Skill UI

A comprehensive guide covering the principles of production-grade server management. Topics include process control (PM2, systemd), advanced monitoring strategies (Grafana, metrics), structured logging, scaling decisions (horizontal/vertical), and security best practices. It teaches systematic thinking for ensuring high availability, reliability, and scalability in complex systems.

This guide provides a comprehensive methodology for identifying and exploiting Insecure Direct Object Reference (IDOR) vulnerabilities in web applications and APIs. It teaches testers how to systematically manipulate object identifiers (such as numerical IDs, UUIDs, or slugs) within API requests and URLs. Techniques involve using advanced tools like Burp Suite's Authorize extension to test object-level access control, validating both horizontal (same privilege) and vertical (different privilege) access restrictions during authorized penetration tests or bug bounty engagements.

This guide outlines a structured methodology for decomposing large specifications or vague projects into small, verifiable, and ordered tasks. It teaches best practices like dependency mapping, vertical slicing, and defining explicit acceptance criteria, ensuring reliable project execution and a clear development path.

This comprehensive checklist guides penetration testers through discovering Insecure Direct Object References (IDOR). It covers techniques like object ID enumeration, horizontal and vertical privilege escalation, and parameter manipulation. Use it for web application pentests and bug bounty hunting to identify broken access control vulnerabilities.

This guide provides comprehensive guidelines for performing vertical scaling on Qdrant instances. Vertical scaling involves upgrading the computational resources (CPU, RAM, or disk) of existing nodes rather than adding new nodes. It is the recommended first step when single nodes experience resource exhaustion (e.g., RAM usage > 80%, CPU saturation). The guide covers sizing guidelines, best practices for cloud deployment, and clearly defines the thresholds when horizontal scaling becomes necessary.

An expert playbook for systematically testing Insecure Direct Object References (IDOR) and Broken Object/Function Level Authorization (BOLA/BFLA). This guide covers finding object identifiers across all request vectors (URL, body, headers, cookies), implementing A-B testing methodologies, identifying various ID patterns, and executing horizontal or vertical privilege escalation attacks. Essential for deep API security auditing.

This tool orchestrates the process of bootstrapping a Minimum Viable Product (MVP) directly from a design specification (SDD or PRD). It ingests the document, plans thin vertical slices, scaffolds the initial end-to-end slice, and guides the TDD implementation, review, and staged commit process, turning theoretical specs into a functional starting point.

Build a playable prototype in about an hour to test if a game mechanic is fun, using greybox primitives, a hard timebox, and explicit keep/kill criteria. Ideal for validating mechanics, vertical slices, MVPs, or de-risking ideas before full production.