Download

Skill UI

Browse and discover 7087+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Auth , found 485 results

Default Newest Most Downloaded

Broken Function Authorization Testing

exploiting-broken-function-level-authorization

mukul975/Anthropic-Cybersecurity-Skills

Automates testing APIs for Broken Function Level Authorization by mapping admin endpoints, manipulating HTTP methods, and validating access controls to expose privilege escalation risks.

Mobile Deep Link Exploitation

exploiting-deeplink-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Guides security testers through discovering and abusing Android and iOS deep link handling flaws—custom URI schemes, App/Universal Links, intent hijacking, and WebView payloads—to evaluate unauthorized access and injection risks in mobile apps.

HTTP Request Smuggling

exploiting-http-request-smuggling

mukul975/Anthropic-Cybersecurity-Skills

Guides authorized security testers through detecting and exploiting HTTP request smuggling when front- and back-end servers disagree on Content-Length vs Transfer-Encoding, covering architecture checks, automation tools, and impact scenarios.

Exploiting IDOR Vulnerabilities

exploiting-idor-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Guides penetration testers through identifying and exploiting IDOR flaws in APIs by mapping object references, configuring Burp Authorize for session swapping, and executing horizontal/vertical attacks to confirm broken object-level authorization.

Insecure Deserialization Exploits

exploiting-insecure-deserialization

mukul975/Anthropic-Cybersecurity-Skills

Guide to spotting serialized payloads (cookies, APIs, ViewState) and weaponizing Java, PHP, Python, and .NET gadget chains to prove remote code execution during authorized penetration tests.

IPv6 Vulnerability Testing

exploiting-ipv6-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Guides security teams through authorized IPv6 assessments by enumerating hosts, spoofing router advertisements, performing SLAAC-based MITM, and probing tunnels to verify dual-stack controls and IPv6-aware IDS/firewalls.

EternalBlue Exploitation Workflow

exploiting-ms17-010-eternalblue-vulnerability

mukul975/Anthropic-Cybersecurity-Skills

Guides red teamers through scanning SMB networks, exploiting MS17-010 (EternalBlue), and conducting post-exploitation tasks safely in authorized engagements using tools like Metasploit, Nmap, and AutoBlue.

noPac Domain Admin Exploit

exploiting-nopac-cve-2021-42278-42287

mukul975/Anthropic-Cybersecurity-Skills

Exploit the noPac chain (CVE-2021-42278/42287) to elevate a standard Active Directory user to Domain Admin by spoofing machine accounts, abusing Kerberos PAC confusion, and automating the DCSync workflow during authorized red-team engagements.

NoSQL Injection Exploitation Guide

exploiting-nosql-injection-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Step-by-step workflow for pentesters to detect and exploit NoSQL injection in MongoDB, CouchDB, and similar stacks, covering operator abuse, authentication bypass, blind data extraction, JavaScript injection, and automation with NoSQLMap.

OAuth Misconfiguration Exploits

exploiting-oauth-misconfiguration

mukul975/Anthropic-Cybersecurity-Skills

Identifies and exploits OAuth 2.0/OpenID Connect misconfigurations during authorized security assessments, covering redirect URI manipulation, token leakage, authorization code theft, and scope escalation to evaluate provider and consumer defenses.

Prototype Pollution Attack Guide

exploiting-prototype-pollution-in-javascript

mukul975/Anthropic-Cybersecurity-Skills

A step-by-step playbook for spotting and abusing JavaScript prototype pollution in both browsers and Node.js services to trigger DOM XSS, remote code execution, and authorization bypasses during security hunts and code reviews.

Race Condition Exploit

exploiting-race-condition-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Detect and exploit race condition vulnerabilities in transaction-heavy web flows by orchestrating Turbo Intruder single-packet attacks, threading bursts, and limit overrun checks to bypass rate limits, duplicate transactions, and confirm TOCTOU flaws during authorized assessments.

Prev 1 2 3...27 28 293031 32 33...39 40 41 Next

Language