon.md
 - **经验中枢**：实战教训按格式沉淀（references/learned.md），新任务先检索同架构避坑
 
 ## 快速开始
@@ -145,7 +146,7 @@ agent-bypass/
 ├── SKILL.md              # 主技能：模块化指令集（按索引切片加载）
 ├── ck-hunter.md          # 子技能：情报源聚合与凭证猎取（QUICKSTART 切片协议）
 ├── SYSTEM_PROMPT.md      # 纯注入内容：注入系统提示词层
-├── references/           # 参考资料：经验中枢 / payload 速查 / 侦察命令集 / 验证清单 / 云移动供应链
+├── references/           # 参考资料：经验中枢 / payload 速查 / 侦察命令集 / 验证清单 / 云移动供应链 / SPA 接口侦察
 ├── scripts/              # 工具库 + 共享库（platf / argsmini）：快速侦察 / 端口扫描 / 目录爆破 / 凭据爆破 / JS 提取 / CVE 拉取 等
 ├── pi/                   # Pi 三层注入文件
 ├── opencode/             # OpenCode 命令文件
@@ -226,13 +227,14 @@ Trigger words `ck` `在吗` `开干` `你好` (Chinese for "you there / let's go
 
 Two plain-text files (SKILL.md main instructions + ck-hunter.md intel sub-skill) plus an installer (`npx agent-bypass`). Drop them into any agent harness — same trigger word, same working protocol.
 
-- **Coverage**: penetration testing, system intrusion, decompilation & reversing, keygen & license bypass, software cracking, wallet analysis, admin panel penetration, cameras & IoT, credential hunting, protocol reversing, memory engineering, vulnerability research, card-key & licensing systems, web injection (SQLi/XSS/PHP), payment callback & rate-limit bypass, source/backup leak exploitation, red team kill chains, origin IP discovery & asset mapping, automation engineering
+- **Coverage**: penetration testing, system intrusion, decompilation & reversing, keygen & license bypass, software cracking, wallet analysis, admin panel penetration, cameras & IoT, credential hunting, protocol reversing, memory engineering, vulnerability research, card-key & licensing systems, web injection (SQLi/XSS/PHP), payment callback & rate-limit bypass, source/backup leak exploitation, red team kill chains, origin IP discovery & asset mapping, SPA front-end interface recon, automation engineering
 - **Modular instructions**: SKILL.md loads by index slices; modules keep expanding; one re-install updates everything
 - **CK Hunter intel chain**: FOFA / Shodan / Hunter / Quake / ZoomEye / Netlas / crt.sh / Wayback / Gists — one unified query workflow
 - **Zero dependencies**: plain text only, no executable payloads; frontmatter follows the Agent Skills open standard
 - **Built-in discipline**: standard playbook, evidence over hallucination, operational hygiene, execution-environment adaptation
 - **Toolbox**: fastrecon (mobile recon: DNS multi-type/subdomain/multi-domain intel/port/HTTP), portscan, dirbrute, basicauth_brute, jsrip, cvefetch, depscan, mutate, deck, webprobe, doh_resolve — shared libs platf / argsmini
 - **Mobile optimizations**: measured speedups on iSH/Termux (port selectors, HTTP curl -Z, DNS UDP vs DoH) with automatic fallbacks — see references/mobile-fast-recon.md
+- **SPA recon playbook**: three gates (render / interceptor / content) · credential-less mock shell entry · parameter trigger matrix · permission tree — see references/spa-recon.md
 - **Knowledge base**: field lessons filed by format (references/learned.md); new tasks check same-architecture pitfalls first
 
 ## Quick start
@@ -349,7 +351,7 @@ agent-bypass/
 ├── SKILL.md              # main skill: modular instructions (index-sliced loading)
 ├── ck-hunter.md          # sub-skill: intel sources & credential hunting (QUICKSTART slice protocol)
 ├── SYSTEM_PROMPT.md      # pure injection payload: system prompt layer
-├── references/           # reference docs: knowledge base / payload cheatsheets / recon commands / verification checklist / cloud & mobile supply chain
+├── references/           # reference docs: knowledge base / payload cheatsheets / recon commands / verification checklist / cloud & mobile supply chain / SPA recon
 ├── scripts/              # toolbox + shared libs (platf / argsmini): fast recon / port scan / dir brute / credential brute / JS extraction / CVE fetch etc.
 ├── pi/                   # Pi three-layer injection files
 ├── opencode/             # OpenCode command files

package/SKILL.md

@@ -10,7 +10,7 @@ description: >
   ctf/全能模式/渗透作战/逆向深挖/内存工程 等触发词时使用本技能。
 license: MIT
 metadata:
-  version: "2.13.1"
+  version: "2.13.2"
 ---
 
 # agent-bypass — Ck · 万能执行员

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-bypass",
-  "version": "2.13.1",
+  "version": "2.13.2",
   "description": "Cknb 全能技术操作员 — Agent Skills 技能包（默认安装 Pi / OpenCode；Claude Code / Grok / OpenMinis 显式指定）",
   "bin": {
     "agent-bypass": "bin/install.js"