Download

Skill UI

Browse and discover 10321+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Total 6007 skills

Default Newest Most Downloaded

Offensive Wi-Fi Testing

SnailSploit/Claude-Red

A wireless 802.11 offensive testing methodology for red team and security assessments. It covers monitor-mode setup, handshake and PMKID capture, WPA3/Enterprise attacks, evil twin setups, WPS abuse, and related wireless intrusion techniques.

Wi-Fi Reconnaissance

offensive-wifi-recon

SnailSploit/Claude-Red

Methodology for passive Wi-Fi reconnaissance: choose compatible adapters, enable monitor mode, set regulatory domains, sweep 2.4/5/6 GHz bands, identify hidden SSIDs, clients, vendors, and encryption before active wireless attacks.

WPA Enterprise Attacks

offensive-wpa-enterprise

SnailSploit/Claude-Red

Techniques for attacking WPA/WPA2/WPA3-Enterprise 802.1X networks, including EAP method identification, evil-twin RADIUS credential capture, MSCHAPv2 cracking, and EAP-TLS certificate theft paths in corporate Wi-Fi environments.

WPA2 PSK Attack Workflow

offensive-wpa2-psk

SnailSploit/Claude-Red

A workflow for capturing PMKID or four-way handshakes from WPA/WPA2-Personal networks, converting captures to hashcat format, and cracking passwords with dictionaries, masks, and vendor default-key patterns.

WPA3 Attack Methodology

offensive-wpa3-sae

SnailSploit/Claude-Red

Covers WPA3/SAE attack techniques including transition-mode downgrade, Dragonblood side-channel analysis, SAE authentication flooding, H2E checks, and Wi-Fi 6E implications. Useful for assessing wireless security gaps and validating defensive hardening.

WPS PIN Attacks

SnailSploit/Claude-Red

Methodology for assessing WPS-enabled routers using Pixie Dust offline recovery, online PIN brute force, lockout handling, and PBC edge cases. Useful for wireless security testing and understanding WPS exposure on consumer APs.

Access Control Bypass Techniques Guide

401-403-bypass-techniques

yaklang/hack-skills

A comprehensive playbook for bypassing 401/403 Forbidden errors. Covers advanced techniques like path normalization tricks (encoding, traversal), HTTP method tampering, IP spoofing headers, and protocol downgrade attacks. Essential knowledge for penetration testing and security auditing.

Advanced Kerberos Attack Playbook for Active Directory

active-directory-kerberos-attacks

yaklang/hack-skills

A comprehensive guide covering advanced Kerberos attacks against Active Directory environments. Techniques include AS-REP roasting, Kerberoasting, forging golden, silver, diamond, and sapphire tickets, and exploiting delegation abuse. Designed for penetration testers and red teams to simulate sophisticated domain compromise scenarios.

Advanced Android Security Testing Playbook

android-pentesting-tricks

yaklang/hack-skills

A comprehensive playbook for expert-level Android application security testing. It covers advanced exploitation techniques, including SSL pinning bypass (using Frida/Objection), detecting component exposure (activities, providers, services), and exploiting WebView vulnerabilities (RCE, XSS). Essential for authorized mobile penetration testing assessments.

Anti-Debugging Detection And Bypass Playbook

anti-debugging-techniques

yaklang/hack-skills

A comprehensive playbook for defeating anti-debugging mechanisms in protected binaries. Covers advanced techniques across both Linux (ptrace, /proc/self/status, timing checks) and Windows (PEB flags, NtQueryInformationProcess). Provides detailed detection methods and corresponding bypass strategies (e.g., patching, hooking, kernel modules) essential for advanced binary reverse engineering.

API Authentication And JWT Abuse Testing

api-auth-and-jwt-abuse

yaklang/hack-skills

A comprehensive playbook for security testing APIs relying on JWT, bearer tokens, or API keys. It covers token validation weaknesses (e.g., 'alg:none', RS256 confusion), claim misuse, header spoofing, rate limit bypass, and mass assignment vulnerabilities. Ideal for penetration testers assessing authentication boundaries.

API Authorization and BOLA Testing

api-authorization-and-bola

yaklang/hack-skills

This comprehensive playbook guides security testers through deep API authorization checks, focusing specifically on BOLA (Broken Object Level Authorization) and BFLA (Broken Function Level Authorization). Use this skill to test scenarios where object identifiers, nested resources, or privileged functions are exposed, ensuring thorough checks for mass assignment and privilege escalation.

Prev 1 2 3...460 461 462463464 465 466...499 500 501 Next

Language