Skill UI

This skill provides advanced integration for deploying applications on Fly.io, focusing on edge computing architectures. It covers building production-ready Docker images, configuring `fly.toml` for services and health checks, and executing sophisticated deployment strategies like blue-green and canary releases. It ensures reliable, scalable deployment across multiple regions, including automated rollbacks and micro-VM optimization.

This integration facilitates the deployment of Hex orchestration services to major cloud platforms like Vercel, Google Cloud Run, and Fly.io. It is essential for setting up production environments, managing platform-specific secrets (like API tokens), and automating deployment pipelines for Hex-powered applications.

A comprehensive guide and toolset for load testing HubSpot integrations and planning for high-volume traffic. This resource details HubSpot's specific API rate limits (per-second and daily) and provides k6 scripts and capacity calculators to ensure your application scales reliably before deployment in production.

This tool collects comprehensive diagnostic evidence for troubleshooting Miro REST API v2 integration problems. It gathers environment details, performs connectivity tests (DNS, HTTPS), checks rate limits, and aggregates recent application logs into a single, structured bundle. Use this when preparing a detailed support ticket or diagnosing persistent API issues.

This comprehensive checklist guides thorough security testing of OAuth 2.0 and OpenID Connect (OIDC) protocols. It covers advanced vulnerabilities such as authorization code interception, PKCE bypass, CSRF flaws, and improper scope validation. The methodology emphasizes modern industry standards like FAPI (DPoP, JAR, PAR), making it essential for penetration testers and security researchers assessing web application integrity and API security.

A comprehensive methodology and checklist for identifying and exploiting race conditions (TOCTOU) in web applications. It guides users to find timing windows, detect vulnerabilities like double-spend or rate limit bypass, and exploit concurrent request flaws in state-changing business logic. Essential for penetration testing and bug bounty hunting.

This comprehensive guide provides advanced strategies for optimizing and scaling Qdrant vector database throughput (QPS). It covers performance tuning techniques, such as optimizing segment size, enabling quantization, and using batch search. Furthermore, it details horizontal scaling methods using read replicas and addressing disk I/O bottlenecks, ensuring high performance for large-scale, high-concurrency retrieval applications.

Automates the deployment of static web files (HTML, CSS, JS, images) to a specified domain using Cloudflare Pages via the Wrangler CLI. This skill is ideal for hosting Single-Page Applications (React, Vue), landing pages, portfolios, or documentation sites. It stages the site files and injects necessary cache revalidation headers to ensure content freshness after redeployment.

An expert playbook detailing DNS rebinding techniques to bypass the Same-Origin Policy (SOP). This method is used in penetration testing to exploit client-side applications that rely on DNS resolution for origin checks, allowing attackers to trick the browser into sending requests to internal, non-publicly accessible services (like cloud metadata endpoints) while maintaining a seemingly trusted origin.

A comprehensive playbook detailing how web applications can be vulnerable to attacks by manipulating the HTTP Host header. Covers critical techniques such as password reset poisoning, Web Cache Poisoning, Server-Side Request Forgery (SSRF), and Virtual Host bypass. Essential reading for penetration testers and security researchers.

A comprehensive playbook for advanced mobile security assessments of iOS applications. Covers both jailbroken and non-jailbroken environments, focusing on critical attack vectors such as keychain extraction, URL scheme hijacking, Universal Links exploitation via AASA misconfigurations, runtime memory manipulation (Frida/Objection), and binary protection analysis.

A comprehensive playbook for advanced security testing, focusing on race conditions and TOCTOU (Time-of-check to time-of-use) vulnerabilities in web applications. It guides users to exploit non-atomic, state-changing operations (e.g., coupons, balance deductions, single-use rewards) by sending highly synchronized, parallel requests (including HTTP/2 single-packet attacks). Essential for identifying weaknesses in authorization and transactional integrity.