Skill UI

This skill provides a comprehensive playbook for testing the security of SAML-based Single Sign-On (SSO) solutions. It focuses on validating assertion trust by checking signature coverage, audience and recipient restrictions, handling of Assertion Consumer Service (ACS), and identifying potential XML parsing weaknesses or IdP/SP confusion flaws. Use this when evaluating enterprise authentication systems for critical security vulnerabilities.

This playbook provides expert-level techniques for cryptanalysis of symmetric encryption. It details how to exploit weaknesses in various modes and algorithms, including CBC padding oracle attacks, ECB mode exploitation, bit flipping attacks, stream cipher key reuse, and meet-in-the-middle attacks. Essential for authorized penetration testing and CTF challenges.

A comprehensive guide to exploiting PHP's loose type checking (using '==') and type juggling mechanics. This skill is crucial for bypassing security controls like authentication checks, HMAC/signature validations, and token comparisons that fail to use strictly typed comparisons (===) or timing-safe functions (hash_equals). Includes techniques for magic hash collisions and PHP version delta analysis.

This playbook provides expert-level techniques for exploiting common infrastructure services that are exposed without proper authentication. Coverage includes Redis RCE, Rsync data theft, PHP-FPM code execution, AJP file reads, and MongoDB/Hadoop vulnerabilities. Essential for deep penetration testing and security auditing.

A comprehensive playbook detailing expert-level techniques for exploiting web cache vulnerabilities. Covers both Web Cache Deception (stealing authenticated user data) and Web Cache Poisoning (injecting malicious content). Techniques include path confusion, unkeyed header manipulation (X-Forwarded-Host), and exploiting CDN/reverse proxy caching logic. Essential reading for penetration testers and security researchers.

This guide outlines architectural patterns and best practices for building scalable, production-ready APIs with FastAPI. It covers proper project structure, separating concerns using routers, services, and CRUD layers, implementing dependency injection for database sessions and authentication, defining Pydantic schemas for request/response, handling asynchronous operations, and managing custom error responses.

Analyze backlink profiles including referring domains, anchor text distribution, toxic link signals, and competitor gaps. Useful for backlink audits, link building, disavow decisions, and diagnosing SEO authority issues.

This comprehensive guide outlines expert strategies for creating high-authority competitor comparison and alternative pages. It details four proven formats—including 'Alternative to X,' 'You vs Competitor,' and 'Competitor A vs Competitor B'—to capture high-intent search traffic. By emphasizing honesty, deep research, and modular content architecture, these pages boost SEO ranking, build user trust, and drive qualified leads for sales enablement.

This comprehensive guide teaches how to plan, build, and deploy highly effective free tools (such as calculators, generators, or analyzers) to solve real user problems. It bridges the gap between engineering development and marketing strategy, providing actionable frameworks for lead generation, organic SEO growth, and building brand authority for founders and technical marketers.

A comprehensive guide detailing best practices for securing Quarkus applications. It covers robust authentication methods like JWT and OIDC, role-based access control (RBAC) for authorization, mandatory input validation using Bean Validation, preventing SQL injection, and secure secret management. Essential for developers building highly secure Java microservices.

This expert simulates an experienced design system author for Ant Design, specializing in structured, enterprise-focused, data-dense web applications. It generates comprehensive, implementation-ready guidelines covering design tokens, component anatomy, interaction states, accessibility requirements (WCAG 2.2 AA), and content standards, ensuring maximal clarity and consistency for development and design teams.

An expert guide for creating comprehensive, implementation-ready design systems based on an expressive, high-contrast artistic style. It covers design tokens, component anatomy, advanced accessibility standards (WCAG 2.2 AA), and structured content guidelines for engineers and designers.