Download

Skill UI

Browse and discover 6058+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search owasp , found 36 results

Default Newest Most Downloaded

ModSecurity Web Logging

implementing-web-application-logging-with-modsecurity

mukul975/Anthropic-Cybersecurity-Skills

Configure ModSecurity and OWASP CRS to log web application traffic, tune false positives, switch from detection to blocking, and ship audit data to SIEM for threat monitoring.

Pipeline DAST Integration

integrating-dast-with-owasp-zap-in-pipeline

mukul975/Anthropic-Cybersecurity-Skills

Integrates OWASP ZAP dynamic application security testing into CI/CD pipelines by configuring baseline, full, and API scans, tuning scan policies, interpreting vulnerabilities, and enforcing DAST quality gates in GitHub Actions or GitLab CI before production.

Postman API Security Tests

performing-api-security-testing-with-postman

mukul975/Anthropic-Cybersecurity-Skills

Leverages Postman collections, automated scripts, and Newman/ZAP integrations to exercise OWASP API Security Top 10 vulnerabilities across roles and CI/CD pipelines, ensuring authentication, authorization, injection, and data exposure defenses before deployment.

Threat Modeling With Threat Dragon

performing-threat-modeling-with-owasp-threat-dragon

mukul975/Anthropic-Cybersecurity-Skills

Use OWASP Threat Dragon to build collaborative data flow diagrams, classify threats via STRIDE/LINDDUN, capture mitigations, and export reports for secure design reviews.

Web Application Pentest

performing-web-application-penetration-test

mukul975/Anthropic-Cybersecurity-Skills

Leverages OWASP WSTG processes and Burp Suite to systematically validate web applications for authentication, authorization, input validation, session, and business-logic flaws ahead of deployment or during compliance checks.

Web Vulnerability Triage

performing-web-application-vulnerability-triage

mukul975/Anthropic-Cybersecurity-Skills

Validates DAST and SAST findings with OWASP risk-rating, filters false positives, and prioritizes remediation so teams focus on high-impact web-app issues identified by Burp/ZAP and managed in DefectDojo.

Secure Api Gateway Waf

securing-api-gateway-with-aws-waf

mukul975/Anthropic-Cybersecurity-Skills

Configures AWS WAF on API Gateway endpoints with managed OWASP rule groups, rate-based throttling, bot control, IP reputation filtering, and monitoring to block web exploits and abusive traffic.

BOLA API Testing Guide

testing-api-for-broken-object-level-authorization

mukul975/Anthropic-Cybersecurity-Skills

Guides pentesters through detecting Broken Object Level Authorization in REST and GraphQL APIs by enumerating object IDs, intercepting requests, manipulating identifiers, and verifying per-object access controls during OWASP API1 assessments.

API Mass Assignment Tester

testing-api-for-mass-assignment-vulnerability

mukul975/Anthropic-Cybersecurity-Skills

Automates mass-assignment checks by injecting privileged properties (role, balance, pricing, permissions) into writable JSON/XML API endpoints so security teams can verify OWASP API3 Broken Object Property Level Authorization defenses and spot auto-binding vulnerabilities.

OWASP API Security Testing

testing-api-security-with-owasp-top-10

mukul975/Anthropic-Cybersecurity-Skills

Guides offensive and defensive teams through systematic REST, GraphQL, and gRPC API testing against the OWASP API Security Top 10, covering discovery, authorization flaws, authentication gaps, data exposure, and rate limiting checks with common tooling.

Broken Access Control Testing

testing-for-broken-access-control

mukul975/Anthropic-Cybersecurity-Skills

Provides a workflow for auditing web apps against OWASP A01 Broken Access Control by mapping endpoints, configuring Burp Authorize, and exercising privilege escalation tests across admin, manager, and user roles plus exposed APIs.

Security Penetration Testing

security-pen-testing

alirezarezvani/claude-skills

Guides offensive security testing for web applications, APIs, infrastructure, dependencies, and secrets, including OWASP Top 10 audits, static/dependency scanning, API/infra checks, and report workflows that support authorized penetration tests.

Language