Skill UI

This guide details advanced techniques for bypassing Web Application Firewalls (WAFs). It covers methods such as payload obfuscation, advanced URL encoding, HTTP method manipulation (PUT, PATCH, etc.), parameter pollution, and utilizing specialized tools like SQLMap tamper scripts to smuggle exploit payloads (e.g., SQLi, XSS) past perimeter security controls. Essential for penetration testing and red team engagements.

A comprehensive guide for performing systematic security assessments on web applications. Following the OWASP Web Security Testing Guide (WSTG), this process identifies critical vulnerabilities such as broken authentication, authorization flaws (IDOR), SQL injection, and Cross-Site Scripting (XSS). The workflow covers reconnaissance, mapping, and advanced testing techniques using tools like Burp Suite and sqlmap, ensuring deep coverage beyond automated scanner capabilities. Ideal for pre-production security validation and compliance audits.

Nikto is a powerful, open-source web server and web application scanner designed for comprehensive vulnerability assessment. It tests over 7,000 potentially dangerous files and checks for critical issues like XSS, SQL injection, outdated versions, and misconfigurations across modern web applications. Ideal for security audit, penetration testing, and validating web server security controls.

This skill guides users through performing sophisticated web cache deception attacks. It exploits path normalization discrepancies and cache key misconfigurations between Content Delivery Networks (CDNs) and origin servers. Use this methodology to test for sensitive data exposure, cache poisoning, and authentication bypass vulnerabilities in applications protected by aggressive caching layers like Cloudflare or Akamai.

A comprehensive guide for security professionals detailing how to exploit web cache mechanisms (CDNs, reverse proxies) to inject malicious content. It covers identifying caching layers, discovering unkeyed headers (like X-Forwarded-Host), and executing poisoning attacks for authorized penetration testing.

This comprehensive guide teaches advanced iOS reverse engineering techniques using Frida dynamic instrumentation. Users can analyze proprietary app logic, extract encryption keys, trace method calls, and bypass anti-tampering or anti-debugging mechanisms without needing source code. It is essential for authorized mobile security testing and protocol analysis.

A comprehensive guide to writing robust and maintainable tests in Rust. It covers various advanced testing patterns, including Unit, Integration, Async, and Property-Based testing. Learn how to apply the TDD (Test-Driven Development) cycle (RED-GREEN-REFACTOR) to enhance code reliability and ensure high code coverage.

A comprehensive guide and toolkit for advanced network reconnaissance using Nmap. It covers sophisticated techniques including service version detection, vulnerability scanning via Nmap Scripting Engine (NSE), firewall evasion methods (e.g., fragmentation, decoy addressing), and structured output parsing for integration into vulnerability management pipelines. Essential for authorized penetration testing.

This skill is designed for assessing the security of Android inter-process communication (IPC) by systematically testing intents, broadcast receivers, content providers, and exported components. It helps identify critical vulnerabilities such as intent injection, unauthorized data leakage, and component hijacking, which are crucial during mobile penetration testing and security audits.

A comprehensive security script designed to test REST API authentication mechanisms for common vulnerabilities. It assesses broken token validation, missing authentication on critical endpoints, weak password policies, and session management flaws. The tool specifically evaluates JWT implementation, API key handling, and adherence to OWASP API Security Top 10, helping identify authentication bypasses before production deployment.

A specialized skill for assessing REST and GraphQL APIs against Broken Object Level Authorization (BOLA/IDOR), a critical vulnerability highlighted by OWASP API1:2023. This process involves intercepting API calls, identifying object identifiers (numeric IDs, UUIDs, slugs), and systematically substituting these IDs with those belonging to other users or tenants. It verifies whether the API server correctly enforces per-object authorization checks, mitigating risks of horizontal privilege escalation and unauthorized data access in multi-tenant environments.

This script automates the testing of API endpoints for mass assignment (over-posting) vulnerabilities, adhering to OWASP API3:2023 guidelines. It systematically injects undocumented, privileged fields (like 'role', 'isAdmin', 'balance', 'price') into request bodies of typical endpoints (e.g., profile updates, order creation). It checks if the server binds these unexpected fields to the data model without proper filtering, potentially allowing unauthorized privilege escalation or data manipulation.