Download

Skill UI

Browse and discover 6928+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Auth , found 600 results

Default Newest Most Downloaded

CORS Misconfiguration Testing

testing-cors-misconfiguration

mukul975/Anthropic-Cybersecurity-Skills

Guides security testers through identifying and exploiting CORS misconfigurations on API endpoints and SPAs so unauthorized cross-domain data access and credential theft can be detected and proven during penetration testing.

Testing Broken Access Control

testing-for-broken-access-control

mukul975/Anthropic-Cybersecurity-Skills

Guides testers through systematic discovery and validation of broken access controls in web applications, covering endpoint mapping, role-based automation, and privilege-escalation scenarios with tools like Burp Authorize, ffuf, and curl.

JWT Vulnerability Testing

testing-for-json-web-token-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Simulate JWT attacks to expose algorithm confusion, none algorithm bypass, kid injection, and weak secret flaws so API and SSO integrations can harden authentication controls before deployment.

XSS Testing With Burp Suite

testing-for-xss-vulnerabilities-with-burpsuite

mukul975/Anthropic-Cybersecurity-Skills

Guides security testers through using Burp Suite’s scanner, Intruder, Repeater, and DOM Invader to identify, validate, and bypass reflected, stored, and DOM-based XSS vulnerabilities during authorized web assessments and bug bounty programs.

XXE Injection Testing

testing-for-xxe-injection-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Guides authorized penetration testers through identifying XML processing points and exploiting XXE injection to read files, trigger SSRF, or exfiltrate data via blind/out‑of‑band techniques using Burp Suite, interactsh, and custom payloads.

JWT Security Testing

testing-jwt-token-security

mukul975/Anthropic-Cybersecurity-Skills

Assesses JWT implementations during authorized penetration tests by decoding tokens, probing none/algorithm-confusion attacks, brute-forcing HMAC secrets, and manipulating claims to uncover authentication bypass or privilege escalation risks.

Mobile API Auth Testing

testing-mobile-api-authentication

mukul975/Anthropic-Cybersecurity-Skills

Guides security testers through enumerating mobile API auth endpoints, analyzing JWT/opaque tokens, checking bypasses, IDOR, session management, and OAuth flows so penetration tests surface authentication weaknesses.

OAuth2 Security Testing

testing-oauth2-implementation-flaws

mukul975/Anthropic-Cybersecurity-Skills

Evaluates OAuth 2.0 and OpenID Connect flows for authorization-code interception, redirect URI manipulation, CSRF, token leakage, scope escalation, and PKCE bypass so testers can validate client and server safeguards before deployment.

WebSocket Security Tester

testing-websocket-api-security

mukul975/Anthropic-Cybersecurity-Skills

Automates manual-style WebSocket security checks by intercepting handshakes, manipulating authentication headers, and sending malicious frames to verify CSWSH, injection, DoS, and leakage protections in real-time APIs.

SCADA HMI Security Assessment

performing-scada-hmi-security-assessment

mukul975/Anthropic-Cybersecurity-Skills

Performs structured security assessments of SCADA HMI deployments by validating authentication, web interfaces, and PLC communication protections against IEC 62443 and NIST SP 800-82 requirements to guide OT risk reduction.

Secrets Vault Manager

secrets-vault-manager

alirezarezvani/claude-skills

Handles production-grade secret infrastructure by configuring Vault clusters or cloud secret stores, designing auth methods, implementing automated rotation, and auditing access for DevOps and security teams.

Security Penetration Testing

security-pen-testing

alirezarezvani/claude-skills

Guides offensive security testing for web applications, APIs, infrastructure, dependencies, and secrets, including OWASP Top 10 audits, static/dependency scanning, API/infra checks, and report workflows that support authorized penetration tests.

Prev 1 2 3...43 44 454647 48 49 50 Next

Language