Skill UI

A detailed guide for conducting authorized penetration tests to detect and exploit HTTP request smuggling flaws. This technique targets discrepancies in Content-Length and Transfer-Encoding parsing between front-end proxies (like CDNs or load balancers) and back-end servers, allowing attackers to bypass security controls and hijack subsequent requests.

This comprehensive guide details advanced techniques for circumventing Content Security Policies (CSP). It covers exploiting weaknesses in critical directives (e.g., base-uri, object-src), abusing nonces, leveraging trusted CDN endpoints, and executing code despite strict controls like script-src 'self' or 'strict-dynamic'. Essential knowledge for deep security auditing and penetration testing.

This skill helps audit and fix HTML accessibility issues such as ARIA labels, keyboard navigation, focus management, color contrast, and form errors. It is used when adding interactive controls, forms, dialogs, or reviewing WCAG compliance. It ensures web content is usable by people with disabilities by following best practices for accessible design and semantic HTML.