Download

Skill UI

Browse and discover 6252+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Web Security , found 61 results

Default Newest Most Downloaded

ModSecurity Logging Implementation

implementing-web-application-logging-with-modsecurity

mukul975/Anthropic-Cybersecurity-Skills

Guide to configure ModSecurity WAF with OWASP CRS, log comprehensive request data, tune rules to suppress false positives, forward audit logs to SIEM, and move to blocking mode for hardened web applications.

Blind SSRF Exploitation Guide

performing-blind-ssrf-exploitation

mukul975/Anthropic-Cybersecurity-Skills

Step-by-step methodology for detecting and exploiting blind Server-Side Request Forgery vulnerabilities using out-of-band callbacks, timing analysis, internal scanning, metadata access, and filter bypass techniques during web security assessments.

Brand Impersonation Monitoring

performing-brand-monitoring-for-impersonation

mukul975/Anthropic-Cybersecurity-Skills

Combines automated scans of domains, social media, mobile apps, and dark web sources to flag phishing campaigns, fake assets, and unauthorized brand use for security assessments and incident response.

Dark Web Threat Monitoring

performing-dark-web-monitoring-for-threats

mukul975/Anthropic-Cybersecurity-Skills

Performs dark web monitoring by routing Tor-based crawlers and APIs through SOCKS5 proxies, scraping hidden forums, paste sites, and marketplaces to surface leaked credentials, threat actor chatter, and IOC data for incident response and security assessments.

GraphQL Security Testing

performing-graphql-security-assessment

mukul975/Anthropic-Cybersecurity-Skills

Guides penetration testers through discovering GraphQL endpoints, extracting schemas, verifying authorization, and probing injection risks during authorized assessments of web, mobile, or microservice GraphQL APIs.

SOAP Security Testing

performing-soap-web-service-security-testing

mukul975/Anthropic-Cybersecurity-Skills

Analyzes WSDL definitions and exercises SOAP endpoints to detect XML injection, XXE, WS-Security bypass, SOAPAction spoofing, and authentication issues during enterprise security assessments or auditing activities.

Firewall Bypass Tactics

performing-web-application-firewall-bypass

mukul975/Anthropic-Cybersecurity-Skills

Guide for offensive security practitioners to bypass web application firewalls using encoding, HTTP method tricks, parameter pollution, tamper scripts, and payload obfuscation to deliver SQLi, XSS, and related payloads during testing and red team operations.

Web Cache Deception Attack

performing-web-cache-deception-attack

mukul975/Anthropic-Cybersecurity-Skills

Guide for executing web cache deception attacks by exploiting CDN vs origin path normalization to cache authenticated pages, useful in security testing and bug bounties.

Web Cache Poisoning

performing-web-cache-poisoning-attack

mukul975/Anthropic-Cybersecurity-Skills

Guides authorized penetration testers through exploiting CDN and reverse proxy caching by identifying unkeyed headers, crafting poisoned requests, and validating cache poisoning during security assessments.

Sensitive Data Exposure Testing

testing-for-sensitive-data-exposure

mukul975/Anthropic-Cybersecurity-Skills

Guides security testers through scanning web apps for leaked API keys, exposed config files, over-verbose responses, and insecure transport to ensure compliance during penetration tests.

WebSocket Security Tests

testing-websocket-api-security

mukul975/Anthropic-Cybersecurity-Skills

Probes WebSocket APIs for auth bypass, CSWSH, injection, DoS flooding, and info leakage by intercepting handshakes/messages with Burp Suite, crafting payloads, and scripting real-time assessments.

Security Penetration Testing

security-pen-testing

alirezarezvani/claude-skills

Guides offensive security testing for web applications, APIs, infrastructure, dependencies, and secrets, including OWASP Top 10 audits, static/dependency scanning, API/infra checks, and report workflows that support authorized penetration tests.

Prev 1 2 3 456 Next

Language