Skill UI

Build and configure Laravel 10+ apps using Eloquent models, Sanctum auth, Horizon queues, Livewire interfaces, and REST APIs while ensuring PSR-12, dependency injection, eager loading, and Pest/PHPUnit coverage above 85%.

Expert skill for building robust, enterprise-grade PHP applications using modern features (PHP 8.3+), major frameworks (Laravel, Symfony), and strict architectural patterns. Specializes in implementing typed DTOs, value objects, dependency injection, and ensuring high test coverage for secure REST/GraphQL APIs.

A comprehensive guide for authorized penetration testers on identifying and exploiting insecure deserialization vulnerabilities across multiple languages (Java, PHP, Python, .NET). Covers techniques for generating payloads using tools like ysoserial and phpggc, and testing various application components such as cookies, HTTP parameters, and message queues to achieve potential Remote Code Execution (RCE).

This skill focuses on identifying and exploiting type juggling vulnerabilities in PHP web applications. It demonstrates techniques such as loose comparison bypass (==), type coercion using JSON/serialized input, and leveraging magic hash collisions to circumvent authentication mechanisms, password verification, and general application logic checks in a controlled security testing environment.

Scans web server roots for high-entropy files, suspicious PHP/JSP/ASP payloads, and recent modifications to flag obfuscated webshells via entropy thresholds, regex signatures, and file metadata.

This guide provides a comprehensive workflow for Test-Driven Development (TDD) within Laravel applications. It covers best practices for writing unit, feature, and integration tests using modern tools like Pest and PHPUnit. Learn how to manage database states, mock external services, and achieve high code coverage efficiently.

This skill is designed for implementing and managing user verification workflows within a Laravel PHP framework. It facilitates processes such as email confirmation, password reset validation, and ensuring data integrity for secure application access. It is essential for robust web backend development.

A comprehensive tool for discovering, vetting, and evaluating Laravel packages. Users can search for packages based on keywords, filter by health score (e.g., Healthy, Unhealthy), and verify compatibility across different Laravel and PHP versions. It helps developers choose actively maintained, robust packages, ensuring project stability and reducing technical debt.

This tool generates a complete, production-ready PHP Model Context Protocol (MCP) server project. It automatically scaffolds the entire structure, including tools, resources, prompts, and comprehensive tests, utilizing the official PHP SDK. It provides a standardized, robust starting point for developers building AI-integrated backend services in PHP.

This is a detailed offensive checklist for identifying and exploiting insecure deserialization vulnerabilities across multiple programming languages (Java, Python, PHP, .NET, Node.js, etc.). It covers techniques like gadget chain generation, magic method abuse, type confusion, and modern attack vectors, providing a deep methodology for penetration testing and vulnerability research.

This skill provides a comprehensive operational checklist for identifying and exploiting HTTP Parameter Pollution (HPP) vulnerabilities. It details how various web technologies (ASP.NET, PHP, Python, etc.) handle duplicate parameters differently (e.g., first-wins, last-wins, concatenation). Use this skill during penetration testing to discover flaws in parameter parsing, which can lead to bypassing WAFs, performing logic manipulation, or achieving unauthorized access.

A comprehensive playbook detailing expert techniques for OS command injection vulnerabilities. It covers all shell metacharacters, blind injection, time-based detection, out-of-band exfiltration methods, and common vulnerable code patterns across PHP, Python, and Node.js. Essential for security analysts and penetration testers.