Skill UI

A comprehensive guide to installing the flyctl CLI and setting up secure authentication for Fly.io edge compute deployments. This guide covers both interactive login and API token methods (User, Deploy, Org, Machines), which are essential for CI/CD pipelines and advanced resource management via the Machines API.

This catalog provides core abstractions and hooks for robust security management in administrative applications. It includes essential tools for handling identity context, user authentication flows (login/logout), and granular authorization checks. Developers can use these components to build secure, feature-rich administrative panels with reliable access control.

A browser-based skill for search, web scraping, login-required actions, and dynamic page interaction. Use it to access real websites, extract content, and operate pages in a live Chrome environment.

This guide serves as the core entry point for comprehensive security testing of identity and access control mechanisms. It is designed to help testers systematically identify vulnerabilities across login flows, session management, object authorization (IDOR), and modern protocols like JWT, OAuth, CORS, and SAML. Use this when planning security audits for any web application with user accounts.

A comprehensive playbook for identifying authentication vulnerabilities in web applications. Covers advanced topics including SQL injection login bypass, predictable password reset tokens, account enumeration techniques, multi-factor authentication bypass, and brute-force resistance checks. Essential for penetration testers assessing login mechanisms and session management.

A comprehensive playbook detailing NoSQL injection techniques, moving beyond traditional SQLi. Covers deep vulnerabilities in MongoDB, including operator injection, login bypass, blind data extraction using regex, and $where execution. Also includes attacks specific to Redis, CouchDB, and general API parameter pollution.

This guide details how to deploy and manage web projects on Vercel using token-based authentication via the CLI. It provides comprehensive steps for locating and setting the VERCEL_TOKEN, identifying project IDs, and executing deployment commands (including linking and direct deployment) without relying on interactive login.

A powerful CLI tool designed for deep web interaction and data scraping. bb-browser simulates genuine user behavior within a real browser environment, allowing access to both public and private enterprise systems, even requiring active user login. Key features include a Site System to turn complex websites into simple command-line APIs, advanced network request handling (with session state), form automation, and element interaction, making it ideal for enterprise data gathering and workflow automation.

A comprehensive guide detailing the structured process for responding to phishing incidents. It covers email header analysis, malicious content sandboxing (URLs/attachments), scoping the impact across the organization, and performing thorough remediation, including mailbox purging and credential reset.