Skill UI

This guide covers essential security protocols for integrating with the Notion API. Learn how to manage integration tokens securely, implement OAuth2 flows, and enforce the principle of least privilege by separating read/write capabilities. It is crucial for developers building robust, secure Notion-powered applications.

A comprehensive guide detailing advanced offensive fuzzing methodologies. It covers the full lifecycle from target identification (parsers, network protocols, kernels) to tool selection (AFL++, libFuzzer, Honggfuzz, syzkaller), building harnesses, curating seed corpora, executing fuzz campaigns, and finally, performing crash triage and vulnerability analysis. Essential for security researchers and embedded systems developers.

This skill guides the implementation of robust, real-time data integrations with Salesforce. It covers three critical mechanisms: Change Data Capture (CDC) for tracking record changes, Platform Events for custom business event buses, and handling Outbound Messages. Learn how to build resilient, event-driven architectures using asynchronous streaming protocols and ensure idempotent event processing.

This guide serves as the core entry point for comprehensive security testing of identity and access control mechanisms. It is designed to help testers systematically identify vulnerabilities across login flows, session management, object authorization (IDOR), and modern protocols like JWT, OAuth, CORS, and SAML. Use this when planning security audits for any web application with user accounts.

This comprehensive playbook details advanced techniques for exploiting Layer 2 and Layer 3 network protocols. It covers attacks such as ARP spoofing, LLMNR/mDNS poisoning, WPAD abuse, DHCPv6 takeover, VLAN hopping, and STP manipulation. Designed for penetration testers, it facilitates MitM positioning, credential harvesting (NTLM relay), and robust network environment exploitation.

A comprehensive playbook covering advanced smart contract audit techniques for Solidity/EVM. Focuses on critical patterns like reentrancy (cross-contract), integer overflows, access control misuse, delegatecall exploits, flash loans, and advanced MEV/front-running attacks. Essential for securing DeFi protocols.

This comprehensive playbook details expert techniques for exploiting Server-Side Request Forgery (SSRF). It covers bypassing URL filters, accessing cloud metadata endpoints (AWS, GCP, Azure), utilizing advanced protocols like Gopher, and chaining vulnerabilities to achieve Remote Code Execution (RCE) in real-world scenarios. Ideal for penetration testers and security researchers.

A powerful skill that enables natural-language interaction with complex DeFi protocols across multiple EVM chains. It acts as a non-custodial agent, interpreting user prompts (e.g., 'swap X for Y') into simulated, multi-step transactions (like approve + swap). It utilizes account abstraction (EIP-7702/ERC-4337) to simulate and queue secure, user-signed transactions via the CLI, making advanced DeFi accessible from the terminal.

A specialized skill for achieving asymptotic performance gains when classical algorithms are already near optimal. It leverages advanced mathematical techniques and probabilistic data structures (e.g., Bloom Filters, HyperLogLog, FFT, MinHash/LSH) to handle massive datasets (n ≥ 10⁶) by accepting bounded approximations or exploiting deep structural properties. Requires strict adherence to error parameter and complexity justification protocols.