Download

Skill UI

Browse and discover 6695+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Auth , found 472 results

Default Newest Most Downloaded

API Authentication Testing

testing-api-authentication-weaknesses

mukul975/Anthropic-Cybersecurity-Skills

Scans REST API authentication paths to detect missing enforcement, weak JWT handling, insecure API key storage, and session flaws before deployment. Runs unauthenticated probes, token analysis, and credential stuffing attempts to spot OWASP API2 broken authentication risks.

Broken Object Authorization Testing

testing-api-for-broken-object-level-authorization

mukul975/Anthropic-Cybersecurity-Skills

Tests REST and GraphQL APIs for Broken Object Level Authorization (BOLA/IDOR) by intercepting requests, swapping object identifiers, and confirming whether per-object access controls stop authenticated users from touching others’ resources.

API Mass Assignment Test

testing-api-for-mass-assignment-vulnerability

mukul975/Anthropic-Cybersecurity-Skills

Automates API testing for mass assignment vulnerabilities by identifying writable endpoints, injecting privileged parameters (e.g., role, isAdmin, balance), and verifying whether the server binds them without filtering, helping defenders confirm Broken Object Property Level Authorization risks before deployment.

CORS Misconfiguration Testing

testing-cors-misconfiguration

mukul975/Anthropic-Cybersecurity-Skills

Guides security testers through identifying and exploiting CORS misconfigurations on API endpoints and SPAs so unauthorized cross-domain data access and credential theft can be detected and proven during penetration testing.

Testing Broken Access Control

testing-for-broken-access-control

mukul975/Anthropic-Cybersecurity-Skills

Guides testers through systematic discovery and validation of broken access controls in web applications, covering endpoint mapping, role-based automation, and privilege-escalation scenarios with tools like Burp Authorize, ffuf, and curl.

JWT Vulnerability Testing

testing-for-json-web-token-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Simulate JWT attacks to expose algorithm confusion, none algorithm bypass, kid injection, and weak secret flaws so API and SSO integrations can harden authentication controls before deployment.

XSS Testing With Burp Suite

testing-for-xss-vulnerabilities-with-burpsuite

mukul975/Anthropic-Cybersecurity-Skills

Guides security testers through using Burp Suite’s scanner, Intruder, Repeater, and DOM Invader to identify, validate, and bypass reflected, stored, and DOM-based XSS vulnerabilities during authorized web assessments and bug bounty programs.

XXE Injection Testing

testing-for-xxe-injection-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Guides authorized penetration testers through identifying XML processing points and exploiting XXE injection to read files, trigger SSRF, or exfiltrate data via blind/out‑of‑band techniques using Burp Suite, interactsh, and custom payloads.

JWT Security Testing

testing-jwt-token-security

mukul975/Anthropic-Cybersecurity-Skills

Assesses JWT implementations during authorized penetration tests by decoding tokens, probing none/algorithm-confusion attacks, brute-forcing HMAC secrets, and manipulating claims to uncover authentication bypass or privilege escalation risks.

Mobile API Auth Testing

testing-mobile-api-authentication

mukul975/Anthropic-Cybersecurity-Skills

Guides security testers through enumerating mobile API auth endpoints, analyzing JWT/opaque tokens, checking bypasses, IDOR, session management, and OAuth flows so penetration tests surface authentication weaknesses.

OAuth2 Security Testing

testing-oauth2-implementation-flaws

mukul975/Anthropic-Cybersecurity-Skills

Evaluates OAuth 2.0 and OpenID Connect flows for authorization-code interception, redirect URI manipulation, CSRF, token leakage, scope escalation, and PKCE bypass so testers can validate client and server safeguards before deployment.

WebSocket Security Tester

testing-websocket-api-security

mukul975/Anthropic-Cybersecurity-Skills

Automates manual-style WebSocket security checks by intercepting handshakes, manipulating authentication headers, and sending malicious frames to verify CSWSH, injection, DoS, and leakage protections in real-time APIs.

Prev 1 2 3...34 35 363738 39 40 Next

Language