Download

Skill UI

Browse and discover 11130+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Exploitation , found 57 results

Default Newest Most Downloaded

API Fuzzing Bug Bounty

api-fuzzing-bug-bounty

sickn33/antigravity-awesome-skills

Provides step-by-step API fuzzing and exploitation tactics for REST, SOAP, and GraphQL during bug bounty or penetration tests, covering reconnaissance, auth bypass, IDOR, injection, and GraphQL-specific attacks.

Advanced AWS Penetration Testing Techniques

aws-penetration-testing

sickn33/antigravity-awesome-skills

A comprehensive guide covering advanced offensive techniques for AWS cloud environments. Techniques include detailed IAM enumeration, privilege escalation paths, SSRF exploitation targeting metadata endpoints (IMDSv1/v2), S3 bucket exploitation, and Lambda function code extraction. Essential for security professionals and red team operations conducting authorized cloud vulnerability assessments.

XSS Injection Testing

cross-site-scripting-and-html-injection-testing

sickn33/antigravity-awesome-skills

Guides systematic detection and exploitation of cross-site scripting and HTML injection flaws, covering stored/reflected/DOM vectors, payload crafting, and remediation advice for web security assessments.

Path Traversal Testing

file-path-traversal-testing

sickn33/antigravity-awesome-skills

Run targeted file path traversal assessments to find directory traversal and LFI vulnerabilities across web parameters, verify exploitation payloads, and document sensitive files exposed via automated fuzzing and manual checks.

Metasploit Penetration Workflow

metasploit-framework

sickn33/antigravity-awesome-skills

Guides authorized security testers through the Metasploit Framework workﬂow, from msfconsole basics and module discovery to exploit configuration, payload choice, and post-exploitation evidence collection for comprehensive assessments.

Penetration Testing Commands

pentest-commands

sickn33/antigravity-awesome-skills

Comprehensive CLI reference for penetration testing tools spanning network scanning, exploitation, password cracking, and web testing to speed up authorized security assessments.

Web Application Penetration Automation

performing-penetration-testing

jeremylongshore/claude-code-plugins-plus-skills

Automates web application penetration testing by leveraging the penetration-tester plugin to scan OWASP Top 10 threats, suggest exploitation techniques, and produce actionable vulnerability reports for pentest or vulnerability assessment requests.

SQL Injection Testing

sql-injection-testing

sickn33/antigravity-awesome-skills

Execute systematic SQL injection vulnerability assessments on web applications using reconnaissance, payload tuning, and exploitation workflows to uncover database flaws, capture evidence, and validate remediation recommendations for authorized security testing.

SQLMap Database Pentesting

sqlmap-database-pentesting

sickn33/antigravity-awesome-skills

Guides analysts through automated SQL injection discovery and exploitation with SQLMap, covering enumeration, table/column mapping, data dumping, and advanced targeting across MySQL, PostgreSQL, MSSQL, Oracle, and other databases during authorized penetration tests.

SSH Penetration Testing

ssh-penetration-testing

sickn33/antigravity-awesome-skills

Guides SSH service security assessments from discovery, enumeration, credential attacks and key testing to tunneling, vulnerability exploitation, and reporting deliverables.

WordPress Penetration Testing

wordpress-penetration-testing

sickn33/antigravity-awesome-skills

Guides security pros through WordPress 7.0 attack surfaces covering discovery, enumeration, vulnerability scanning, credential checks, and exploitation with WPScan, Burp, Metasploit, and manual curl probes for authorized assessments.

API Fuzzing Bug Bounty

api-fuzzing-for-bug-bounty

zebbern/claude-code-guide

Guides bug bounty hunters through REST, SOAP, and GraphQL API fuzzing to uncover authentication weaknesses, IDOR, injections, and endpoint bypasses while outlining practical reconnaissance and exploitation workflows.

Language