Download

Skill UI

Browse and discover 6278+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Web Security , found 60 results

Default Newest Most Downloaded

FIDO2 Passwordless Authentication

implementing-passwordless-authentication-with-fido2

mukul975/Anthropic-Cybersecurity-Skills

Deploy and operate FIDO2/WebAuthn passwordless authentication with security keys and platform authenticators, covering API integration, server setup, passkey enrollment, and biometric migration to meet NIST AAL3 guidance.

ModSecurity Logging Deployment

implementing-web-application-logging-with-modsecurity

mukul975/Anthropic-Cybersecurity-Skills

Configure ModSecurity with the OWASP CRS, tune SecRules, and forward audit logs to SIEM so teams can detect, analyze, and respond to web application attacks.

Blind SSRF Exploitation Guide

performing-blind-ssrf-exploitation

mukul975/Anthropic-Cybersecurity-Skills

Step-by-step methodology to detect and exploit blind Server-Side Request Forgery flaws via out-of-band callbacks, internal scanning, metadata harvesting, and filter bypass techniques during web security assessments.

GraphQL Security Assessment

performing-graphql-security-assessment

mukul975/Anthropic-Cybersecurity-Skills

Guides penetration testers through discovering endpoints, introspecting schemas, validating authorization, and probing injection/DoS risks when evaluating GraphQL APIs.

Web Security Headers Audit

performing-security-headers-audit

mukul975/Anthropic-Cybersecurity-Skills

Audits HTTP security headers such as CSP, HSTS, X-Frame-Options, and cookie attributes to validate browser protections, identify misconfigurations, and guide remediation during penetration tests or compliance checks.

SOAP Web Service Security Testing

performing-soap-web-service-security-testing

mukul975/Anthropic-Cybersecurity-Skills

Analyzes SOAP WSDL definitions and exercises XML injection, WS-Security misconfigurations, and SOAPAction spoofing to validate auth controls during API security assessments.

Web Application Firewall Bypass

performing-web-application-firewall-bypass

mukul975/Anthropic-Cybersecurity-Skills

Guide covering encoding tricks, HTTP method manipulation, parameter pollution, payload splitting, and tamper scripts to bypass WAFs and deliver SQLi/XSS payloads during penetration tests and security assessments.

XSS Testing With Burp Suite

testing-for-xss-vulnerabilities-with-burpsuite

mukul975/Anthropic-Cybersecurity-Skills

Guides security testers through using Burp Suite’s scanner, Intruder, Repeater, and DOM Invader to identify, validate, and bypass reflected, stored, and DOM-based XSS vulnerabilities during authorized web assessments and bug bounty programs.

WebSocket Security Tester

testing-websocket-api-security

mukul975/Anthropic-Cybersecurity-Skills

Automates manual-style WebSocket security checks by intercepting handshakes, manipulating authentication headers, and sending malicious frames to verify CSWSH, injection, DoS, and leakage protections in real-time APIs.

SCADA HMI Security Assessment

performing-scada-hmi-security-assessment

mukul975/Anthropic-Cybersecurity-Skills

Guides structured security assessments of SCADA HMI systems by auditing web interfaces, authentication flows, and HMI‑PLC communications against IEC 62443 and NIST SP 800‑82 requirements.

Security Penetration Testing

security-pen-testing

alirezarezvani/claude-skills

Guides offensive security testing for web applications, APIs, infrastructure, dependencies, and secrets, including OWASP Top 10 audits, static/dependency scanning, API/infra checks, and report workflows that support authorized penetration tests.

Hardware Key Authentication

implementing-hardware-security-key-authentication

mukul975/Anthropic-Cybersecurity-Skills

Implements FIDO2/WebAuthn hardware security key registration and authentication flows with python-fido2, covering YubiKey enrollment, passkey migration, resident credentials, and user verification policies for phishing-resistant, passwordless access.

Language