Download

Skill UI

Browse and discover 19374+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Total 9170 skills

Default Newest Most Downloaded

Hunt LFI RFI Path Traversal

sickn33/agentic-awesome-skills

Guides authorized security testers through hunting Local File Inclusion, Remote File Inclusion, and Path Traversal vulnerabilities, including blind confirmation, PHP filter-chain RCE, log poisoning, wrappers, and safe OOB validation.

MFA and 2FA Bypass Testing

hunt-mfa-bypass

sickn33/agentic-awesome-skills

Offensive security skill for hunting MFA and 2FA bypass flaws: workflow skipping, OTP replay, response tampering, prefix-oracle guessing, and race conditions on verification endpoints. Requires written authorization.

Misc Vulnerability Hunting

sickn33/agentic-awesome-skills

A comprehensive skill for identifying miscellaneous security vulnerabilities like access control failures, information disclosure, and misconfigurations. Based on 225 public bug bounty reports, it helps hunters target SaaS platforms, identity flows, and internal APIs to find high-value issues.

Next.js Vulnerability Hunter

sickn33/agentic-awesome-skills

This skill helps identify and exploit specific vulnerabilities in Next.js applications, such as Server Actions authentication bypasses, middleware bypasses, and SSRF via image optimization. It provides commands for fingerprinting, version detection, and testing attack vectors. Requires explicit written authorization for target scope.

Node.js Vulnerability Hunting

sickn33/agentic-awesome-skills

This skill helps identify and exploit specific vulnerabilities in Node.js applications. It covers techniques like prototype pollution, Express trust proxy abuse, and template engine SSTI. Users must have explicit authorization before testing. It includes fingerprinting, detection, and exploitation chains for critical security issues.

Open Redirect Vulnerability Hunting

hunt-open-redirect

sickn33/agentic-awesome-skills

Methodology for hunting open redirect flaws in web apps: parameter discovery, bypass payloads, DOM-based sinks, OAuth auth-code theft chains and SSRF escalation. Docs-only, for authorized bug bounty and pentest use.

Race Condition Vulnerability Hunting

hunt-race-condition

sickn33/agentic-awesome-skills

A specialized security skill for identifying and exploiting race condition vulnerabilities in web applications. Focuses on synchronized request attacks, double-spending, and bypassing access controls. Requires explicit authorization and defensive guidance protocols before execution.

Vector Store Attack Hunt

hunt-rag-vector

sickn33/agentic-awesome-skills

Identify and exploit vector-store and embedding-layer weaknesses in RAG pipelines, including persistent corpus poisoning and cross-tenant IDOR, for authorized security assessments.

Remote Code Execution Hunting

sickn33/agentic-awesome-skills

A skill for identifying Remote Code Execution (RCE) vulnerabilities across web applications and infrastructure. Based on bug bounty reports, it guides users to test command injection, template injection, and configuration flaws on admin consoles, APIs, and supply chain targets. Requires explicit authorization for ethical testing.

SAML SSO Attack Hunter

sickn33/agentic-awesome-skills

Hunt SAML/SSO attacks including XML Signature Wrapping, comment injection, signature stripping, XXE, and NameID manipulation. Provides attack surface discovery, manual exploitation workflows, and triage guidance for authorized security assessments.

Session Management Vulnerability Hunting

sickn33/agentic-awesome-skills

This skill identifies session management vulnerabilities like session fixation, failure to invalidate sessions after logout or password changes, and weak session ID generation. It is designed for authorized security assessments to prevent Account Takeover (ATO) and unauthorized access. Users must obtain explicit written permission before testing targets.

Hunt Shadow API Surface

hunt-shadow-api

sickn33/agentic-awesome-skills

Identify shadow, zombie, and undocumented API endpoints by enumerating versioned paths, diffing specs, and comparing old vs current security behavior. For authorized OWASP API9 assessments.

Prev 1 2 3...691 692 693694695 696 697...763 764 765 Next

Language