Skill UI

This skill covers implementing complex user interactions within Three.js scenes. It demonstrates techniques like raycasting for precise object selection and click detection, handling mouse and touch inputs, and integrating various camera controls (OrbitControls, FlyControls, FirstPersonControls). Use this when building highly interactive, immersive 3D web applications.

A powerful toolkit utilizing Objection and Frida for authorized mobile penetration testing. It enables deep runtime analysis of iOS applications, allowing users to inspect sensitive data in the keychain, filesystem, and memory. Key capabilities include bypassing client-side protections such as SSL pinning and jailbreak detection without requiring source code access.

This skill guides the detection and exploitation of JavaScript prototype pollution vulnerabilities. It covers both client-side (DOM XSS) and server-side (RCE, Auth Bypass) attacks by injecting properties into Object.prototype using keys like `__proto__`. Use this when assessing APIs that deep-merge or clone user-controlled JSON data, or for general web application security testing.

This skill enables sophisticated runtime dynamic analysis of Android applications using industry-standard tools like Frida and Objection. It is used to observe application behavior, intercept API calls, monitor network traffic, and bypass client-side security protections (e.g., root detection, anti-debugging). Essential for identifying vulnerabilities and analyzing obfuscated code that static analysis cannot reach.

This comprehensive guide assists developers in maintaining and upgrading integrations with the Finta fundraising CRM API. It covers critical areas such as API version detection, handling schema evolution (e.g., structured stage objects), best practices for data migration, and troubleshooting common breaking changes (like field renames, permission changes, or enum changes) to ensure continuous and reliable data synchronization.

This skill provides systematic methodologies for identifying and exploiting Insecure Direct Object Reference (IDOR) vulnerabilities in web applications. It covers detection techniques using parameter manipulation, exploitation via Burp Suite, and remediation strategies. Requires authorized security assessments and multiple test accounts to verify cross-user access. Outputs include vulnerability reports, proof of concept, and remediation recommendations.

This skill enables user interaction within Three.js scenes, covering raycasting, camera controls, and input handling. It is essential for implementing click detection, touch support, and object selection in 3D web applications. Use it to transform passive renders into interactive experiences.