Skill UI

Leverages Monte Carlo-based simulation to spot potential software vulnerabilities by feeding randomized inputs into modules, tracking failure likelihoods, and highlighting risky code paths for security testing.

This comprehensive checklist details how to test for XML External Entity (XXE) injection vulnerabilities. It covers classic, blind, error-based, and out-of-band techniques, enabling testers to identify weaknesses in XML parsers. The methodology includes finding various injection points (e.g., file uploads, SOAP/REST endpoints) and exploiting potential risks like file disclosure, SSRF, and DoS. Use this guide for robust web application security testing and bug bounty hunting.

This skill reviews test suite quality using established testing literature to identify brittleness, mock abuse, unclear fixtures, weak assertions, slow feedback, and maintenance risks. It diagnoses structural problems in existing test suites based on classic engineering books like xUnit Test Patterns and The Art of Unit Testing, ensuring robust and maintainable testing practices.