Download

Skill UI

Browse and discover 19205+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search A/B Testing , found 1292 results

Default Newest Most Downloaded

Web Application Access Control Testing

testing-for-broken-access-control

mukul975/Anthropic-Cybersecurity-Skills

A comprehensive guide for systematically assessing web applications and APIs for broken access control vulnerabilities (OWASP A01:2021). The methodology covers role-based access control (RBAC) auditing, horizontal and vertical privilege escalation, and multi-tenant data leakage using tools like Burp Suite, ffuf, and custom scripts. Essential for authorized penetration testing and security audits.

Business Logic Vulnerability Testing Guide

testing-for-business-logic-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

A comprehensive guide for manually assessing critical business rules and workflows in web applications. This technique goes beyond automated scanning by simulating attacks like price manipulation, multi-step process bypass, and privilege escalation. Ideal for securing e-commerce checkout funnels, financial transactions, and complex authorization systems.

Testing Email Header Injection Vulnerabilities

testing-for-email-header-injection

mukul975/Anthropic-Cybersecurity-Skills

This comprehensive guide provides a detailed methodology for performing security testing on web applications that handle email sending (e.g., contact forms, password resets, newsletters). It focuses on identifying CRLF/SMTP header injection vulnerabilities, guiding users on how to check if attackers can manipulate email headers, inject custom content, or abuse forms for spam relay during a penetration test.

Host Header Injection Vulnerability Testing

testing-for-host-header-injection

mukul975/Anthropic-Cybersecurity-Skills

This skill guides comprehensive security testing for Host Header Injection vulnerabilities in web applications. It simulates attacks to identify critical risks such as password reset poisoning, web cache poisoning, Server-Side Request Forgery (SSRF), and virtual host routing manipulation. It is essential for penetration testers assessing backend security behind proxies and load balancers.

Testing For JWT Vulnerabilities

testing-for-json-web-token-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

A comprehensive skill guide for assessing JSON Web Token (JWT) security flaws. This technique covers advanced attack vectors such as algorithm confusion (e.g., RS256 to HS256), 'none' algorithm bypass, key ID (kid) injection, and JKU/X5U parameter manipulation. It also includes methods for brute-forcing weak symmetric secrets and is essential for penetration testing OAuth2/OIDC and SSO systems.

Open Redirect Vulnerability Testing

testing-for-open-redirect-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

A comprehensive guide and set of payloads for identifying and exploiting Open Redirect vulnerabilities. It covers various parameters (next, redirect_uri), advanced bypass techniques (encoding, path traversal, protocol abuse), and chaining findings with OAuth or phishing attacks using tools like Burp Suite and OWASP ZAP.

Testing for Sensitive Data Exposure

testing-for-sensitive-data-exposure

mukul975/Anthropic-Cybersecurity-Skills

A comprehensive guide for performing security assessments to identify various forms of sensitive data exposure, such as leaked API keys, PII in API responses, insecure client-side storage, and unprotected data transmission. This workflow covers scanning JavaScript files, analyzing API responses, verifying data encryption, and examining browser storage.

Testing for XML Injection Vulnerabilities

testing-for-xml-injection-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

A comprehensive guide and set of payloads for penetration testing web applications that process XML input. It details how to test for major vulnerabilities such as XXE, XPath injection, SSRF, and XML parsing attacks, providing step-by-step workflows and advanced payloads for identifying data exposure and security flaws.

Comprehensive Guide for XSS Penetration Testing

testing-for-xss-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

A detailed methodology for identifying Cross-Site Scripting (XSS) vulnerabilities across web applications. It guides systematic testing for Reflected, Stored, and DOM-based XSS, covering payload bypass, output encoding evaluation, and assessing Content Security Policy (CSP) protection. Essential for OWASP WSTG testing and client-side security audits.

Testing XSS Vulnerabilities With Burp Suite

testing-for-xss-vulnerabilities-with-burpsuite

mukul975/Anthropic-Cybersecurity-Skills

A comprehensive guide detailing how to identify and validate Cross-Site Scripting (XSS) vulnerabilities using Burp Suite's advanced tools (Repeater, Intruder, DOM Invader). This methodology covers reflected, stored, and DOM-based XSS, and includes strategies for bypassing security filters and Content Security Policy (CSP), making it essential for web application penetration testing and bug bounty programs.

Testing for XXE Injection Vulnerabilities

testing-for-xxe-injection-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

This guide details methodologies for identifying and exploiting XML External Entity (XXE) injection vulnerabilities in web applications. It covers basic file retrieval, blind XXE detection using out-of-band techniques, and data exfiltration, all critical steps during authorized penetration testing of XML-consuming APIs and services.

Testing JWT Token Security Vulnerabilities

testing-jwt-token-security

mukul975/Anthropic-Cybersecurity-Skills

A comprehensive guide for assessing the security of JSON Web Token (JWT) implementations. This toolkit details attacks against cryptographic weaknesses, including algorithm confusion (e.g., RS256 to HS256), 'none' attacks, brute-forcing HMAC secrets, and claim manipulation. Ideal for penetration testing and security audits of modern APIs and SSO systems.

Prev 1 2 3...36 37 383940 41 42...106 107 108 Next

Language