Tagged testing

Classify a planned worker engagement as employee or contractor by jurisdiction tests

Find API business logic abuse and GraphQL batching flaws in authorized tests

Run authorized deauth tests on 802.11 networks, including PMF-aware checks

Run authorized evil twin and KARMA access point tests with captive portal checks

Gather recon from domains, code leaks, Shodan and breach data for authorized tests

Run authorized social engineering tests, including pretexting and vishing

Survey airspace with monitor mode, fingerprint networks and map clients for tests

Gate code changes through review, tests, lint and CI before pushing a pull request

Build and check a color system with palettes, semantic tokens and contrast tests

Decide how to merge, keep or discard a finished branch after tests pass

Build production-grade MCP servers with sound tool design, errors and transport tests

Cover privilege escalation, lateral movement, tunneling and password cracking in tests

Set the broad pentest mindset for multi-domain testing within the engagement scope

Measure timing side channels in crypto code with dudect and Timecop statistics

Review code diffs for security impact with blast-radius counts and test coverage

Review smart contract architecture, upgrades, pitfalls and tests against best practices

Fix a confirmed local bug at the invariant level with variant search and tests

Port existing Semgrep rules to other languages with matching test suites

Generate agent skills from the Trail of Bits Testing Handbook pages

Build an opportunity solution tree from outcomes to opportunities, solutions and tests

Define a cheap Proof of Life probe that tests a risky product hypothesis

Prepare ChatGPT app submission files with test cases and review-readiness checks

Run browser game playtests, smoke tests and HUD review with screenshots

Run a Parallels macOS VM lab for GUI automation, permissions and terminal testing

Ship each change with before and after screenshots, a changelog entry and tests

Create a git escrow bounty that pays tokens for passing a failing test suite

Route API attack testing by protocol across gRPC, SOAP, WebSocket and SSE

Route CI/CD pipeline attack testing by provider and workflow surface

Fingerprint targets, find public CVE exploits and confirm RCE in tests

Build evilginx2 phishlets to test MFA resistance in authorized phishing tests

Build multi-step exploit chains from validated bugs in authorized tests

Escalate from one GCP project to organization-wide control in authorized tests

Route industrial control system testing and gate every write action on approval

Route IoT and embedded device testing from firmware to wireless sidebands

Route LLM red team tests across the AATMF v3 tactic catalog

Register and configure lookalike domains with DNS and TLS for phishing tests

Route Android and iOS app testing across static, dynamic and deep-link checks

Design phishing pretexts and target shortlists from OSINT for authorized tests

Find dangling S3 buckets behind subdomain CNAMEs for authorized takeover tests

Run SQL injection tests with sqlmap, including WAF bypass tamper scripts

Set up proxy rotation and stealth HTTP tooling for authorized web testing

Verify candidate bugs with minimal proof-of-concept tests and CVSS scores

Route 802.11 wireless attack testing by target crypto type and posture

Port code function by function with tests first and jscpd parity checks

Run local tests and type checks, push the branch and return the CI pipeline URL

Execute a validated plan in a worktree with TDD, parallel agents and a merged PR

Route DevOps questions on Git, testing, DevSecOps and databases to the right guides

Analyze experiment results with significance tests, ablations and scientific figures

Generate injectable wrappers around static C# dependencies for testing