Download

Skill UI

Browse and discover 6006+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Penetration-Testing , found 49 results

Default Newest Most Downloaded

GraphQL Security Testing

performing-graphql-security-assessment

mukul975/Anthropic-Cybersecurity-Skills

Guides penetration testers through discovering GraphQL endpoints, extracting schemas, verifying authorization, and probing injection risks during authorized assessments of web, mobile, or microservice GraphQL APIs.

IoT Security Assessment

performing-iot-security-assessment

mukul975/Anthropic-Cybersecurity-Skills

Performs comprehensive penetration testing of IoT devices and their ecosystems, covering hardware interfaces, firmware, network, cloud APIs, and companion apps to uncover vulnerabilities before deployment in enterprise, consumer, or industrial settings.

JWT None Attack

performing-jwt-none-algorithm-attack

mukul975/Anthropic-Cybersecurity-Skills

Automates the JWT none algorithm attack by decoding a real token, swapping the alg header to none variants, and sending forged tokens to confirm signature bypass vulnerabilities during penetration testing.

Kubernetes Penetration Testing

performing-kubernetes-penetration-testing

mukul975/Anthropic-Cybersecurity-Skills

Provides a systematic Kubernetes penetration testing workflow covering reconnaissance, automated scanning (kube-hunter, kube-bench, Kubescape), RBAC/secret checks, and pod exploitation to validate defense posture before remediation.

Server Side Request Forgery Testing

performing-ssrf-vulnerability-exploitation

mukul975/Anthropic-Cybersecurity-Skills

Walk through SSRF detection by probing metadata endpoints, internal services, and protocol handlers via controllable URL inputs, analyzing responses for disclosure, and producing vulnerability reports for authorized penetration tests.

Nessus Vulnerability Scanning

performing-vulnerability-scanning-with-nessus

mukul975/Anthropic-Cybersecurity-Skills

Guides authenticated and unauthenticated Nessus scans to spot vulnerabilities, correlate findings with CVEs/CVSS, and prioritize remediation for compliance audits and penetration testing.

Wireless Penetration Testing Guide

performing-wireless-network-penetration-test

mukul975/Anthropic-Cybersecurity-Skills

Structured playbook for validating WiFi defenses by running Aircrack-ng, Bettercap, hostapd, Kismet, hashcat, and related tools to capture handshakes, reveal rogue APs, and assess segmentation.

CORS Misconfiguration Testing

testing-cors-misconfiguration

mukul975/Anthropic-Cybersecurity-Skills

Guides penetration testers through identifying CORS misconfigurations that allow unauthorized cross-domain requests, validating Origin handling, invoking preflight checks, and building PoCs to expose credential theft risks during API audits.

Business Logic Testing

testing-for-business-logic-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Structured guidance for penetration testers to map and manipulate workflows, pricing, and permissions manually when automated scanners miss business logic flaws in e-commerce, finance, or multi-step web applications.

JWT Vulnerability Testing Guide

testing-for-json-web-token-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Assess JWT implementations for algorithm confusion, none bypass, kid/JKU/X5U injections, and weak secrets to detect authentication bypass and privilege escalation risks during API, OAuth/OIDC, or SSO penetration tests.

Sensitive Data Exposure Testing

testing-for-sensitive-data-exposure

mukul975/Anthropic-Cybersecurity-Skills

Guides security testers through scanning web apps for leaked API keys, exposed config files, over-verbose responses, and insecure transport to ensure compliance during penetration tests.

XXE Injection Testing Guide

testing-for-xxe-injection-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Guides penetration testers through identifying XML entry points, crafting XXE payloads, and exploiting blind or file-reading vulnerabilities to retrieve secrets or trigger callbacks during authorized assessments.

Prev 1 2 345 Next

Language