Skill UI

A comprehensive playbook detailing NoSQL injection techniques, moving beyond traditional SQLi. Covers deep vulnerabilities in MongoDB, including operator injection, login bypass, blind data extraction using regex, and $where execution. Also includes attacks specific to Redis, CouchDB, and general API parameter pollution.

A comprehensive and advanced playbook for mastering SQL injection techniques. It covers critical areas including WAF bypass, out-of-band data exfiltration, second-order injection, and exploitation strategies across major database systems (MySQL, MSSQL, Oracle, PostgreSQL). Essential for professional penetration testing and security auditing.

This file is currently undergoing Japanese localization for MySQL patterns. It serves as a placeholder indicating that the Japanese translation is in progress. Users should refer to the original English skill file for implementation details.

A comprehensive guide detailing best practices for securing Quarkus applications. It covers robust authentication methods like JWT and OIDC, role-based access control (RBAC) for authorization, mandatory input validation using Bean Validation, preventing SQL injection, and secure secret management. Essential for developers building highly secure Java microservices.

This tool outlines the complete end-to-end migration process from an Oracle database environment to SQL Server. It automates schema conversion, data migration, and generates necessary assessment reports by simulating SSMA console operations. Ideal for database architects and developers planning heterogeneous database migrations.