pwn-sast-token
Drive PWN::SAST::Token from pwn_eval.
SKILL.mdetc/default_skills/pwn/sast/token/SKILL.md
GitHubPWN::SAST::Token
SAST Module used to identify any reference within source code of authorization tokens.
When to use
Call PWN::SAST::Token from pwn_eval when the task needs this module.
Do not reimplement it in shell.
Methodologies
Generated from pwn/sast/token.rb. Prefer the public class methods below.
Class methods take (opts = {}) and read opts.
How to call
PWN::SAST::Token.help
PWN::SAST::Token.scan(opts)
Public methods
scansecurity_referencesauthorshelp
References
references/security.md— CWE / NIST mappingreferences/urls.md— URLs from source
Source
pwn/sast/token.rb
Verification
PWN::SAST::Token.respond_to?(:scan) after the
module is loaded. Read the source for parameter names.