Download

Skill UI

Browse and discover 16597+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Vulnerability-Exploitation , found 16 results

Default Newest Most Downloaded

Advanced AWS Penetration Testing Techniques

aws-penetration-testing

sickn33/antigravity-awesome-skills

A comprehensive guide covering advanced offensive techniques for AWS cloud environments. Techniques include detailed IAM enumeration, privilege escalation paths, SSRF exploitation targeting metadata endpoints (IMDSv1/v2), S3 bucket exploitation, and Lambda function code extraction. Essential for security professionals and red team operations conducting authorized cloud vulnerability assessments.

Web Application Penetration Automation

performing-penetration-testing

jeremylongshore/claude-code-plugins-plus-skills

Automates web application penetration testing by leveraging the penetration-tester plugin to scan OWASP Top 10 threats, suggest exploitation techniques, and produce actionable vulnerability reports for pentest or vulnerability assessment requests.

SQL Injection Testing

sql-injection-testing

sickn33/antigravity-awesome-skills

Execute systematic SQL injection vulnerability assessments on web applications using reconnaissance, payload tuning, and exploitation workflows to uncover database flaws, capture evidence, and validate remediation recommendations for authorized security testing.

SSH Penetration Testing

ssh-penetration-testing

sickn33/antigravity-awesome-skills

Guides SSH service security assessments from discovery, enumeration, credential attacks and key testing to tunneling, vulnerability exploitation, and reporting deliverables.

WordPress Penetration Testing

wordpress-penetration-testing

sickn33/antigravity-awesome-skills

Guides security pros through WordPress 7.0 attack surfaces covering discovery, enumeration, vulnerability scanning, credential checks, and exploitation with WPScan, Burp, Metasploit, and manual curl probes for authorized assessments.

GitHub Actions Security Vulnerability Audit

gha-security-review

sickn33/antigravity-awesome-skills

A rigorous framework designed to audit GitHub Actions workflows for exploitable security vulnerabilities. This skill focuses strictly on real-world attack patterns, requiring every identified finding to include a concrete exploitation scenario (Entry Point, Payload, Impact). Ideal for securing CI/CD pipelines against external attackers.

Sqlmap Guide for SQL Injection Exploitation

exploiting-sql-injection-with-sqlmap

mukul975/Anthropic-Cybersecurity-Skills

This comprehensive guide details the professional process of detecting and exploiting SQL injection vulnerabilities using the powerful sqlmap tool. It covers the entire workflow, from initial vulnerability identification and basic scanning to database enumeration, data dumping, advanced exploitation (like file reading and OS command execution), and WAF bypass techniques, ensuring thorough penetration testing reporting.

SSRF Vulnerability Exploitation Tool

performing-ssrf-vulnerability-exploitation

mukul975/Anthropic-Cybersecurity-Skills

This tool automates the testing of web application URL parameters for Server-Side Request Forgery (SSRF). It probes sensitive endpoints, including cloud metadata services (AWS, GCP, Azure), internal network resources, and various URI schemes (file://, gopher://). It is designed for authorized penetration testing environments to confirm SSRF vulnerabilities and generate detailed threat reports.

Ethical Hacking Methodology

ethical-hacking-methodology

zebbern/claude-code-guide

Guides learners through reconnaissance, scanning, vulnerability analysis, exploitation, and reporting phases of authorized penetration testing, pairing command examples with tool choices and professional deliverables.

File Upload Vulnerability Checklist

offensive-file-upload

SnailSploit/Claude-Red

A comprehensive checklist and methodology for penetration testing file upload endpoints. Covers critical vulnerabilities such as MIME type bypass, extension bypass, magic byte manipulation, path traversal, and stored XSS. Essential for web application security assessment and bug bounty hunting, guiding testers through basic testing to advanced exploitation techniques like Null Byte injection and double extensions.

JNDI Injection Vulnerability Exploitation

yaklang/hack-skills

A comprehensive playbook detailing advanced JNDI injection techniques. Covers the abuse of JNDI lookups via RMI and LDAP, focusing on critical vulnerabilities like Log4Shell (CVE-2021-44228), deserialization gadgets, and post-8u191 bypass methods. Essential for deep-dive security testing and vulnerability research.

Kernel Exploitation: Privilege Escalation Playbook

kernel-exploitation

yaklang/hack-skills

An expert playbook detailing advanced techniques for Linux kernel exploitation. Covers vulnerability classes (UAF, OOB, Race Condition), building primitives, bypassing modern mitigations (KASLR, SMEP, SMAP, KPTI), and achieving root privilege escalation via functions like commit_creds or modprobe_path overwrite. Essential for CTF and advanced security research.

Language