Download

Skill UI

Browse and discover 11130+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search OO , found 284 results

Default Newest Most Downloaded

Advanced Container Escape Playbook

container-escape-techniques

yaklang/hack-skills

A comprehensive guide covering expert techniques for breaking out of container isolation. This playbook details methods for exploiting privileged modes, abusing cgroups, manipulating namespaces, and leveraging vulnerabilities in Docker or Kubernetes environments. Essential for advanced security research and penetration testing.

DNS Rebinding Attack Playbook

dns-rebinding-attacks

yaklang/hack-skills

An expert playbook detailing DNS rebinding techniques to bypass the Same-Origin Policy (SOP). This method is used in penetration testing to exploit client-side applications that rely on DNS resolution for origin checks, allowing attackers to trick the browser into sending requests to internal, non-publicly accessible services (like cloud metadata endpoints) while maintaining a seemingly trusted origin.

Format String Exploitation Playbook

format-string-exploitation

yaklang/hack-skills

This advanced playbook details expert techniques for format string exploitation. It covers arbitrary stack reading (%p), memory writing (%n), and exploiting weaknesses like GOT/hook overwrites. Essential for CTF challenges and binary vulnerability analysis to achieve reliable Remote Code Execution (RCE).

Host Header Injection and Routing Abuse

http-host-header-attacks

yaklang/hack-skills

A comprehensive playbook detailing how web applications can be vulnerable to attacks by manipulating the HTTP Host header. Covers critical techniques such as password reset poisoning, Web Cache Poisoning, Server-Side Request Forgery (SSRF), and Virtual Host bypass. Essential reading for penetration testers and security researchers.

Advanced HTTP/2 Attack Playbook

http2-specific-attacks

yaklang/hack-skills

This expert playbook details advanced attack vectors specific to the HTTP/2 protocol. It covers sophisticated techniques such as h2c smuggling, exploiting pseudo-header discrepancies, HPACK compression vulnerabilities, and abusing stream multiplexing. Use this skill for professional penetration testing and security auditing of H2 services, especially for bypassing proxy-level controls and WAFs.

Expert iOS Mobile Security Playbook

ios-pentesting-tricks

yaklang/hack-skills

A comprehensive playbook for advanced mobile security assessments of iOS applications. Covers both jailbroken and non-jailbroken environments, focusing on critical attack vectors such as keychain extraction, URL scheme hijacking, Universal Links exploitation via AASA misconfigurations, runtime memory manipulation (Frida/Objection), and binary protection analysis.

Kubernetes Penetration Testing Playbook

kubernetes-pentesting

yaklang/hack-skills

A comprehensive playbook detailing advanced techniques for attacking Kubernetes clusters. Covers API server access, RBAC privilege escalation, service account token abuse, etcd secrets extraction, Kubelet exploitation, and various container escapes. This guide is essential for security professionals and red teams performing deep security assessments on cloud-native infrastructure.

KubeSphere Network Extension Operations

kubesphere-network-extension-operations

kubesphere/kubesphere

A comprehensive guide for managing and operating the KubeSphere network extension. This skill provides detailed instructions on installing, upgrading, enabling, or disabling the network extension, managing Calico IPPool resources, configuring NetworkPolicies, and troubleshooting network isolation flows within a Kubernetes cluster environment. Essential for platform engineers and DevOps teams.

Linux Security Bypass Expert Playbook

linux-security-bypass

yaklang/hack-skills

A comprehensive playbook detailing advanced techniques for post-exploitation security bypass on Linux systems. Covers escaping restricted shells (rbash), evading noexec/read-only filesystems using in-memory execution (DDexec, memfd_create), and circumventing mandatory access controls like AppArmor and SELinux. Essential for penetration testing and red team operations.

NodeGroup Resource Management Operations

kubesphere/kubesphere

This skill provides comprehensive operations for managing NodeGroup resources. It allows users to query, create, update, delete, and manage bindings for nodes, namespaces, and workspaces within the edgewize nodegroup environment. Ideal for infrastructure automation, troubleshooting, and API-driven cluster management.

NTLM Relay and Authentication Coercion Playbook

ntlm-relay-coercion

yaklang/hack-skills

An expert-level playbook detailing advanced techniques for NTLM relay and authentication coercion. Covers cross-protocol attacks targeting SMB, LDAP, HTTP, and MSSQL. Includes methods like LLMNR poisoning, PetitPotam, and advanced domain privilege escalation to bypass standard authentication controls.

Wi-Fi Deauth and Network Attack Toolkit

offensive-deauth-disassoc

SnailSploit/Claude-Red

A comprehensive guide detailing various 802.11 management frame attacks, including deauthentication and disassociation. It covers targeted single-client deauth for handshake capture, broadcast DoS attacks, and advanced action-frame exploitation to bypass PMF (802.11w). Essential for professional penetration testing and wireless vulnerability assessment.

Prev 1 2 3...16 17 181920 21 22 23 24 Next

Language