Skill UI

This skill provides a comprehensive operational checklist for identifying and exploiting HTTP Parameter Pollution (HPP) vulnerabilities. It details how various web technologies (ASP.NET, PHP, Python, etc.) handle duplicate parameters differently (e.g., first-wins, last-wins, concatenation). Use this skill during penetration testing to discover flaws in parameter parsing, which can lead to bypassing WAFs, performing logic manipulation, or achieving unauthorized access.

This skill provides a comprehensive, structured methodology and checklist for identifying Remote Code Execution (RCE) vulnerabilities across various web applications. It covers advanced attack vectors such as OS command injection, Server-Side Template Injection (SSTI), insecure deserialization, file upload flaws, and XXE. Use this guide during web application penetration testing or bug bounty hunting to systematically discover arbitrary code execution paths.

A comprehensive guide to advanced SQL injection (SQLi) methodologies for offensive security assessments and bug bounty hunting. Covers all major injection types, including error-based, boolean/time-based blind, out-of-band, and second-order injection. Provides specific payloads and techniques for MySQL, MSSQL, PostgreSQL, Oracle, and NoSQL databases, along with methods for bypassing WAFs, exploiting GraphQL, WebSocket, and modern API filters. Includes full automation workflows using tools like sqlmap.

This skill provides a comprehensive checklist and methodology for identifying Server-Side Template Injection (SSTI) vulnerabilities. It covers template engine identification (e.g., Jinja2, Twig), polyglot payload generation, systematic detection methods, and executing engine-specific Remote Code Execution (RCE) payloads. Ideal for security professionals testing web application input sanitization.

This skill provides comprehensive strategies for testing OneNote integrations within CI/CD pipelines. It supports mock-only PR checks using MSW for zero-dependency testing, and robust live integration tests for nightly builds using Azure AD credentials. Ideal for automating quality assurance when connecting OneNote features via the Graph API.

This comprehensive guide serves as a complete error decoder for the OneNote Graph API. It analyzes major HTTP status codes (400, 403, 404, 429, 500, 502, 507) and provides root cause analysis, diagnostic steps, and code fixes for common issues. It specifically addresses critical failure modes like deprecated authentication methods and silent 200 OK failures, helping developers debug complex API integrations in production.

A comprehensive guide and implementation pattern for querying, searching, and paginating OneNote content using the Microsoft Graph API. This skill addresses the limitations of the standard OneNote search endpoint, providing robust methods for cross-notebook querying, advanced OData filtering on metadata, and client-side full-text indexing for body content. Ideal for building complex knowledge retrieval systems that handle large, distributed result sets.

This skill provides comprehensive strategies to optimize resource usage and mitigate rate limits when integrating with the OneNote Graph API. It focuses on reducing the operational 'cost' of making API calls by implementing metadata caching (TTL), utilizing JSON batch requests, and performing delta synchronization instead of full list fetches. Essential for high-volume, stable OneNote enterprise integrations.

This skill provides a comprehensive guide and code examples for creating a complete OneNote structure (Notebook, Section, and Page) using the Microsoft Graph API. It specifically addresses the critical technical requirement that OneNote content must follow strict XHTML standards, detailing common HTML pitfalls (such as unclosed tags, unsupported attributes, and merge cell usage) that can lead to silent content corruption during API calls.

This skill establishes a local development loop for OneNote integrations. It uses Mock Service Workers (MSW) to intercept calls to the Microsoft Graph API, providing realistic, fixture-based responses (e.g., Notebooks, Sections, Pages). This allows developers to rapidly build and test OneNote features without needing live Azure credentials or worrying about rate limit restrictions during development cycles.

This skill provides advanced rate limit handling for the OneNote Graph API. It implements a token bucket algorithm and queue-based throttling mechanism to prevent hitting rate limits (429 errors). It correctly parses the 'Retry-After' header and manages both per-user and per-tenant usage quotas, ensuring stable, high-throughput integrations.

This skill provides robust, production-grade patterns for interacting with the OneNote Graph API. It addresses critical issues encountered in real-world applications, such as rate limiting (429 errors), transient server failures (502/503), and silent file upload failures. It includes retry decorators, batch request strategies, and proactive rate limit tracking mechanisms for both TypeScript and Python, ensuring highly reliable integrations.