Download

Skill UI

Browse and discover 15554+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search AR , found 4985 results

Default Newest Most Downloaded

Advanced Kerberos Attack Playbook for Active Directory

active-directory-kerberos-attacks

yaklang/hack-skills

A comprehensive guide covering advanced Kerberos attacks against Active Directory environments. Techniques include AS-REP roasting, Kerberoasting, forging golden, silver, diamond, and sapphire tickets, and exploiting delegation abuse. Designed for penetration testers and red teams to simulate sophisticated domain compromise scenarios.

Anti-Debugging Detection And Bypass Playbook

anti-debugging-techniques

yaklang/hack-skills

A comprehensive playbook for defeating anti-debugging mechanisms in protected binaries. Covers advanced techniques across both Linux (ptrace, /proc/self/status, timing checks) and Windows (PEB flags, NtQueryInformationProcess). Provides detailed detection methods and corresponding bypass strategies (e.g., patching, hooking, kernel modules) essential for advanced binary reverse engineering.

API Authentication And JWT Abuse Testing

api-auth-and-jwt-abuse

yaklang/hack-skills

A comprehensive playbook for security testing APIs relying on JWT, bearer tokens, or API keys. It covers token validation weaknesses (e.g., 'alg:none', RS256 confusion), claim misuse, header spoofing, rate limit bypass, and mass assignment vulnerabilities. Ideal for penetration testers assessing authentication boundaries.

API Authorization and BOLA Testing

api-authorization-and-bola

yaklang/hack-skills

This comprehensive playbook guides security testers through deep API authorization checks, focusing specifically on BOLA (Broken Object Level Authorization) and BFLA (Broken Function Level Authorization). Use this skill to test scenarios where object identifiers, nested resources, or privileged functions are exposed, ensuring thorough checks for mass assignment and privilege escalation.

API Reconnaissance and Documentation Review

api-recon-and-docs

yaklang/hack-skills

A comprehensive playbook for API reconnaissance and documentation review. Use this skill early in the testing process to enumerate all reachable endpoints, extract schemas, identify hidden versions (e.g., v1, v2, mobile), and discover undocumented parameters or fields across REST, GraphQL, and mobile APIs. Essential for mapping the full attack surface before deeper exploitation.

Arbitrary Write To Code Execution Playbook

arbitrary-write-to-rce

yaklang/hack-skills

This expert playbook details advanced techniques for converting an arbitrary memory write primitive into full Remote Code Execution (RCE). It covers targeting multiple system structures across different glibc versions, including GOT entries, __malloc_hook, __free_hook, _IO_FILE vtables, and function arrays. Essential for exploiting modern, hardened binaries and mastering advanced binary exploitation.

Business Logic Vulnerability Expert Playbook

business-logic-vulnerabilities

yaklang/hack-skills

This playbook is designed for advanced vulnerability assessment, covering flaws invisible to automated scanners. It guides testing for race conditions, complex workflow bypasses, state machine manipulation, financial parameter tampering (e.g., price/quantity manipulation), and coupon/credit abuse in multi-step applications. Essential for deep manual security testing.

Managing MicroPython Apps on Cardputer

cardputer-buddy

anthropics/claude-plugins-official

This toolset provides a comprehensive development workflow for iterating on MicroPython applications (such as Claude Buddy, Hello, and Snake) on the Cardputer-Adv device. It allows developers to add new apps, push single updated .py files without full re-flashing, monitor device serial logs, or execute one-shot REPL commands directly from the host machine. Essential for rapid prototyping and debugging embedded systems.

Expert Classical Cipher Analysis Guide

classical-cipher-analysis

yaklang/hack-skills

This comprehensive playbook provides expert techniques for classical cipher identification and breaking. It covers fundamental methods like frequency analysis, Kasiski examination, and Index of Coincidence (IC), enabling the decryption of monoalphabetic, polyalphabetic, and transposition ciphers (Vigenere, Caesar, Playfair, etc.). It also guides the decoding of various formats (Base64, Hex, Morse).

Clickjacking Attack Playbook

yaklang/hack-skills

A comprehensive playbook for identifying and exploiting clickjacking vulnerabilities (UI redress). Learn how to test if target pages can be framed, bypass security headers like X-Frame-Options and CSP frame-ancestors, and execute high-impact actions through invisible iframes. This guide covers single-click, multi-step, and drag-and-drop attack vectors, applicable to sensitive endpoints like account deletion or admin panels.

Expert Guide to OS Command Injection

cmdi-command-injection

yaklang/hack-skills

A comprehensive playbook detailing expert techniques for OS command injection vulnerabilities. It covers all shell metacharacters, blind injection, time-based detection, out-of-band exfiltration methods, and common vulnerable code patterns across PHP, Python, and Node.js. Essential for security analysts and penetration testers.

Code Obfuscation Deobfuscation Playbook

code-obfuscation-deobfuscation

yaklang/hack-skills

An expert playbook detailing techniques for identifying, classifying, and defeating advanced code obfuscation in native binaries. Covers junk code, opaque predicates, self-modifying code (SMC), control flow flattening (CFF), VM protectors, and string encryption by utilizing symbolic execution, dynamic emulation, and advanced data flow analysis.

Prev 1 2 3...301 302 303304305 306 307...414 415 416 Next

Language