Download

Skill UI

Browse and discover 6283+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Auth , found 570 results

Default Newest Most Downloaded

Broken Function Auth Tester

exploiting-broken-function-level-authorization

mukul975/Anthropic-Cybersecurity-Skills

Tests APIs for Broken Function Level Authorization by discovering admin or privileged endpoints, then verifying whether regular credentials can invoke them via method, path, or parameter manipulation, covering OWASP API5:2023 scenarios before reporting access control gaps.

Deep Link Exploit Testing

exploiting-deeplink-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Exercises deep link exploitation workflows on Android and iOS mobile apps to discover unauthorized access, injection, hijacking, and redirect flaws by inspecting URI schemes, App/Universal Links, intent filters, and WebView loads; intended for penetration testing of mobile attack surfaces.

Exploit API Data Exposure

exploiting-excessive-data-exposure-in-api

mukul975/Anthropic-Cybersecurity-Skills

Exercises authorized API endpoints to discover over-fetching that reveals PII, internal identifiers, or debug data hidden from the UI by comparing documented schemas with actual responses and scanning payloads for sensitive patterns.

HTTP Request Smuggling

exploiting-http-request-smuggling

mukul975/Anthropic-Cybersecurity-Skills

Guide to detecting and exploiting HTTP request smuggling during authorized penetration tests by targeting Content-Length vs. Transfer-Encoding parsing mismatches between front-end proxies and back-end servers to bypass restrictions or capture downstream requests.

IDOR Exploitation Techniques

exploiting-idor-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Guide for identifying and exploiting Insecure Direct Object References during authorized tests, covering mapping API endpoints, configuring Burp’s Authorize extension, and validating horizontal and vertical attacks across resources, headers, and bodies.

Insecure Deserialization Exploit

exploiting-insecure-deserialization

mukul975/Anthropic-Cybersecurity-Skills

Guide for authorized penetration tests on Java, PHP, Python, and .NET apps to detect serialized user input, craft ysoserial/PHPGGC/ysoserial.net payloads, and verify remote code execution via Burp Collaborator and othertools.

IPv6 Vulnerability Assessment

exploiting-ipv6-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Assesses IPv6-specific threats by enumerating dual-stack hosts, spoofing router advertisements, launching MITM via SLAAC/DHCPv6, and uncovering IPv6 tunneling or neighbor discovery weaknesses to validate IPv6-aware controls during authorized tests.

Mass Assignment API Testing

exploiting-mass-assignment-in-rest-apis

mukul975/Anthropic-Cybersecurity-Skills

Guide for discovering and exploiting mass-assignment vulnerabilities in REST APIs to escalate privileges, manipulate restricted fields, and bypass authorization by injecting unexpected parameters during API security assessments.

EternalBlue Exploitation Workflow

exploiting-ms17-010-eternalblue-vulnerability

mukul975/Anthropic-Cybersecurity-Skills

Documenting how red teams and pentesters identify and exploit the MS17-010 EternalBlue SMBv1 flaw, covering scanning, payload configuration, execution, and post-exploitation tasks along with detection/validation steps for authorized environments.

NoPac AD Privilege Escalation

exploiting-nopac-cve-2021-42278-42287

mukul975/Anthropic-Cybersecurity-Skills

Implements the noPac CVE-2021-42278/42287 exploit chain to escalate from standard domain user to Domain Admin, covering scanning, account spoofing, ticket forging, and DCSync steps for red-team or authorized testing.

NoSQL Injection Exploits

exploiting-nosql-injection-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Guides security professionals through identifying and exploiting NoSQL injection flaws in MongoDB, CouchDB and similar databases, covering authentication bypasses, blind data extraction, JavaScript injections, and tool-assisted testing during penetration tests or bug bounty work.

OAuth Misconfiguration Exploits

exploiting-oauth-misconfiguration

mukul975/Anthropic-Cybersecurity-Skills

Structured guidance for penetration testers to map OAuth/OpenID flows, manipulate redirect URIs, capture leaked codes or tokens, and probe scope escalation during assessments of OAuth providers or consumers.

Prev 1 2 3...34 35 363738 39 40...46 47 48 Next

Language