Skill UI

This skill provides a comprehensive, structured methodology and checklist for identifying Remote Code Execution (RCE) vulnerabilities across various web applications. It covers advanced attack vectors such as OS command injection, Server-Side Template Injection (SSTI), insecure deserialization, file upload flaws, and XXE. Use this guide during web application penetration testing or bug bounty hunting to systematically discover arbitrary code execution paths.

A comprehensive guide to advanced SQL injection (SQLi) methodologies for offensive security assessments and bug bounty hunting. Covers all major injection types, including error-based, boolean/time-based blind, out-of-band, and second-order injection. Provides specific payloads and techniques for MySQL, MSSQL, PostgreSQL, Oracle, and NoSQL databases, along with methods for bypassing WAFs, exploiting GraphQL, WebSocket, and modern API filters. Includes full automation workflows using tools like sqlmap.

A comprehensive checklist and methodology for testing Cross-Site Scripting (XSS) vulnerabilities. Covers all major types, including Stored, Reflected, DOM, and Blind XSS, along with advanced techniques like CSP bypass, polyglot payloads, and event handler injection. Essential for web application security testing and bug bounty hunting to identify and mitigate malicious script injection risks.

This comprehensive checklist details how to test for XML External Entity (XXE) injection vulnerabilities. It covers classic, blind, error-based, and out-of-band techniques, enabling testers to identify weaknesses in XML parsers. The methodology includes finding various injection points (e.g., file uploads, SOAP/REST endpoints) and exploiting potential risks like file disclosure, SSRF, and DoS. Use this guide for robust web application security testing and bug bounty hunting.

This comprehensive guide serves as a complete error decoder for the OneNote Graph API. It analyzes major HTTP status codes (400, 403, 404, 429, 500, 502, 507) and provides root cause analysis, diagnostic steps, and code fixes for common issues. It specifically addresses critical failure modes like deprecated authentication methods and silent 200 OK failures, helping developers debug complex API integrations in production.

This bundle generates comprehensive diagnostic logs for troubleshooting OneNote Graph API issues. It captures critical data points—such as the `request-id`, `x-ms-ags-diagnostic` headers, full error bodies, and decoded JWT token claims—for both successful and failed API calls. Use it for self-diagnosis, verifying permissions, or preparing detailed support tickets for Microsoft support.

This skill provides a comprehensive guide to setting up robust CI/CD pipelines for Oracle Cloud Infrastructure (OCI). It leverages GitHub Actions and Terraform to automate the deployment, planning, and testing of OCI resources. Instructions cover secure API key authentication, best practices for managing Terraform state, and crucial workarounds for known OCI provider bugs, ensuring stable and reliable cloud deployments.

This comprehensive guide helps users diagnose and resolve common Oracle Cloud Infrastructure (OCI) API errors. It covers critical issues like authentication failures (401), authorization errors (404), SSL certificate problems, and rate limiting (429). The resource provides runnable Python and Bash scripts to pinpoint the exact root cause and implement the necessary fixes, significantly streamlining cloud debugging processes.

This internal agent skill automates the complex process of determining the most likely owner or team for a bug cluster. It follows a strict 6-level precedence model, starting with cached overrides, and sequentially querying sources like Service Owners, Oncall status, CODEOWNERS, recent assignees, and committers. The process includes staleness detection and confidence scoring, providing highly accurate and auditable routing recommendations for internal development triage.

This comprehensive guide provides quick, actionable solutions for the top common Palantir Foundry API and data transformation errors. It covers critical issues such as 401 Unauthorized, 403 Forbidden, ObjectTypeNotFound, and OutOfMemoryError. By offering specific code examples and best practices, this resource helps users efficiently debug and resolve complex issues in their Foundry pipelines.

This comprehensive bundle collects all necessary diagnostic artifacts for troubleshooting Palantir Foundry issues. It gathers SDK versions, environment variables (with secrets automatically redacted), API connectivity status, and recent application error logs. This structured output is essential for creating detailed, actionable support tickets when reporting persistent platform malfunctions.

This guide provides comprehensive solutions for common API errors encountered when integrating with Persona for identity verification (KYC). It covers critical issues including 401 unauthorized keys, 422 invalid templates, webhook signature mismatches, rate limit handling (429), and state management conflicts. Use this resource when debugging or optimizing automated identity validation workflows.