文本创作
纯文本提示词：写作、对话、代码、角色设定等
7081 个提示词
- Short-term containment (isolate, block, rotate creds) - Long-term eradication (root…
Containment, eradication, recovery
- Alert triage workflow (severity, scope, confidence) - Common incident types and…
Detection and analysis
- IR team roles and responsibilities (IC, comms, tech, legal) - Contact tree and…
Preparation
生成安全事件响应计划,涵盖准备、检测、遏制、根除、恢复和事后分析阶段。
Security Incident Response Plan Generator
- Threat model artifact format - Integration with backlog/issue tracker - Review…
Documentation and tracking
- Prioritized control recommendations - Architectural vs compensating controls -…
Mitigation design
- Likelihood × Impact scoring methodology - Business context weighting - Control…
Risk assessment
- STRIDE per element (Spoofing, Tampering, Repudiation, Info disclosure, DoS, Elevation)…
Threat identification
- Data flow diagram creation (DFD level 0, 1, 2) - Trust boundary identification -…
System decomposition
主持威胁建模工作坊,使用STRIDE/Attack Tree/PASTA方法识别系统威胁。
Threat Modeling Workshop Facilitation
- Pipeline secret exposure - Build artifact integrity - Dependency confusion attacks -…
CI/CD security
- Vulnerability scanning (Snyk, Dependabot, OSV) - License compliance - Transitive…
Dependency review
- Input validation and sanitization (and where it's missing) - Authentication and…
Manual review focus areas
- SAST tools configuration (Semgrep, CodeQL, SonarQube, Fortify, Checkmarx) - Custom…
Static analysis setup
对源代码进行安全审查,发现注入、认证、加密和业务逻辑漏洞,适用于代码审计。
Source Code Security Review
- OTA update security (signature verification, encryption) - Downgrade attack…
Update mechanism
- Companion app reverse engineering - Cloud account takeover scenarios - Data sharing…
Application and mobile
- BLE (sniffing, GATT analysis, pairing vulnerabilities) - Zigbee (KillerBee, Z-Stack…
Wireless protocols
- Traffic capture and analysis (WiFi, Ethernet) - Protocol reverse engineering (custom…
Network communication
- Firmware extraction (binwalk, fact-extractor, firmware-mod-kit) - Filesystem mounting…
Firmware analysis
- UART, JTAG, SWD debugging interfaces discovery - Flash chip extraction and dumping…
Hardware analysis
对物联网设备进行安全测试,覆盖固件分析、硬件接口、通信协议和云后端。
IoT Device Security Testing
- Namespace isolation effectiveness - Resource quotas and limit ranges - Network…
Multi-tenancy and isolation
- CI/CD pipeline security (Tekton, ArgoCD, Jenkins, GitHub Actions) - Image build and…