Download

Skill UI

Browse and discover 6556+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Application Security , found 37 results

Default Newest Most Downloaded

Perl Security Guardrails

affaan-m/everything-claude-code

Provides a Perl-centric security checklist covering taint mode, strict input validation, safe regex, file/command handling, and DBI parameterization to harden web and CLI applications before processing untrusted data.

DLL Sideloading Detection

detecting-dll-sideloading-attacks

mukul975/Anthropic-Cybersecurity-Skills

Guidance for security teams to detect DLL sideloading by monitoring Sysmon Event ID 7, verifying signatures and hashes, and correlating anomalous host behavior to stop defense-evasion campaigns leveraging legitimate applications.

Broken Link Hijacking

exploiting-broken-link-hijacking

mukul975/Anthropic-Cybersecurity-Skills

Guides security testers through discovering and exploiting broken link hijacking by finding expired domains, dead external resources, and claimable cloud assets referenced by web applications, then verifying takeover paths and documenting impact.

Prototype Pollution Exploits

exploiting-prototype-pollution-in-javascript

mukul975/Anthropic-Cybersecurity-Skills

Techniques and workflow to find and leverage prototype pollution bugs in JavaScript applications, covering client/server detection, gadget hunting, and payloads for XSS, RCE, and auth bypass during security testing.

CISA Zero Trust Maturity

implementing-cisa-zero-trust-maturity-model

mukul975/Anthropic-Cybersecurity-Skills

Guides teams through deploying the CISA Zero Trust Maturity Model v2 across identity, devices, networks, applications, and data, pairing assessments, gap analysis, and stepwise improvements to meet federal compliance and modernize security posture.

Distroless Container Hardening

implementing-container-image-minimal-base-with-distroless

mukul975/Anthropic-Cybersecurity-Skills

Leverages Google distroless bases to build minimal container images with only the application runtime, shrinking the attack surface, eliminating shells and package managers, and matching Kubernetes/production security standards for deployment or compliance validation.

ModSecurity Logging Deployment

implementing-web-application-logging-with-modsecurity

mukul975/Anthropic-Cybersecurity-Skills

Configure ModSecurity with the OWASP CRS, tune SecRules, and forward audit logs to SIEM so teams can detect, analyze, and respond to web application attacks.

Laravel Security Best Practices

laravel-security

affaan-m/everything-claude-code

Comprehensive guide for hardening Laravel applications with auth/authorization, validation, CSRF, file handling, rate limiting, secrets, and deployment safeguards.

Automated Crypto Audit

performing-cryptographic-audit-of-application

mukul975/Anthropic-Cybersecurity-Skills

Build an automated tool that scans Python code and configuration files to flag weak algorithms, insecure cipher modes, hardcoded secrets, TLS weaknesses, and other crypto misconfigurations for security assessments.

Android Dynamic Analysis

performing-dynamic-analysis-of-android-app

mukul975/Anthropic-Cybersecurity-Skills

Performs runtime dynamic analysis of Android applications with Frida, Objection, and ADB, letting you hook sensitive methods, inspect decrypted data, and detect runtime vulnerabilities missed by static scans during penetration tests or security research.

Thick Client Security Test

performing-thick-client-application-penetration-test

mukul975/Anthropic-Cybersecurity-Skills

Perform thick client application penetration tests to uncover insecure local storage, hardcoded credentials, DLL hijacking, memory leaks, and unsafe API communications using dnSpy, Procmon, Burp Suite, and related tools in desktop environments.

Web Application Firewall Bypass

performing-web-application-firewall-bypass

mukul975/Anthropic-Cybersecurity-Skills

Guide covering encoding tricks, HTTP method manipulation, parameter pollution, payload splitting, and tamper scripts to bypass WAFs and deliver SQLi/XSS payloads during penetration tests and security assessments.

Prev 1 234 Next

Language