Skill UI

Guides bug bounty hunters through API fuzzing and penetration testing, covering REST, SOAP, and GraphQL recon, authentication bypass, IDOR methods, injections, method abuse, GraphQL attacks, and payload delivery techniques.

Automates guidance for Attack Surface Analyzer within the Security Advanced domain, offering best practices, code snippets, and validation to help with penetration testing, compliance, and threat modeling workflows.

Automates guidance for Attack Surface Analyzer within the Security Advanced domain, offering best practices, code snippets, and validation to help with penetration testing, compliance, and threat modeling workflows.

A comprehensive guide covering advanced offensive techniques for AWS cloud environments. Techniques include detailed IAM enumeration, privilege escalation paths, SSRF exploitation targeting metadata endpoints (IMDSv1/v2), S3 bucket exploitation, and Lambda function code extraction. Essential for security professionals and red team operations conducting authorized cloud vulnerability assessments.

Conducts comprehensive, authorized security assessments of cloud infrastructure across major platforms including Microsoft Azure, AWS, and GCP. The skill covers the full red team lifecycle, including reconnaissance, authentication testing, resource enumeration, privilege escalation, and data extraction techniques.

Guides teams through encryption-at-rest checker tasks, offering step-by-step advice, best practices, compliance insights, and production-ready configurations whenever you need help with advanced security, penetration testing, or enterprise compliance workflows.

This skill provides structured guidance and patterns for performing comprehensive web fuzzing using the powerful command-line tool, ffuf. Web fuzzing is an essential security testing technique used by penetration testers to discover hidden directories, unlinked endpoints, or sensitive files on a web server by systematically brute-forcing potential paths and parameters. Use this skill when you need to audit the security posture of a web application or map out unknown parts of a website.

Automates HIPAA audit helper workflows within Security Advanced, offering guided best practices, production-ready configurations, and compliance validation for penetration testing and threat modeling scenarios.

Guides users through advanced network security scanning tasks by offering best-practice workflows, code/config generation, and validation for compliance, penetration testing, and enterprise security scenarios.

Comprehensive CLI reference for penetration testing tools spanning network scanning, exploitation, password cracking, and web testing to speed up authorized security assessments.

Automates web application penetration testing by leveraging the penetration-tester plugin to scan OWASP Top 10 threats, suggest exploitation techniques, and produce actionable vulnerability reports for pentest or vulnerability assessment requests.

A comprehensive, multi-phase workflow designed for conducting deep security audits across modern web applications and APIs. This bundle guides users through the entire security lifecycle, including reconnaissance, vulnerability scanning (SAST/DAST), specific testing for OWASP Top 10 and injection flaws, specialized API fuzzing, full-scope penetration testing, security hardening, and final risk reporting. Ideal for compliance checks and proactive security enhancement.