Skill UI

This skill serves as the central entry point for comprehensive API security testing. It guides testers to systematically categorize and prioritize potential vulnerabilities by focusing on core dimensions such as documentation review (Recon), object-level authorization (BOLA), token integrity (JWT), and complex data structures (GraphQL/Hidden Params). Use this as the initial step when assessing a new REST or GraphQL endpoint.

A comprehensive guide for authors planning research submissions to top-tier academic security conferences like CCS. It details the two-cycle HotCRP workflow, decision criteria, and strategic advice on addressing threat model soundness, novelty, evidence quality, and crucial ethical disclosure concerns across all stages, from initial review to minor revision.

This guide models the three-stage review process for the Journal on Communications (JOC). It helps authors understand the initial screening (format, relevance, plagiarism), expert peer review, and final committee review. By predicting potential outcomes and identifying strategic 'levers' at each stage, users can effectively revise manuscripts, manage submission timelines, and significantly increase the chances of successful publication in communication, networking, or information security fields.

This guide provides a comprehensive framework for authors responding to peer reviews in major security conferences. It details how to triage reviewers' comments, structure technical responses (pointing to evidence, not arguing), handle complex objections like adaptive attacks and ethics, and effectively participate in the interactive discussion phase to refine the paper.