Download

Skill UI

Browse and discover 19382+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search AI-Security , found 1015 results

Default Newest Most Downloaded

Expert Guide to OS Command Injection

cmdi-command-injection

yaklang/hack-skills

A comprehensive playbook detailing expert techniques for OS command injection vulnerabilities. It covers all shell metacharacters, blind injection, time-based detection, out-of-band exfiltration methods, and common vulnerable code patterns across PHP, Python, and Node.js. Essential for security analysts and penetration testers.

Advanced Container Escape Playbook

container-escape-techniques

yaklang/hack-skills

A comprehensive guide covering expert techniques for breaking out of container isolation. This playbook details methods for exploiting privileged modes, abusing cgroups, manipulating namespaces, and leveraging vulnerabilities in Docker or Kubernetes environments. Essential for advanced security research and penetration testing.

CRLF Injection: Advanced Attack Playbook

yaklang/hack-skills

A detailed playbook covering CRLF (Carriage Return Line Feed) injection techniques. This exploit targets insecure handling of user input within HTTP response headers (e.g., Location, Set-Cookie) or log files. It demonstrates advanced attacks like response splitting, XSS escalation via double CRLF, cache poisoning, and session fixation, essential for deep security testing.

Advanced Content Security Policy Bypass Techniques

csp-bypass-advanced

yaklang/hack-skills

This comprehensive guide details advanced techniques for circumventing Content Security Policies (CSP). It covers exploiting weaknesses in critical directives (e.g., base-uri, object-src), abusing nonces, leveraging trusted CDN endpoints, and executing code despite strict controls like script-src 'self' or 'strict-dynamic'. Essential knowledge for deep security auditing and penetration testing.

DeFi Attack Patterns Expert Playbook

defi-attack-patterns

yaklang/hack-skills

A comprehensive playbook detailing advanced exploitation techniques in decentralized finance (DeFi). Covers flash loan mechanics, price oracle manipulation (spot vs. TWAP), MEV extraction strategies (Sandwich, JIT), governance exploits, and core smart contract vulnerabilities. Essential for security auditors and risk analysts.

Advanced Email Header Injection And Spoofing

email-header-injection

yaklang/hack-skills

This expert playbook covers advanced techniques for email header injection and authentication bypass. It details exploiting CRLF vulnerabilities in SMTP headers (e.g., BCC/CC injection, body control) and bypassing modern email security standards like SPF, DKIM, and DMARC. Essential for penetration testing of contact forms, email APIs, and password reset workflows.

File Access and Upload Vulnerability Router

file-access-vuln

yaklang/hack-skills

This router entry point is designed for comprehensive testing of file access, download endpoints, and file upload workflows. Use this guide when validating file paths, detecting Local File Inclusion (LFI), or analyzing vulnerabilities in preview, storage, or extraction processes. It helps categorize whether the security issue relates to path traversal or insecure data processing chains.

GraphQL And Undocumented Parameter Testing

graphql-and-hidden-parameters

yaklang/hack-skills

A comprehensive playbook for advanced API security testing targeting GraphQL and REST APIs. It guides users through schema introspection, discovering hidden or undocumented fields, analyzing batching capabilities, and identifying authorization gaps (like IDORs). Essential for deep reconnaissance and identifying privilege escalation vectors.

Authorized Security Testing Protocol

yaklang/hack-skills

This skill serves as the primary entry point and operating doctrine for authorized security tasks including web testing, API assessment, and penetration testing. It enforces strict authorization, scope management, and safety constraints while routing complex tasks to specialized deep skills like code audit or incident response.

Host Header Injection and Routing Abuse

http-host-header-attacks

yaklang/hack-skills

A comprehensive playbook detailing how web applications can be vulnerable to attacks by manipulating the HTTP Host header. Covers critical techniques such as password reset poisoning, Web Cache Poisoning, Server-Side Request Forgery (SSRF), and Virtual Host bypass. Essential reading for penetration testers and security researchers.

HTTP Parameter Pollution Vulnerabilities

http-parameter-pollution

yaklang/hack-skills

HTTP Parameter Pollution (HPP) occurs when a single request contains multiple instances of the same parameter key. Different components in the request path (e.g., WAFs, proxies, application frameworks) may parse these duplicate keys using different rules (first value, last value, array join). This skill teaches how to exploit these discrepancies to bypass security checks, execute SSRF, or manipulate business logic.

Advanced HTTP/2 Attack Playbook

http2-specific-attacks

yaklang/hack-skills

This expert playbook details advanced attack vectors specific to the HTTP/2 protocol. It covers sophisticated techniques such as h2c smuggling, exploiting pseudo-header discrepancies, HPACK compression vulnerabilities, and abusing stream multiplexing. Use this skill for professional penetration testing and security auditing of H2 services, especially for bypassing proxy-level controls and WAFs.

Prev 1 2 3...53 54 555657 58 59...83 84 85 Next

Language