Download

Skill UI

Browse and discover 19333+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Authentication , found 720 results

Default Newest Most Downloaded

Hugging Face API Tool Builder

huggingface-tool-builder

sickn33/agentic-awesome-skills

This skill enables users to build reusable command-line scripts and utilities for interacting with the Hugging Face API. It supports chaining API calls, automating repetitive tasks, and processing model or dataset data efficiently. Scripts utilize HF_TOKEN for authentication and can leverage the hf CLI for advanced repository interactions.

Auth Bypass Hunting

hunt-auth-bypass

sickn33/agentic-awesome-skills

A skill for identifying and exploiting authentication bypass vulnerabilities in web applications, including SSO/SAML, OAuth, XMLRPC, and API auth layers. Provides a step-by-step methodology, attack surface signals, and crown jewel targets. For authorized security assessments only.

Rate Limiting Brute Force Hunt

hunt-brute-force

sickn33/agentic-awesome-skills

Security skill for detecting missing or weak rate limiting on authentication endpoints. Identifies brute force vulnerabilities in OTP, password reset, and login systems. Requires explicit authorization for authorized security assessments only. Includes shadow-throttle detection and enumeration techniques.

Hunt Forgot Password Vulnerabilities

hunt-forgot-password

sickn33/agentic-awesome-skills

This skill identifies authentication flaws in password reset flows, including username enumeration, exposed reset tokens, token replay, and missing rate limits. It helps security professionals assess account recovery security risks and prevent unauthorized access.

gRPC Vulnerability Hunter

sickn33/agentic-awesome-skills

This skill helps identify gRPC security vulnerabilities during penetration testing. It includes fingerprinting gRPC servers, enumerating services via reflection, testing authentication bypasses, and checking for DoS risks like HTTP/2 Rapid Reset. Requires explicit authorization for offensive use.

Hunt JWT Crypto Failures

hunt-jwt-crypto

sickn33/agentic-awesome-skills

This skill identifies and exploits JWT cryptographic weaknesses such as alg:none and key confusion attacks. It helps security professionals find critical vulnerabilities in authentication systems by forging tokens to bypass security checks and gain unauthorized access.

LDAP and XPath Injection Hunter

sickn33/agentic-awesome-skills

Hunt LDAP injection and XPath injection vulnerabilities in web applications. Covers authentication bypass, blind attribute exfiltration, and Active Directory vs generic LDAP differences. Includes attack surface signals, filter grammar, and authorized-use guidance.

Next.js Vulnerability Hunter

sickn33/agentic-awesome-skills

This skill helps identify and exploit specific vulnerabilities in Next.js applications, such as Server Actions authentication bypasses, middleware bypasses, and SSRF via image optimization. It provides commands for fingerprinting, version detection, and testing attack vectors. Requires explicit written authorization for target scope.

NTLM Info Disclosure Hunter

sickn33/agentic-awesome-skills

Hunt NTLM/Negotiate information disclosure on internet-reachable IIS, SharePoint, Exchange, and other Windows-based services. This skill guides authorized security assessments to detect exposed NTLM authentication headers, parse Type-2 challenges, and extract internal domain, computer names, and other juicy details for reconnaissance.

Hunting SharePoint On-Prem Farms

hunt-sharepoint

sickn33/agentic-awesome-skills

Assess on-premises Microsoft SharePoint Server farms (2013/2016/2019/Subscription Edition) during authorized red-team or bug-bounty work: fingerprint versions via response headers, map exposed endpoints such as ToolPane.aspx and Authentication.asmx, and prioritize permanently unpatched legacy CVEs.

Discover SPA Hidden API Routes

sickn33/agentic-awesome-skills

Extract backend API routes from SPA JavaScript bundles to identify missing authentication or broken access control vulnerabilities. Test endpoints without credentials to find unauthenticated data exposure and security gaps in web applications.

Identity Access Management Setup

identity-access-management

sickn33/agentic-awesome-skills

Configure Single Sign-On, SCIM provisioning, and Multi-Factor Authentication for startup teams using Google Workspace, Okta, or Azure AD. Includes practical scripts for user management, organizational units, and security enforcement.

Prev 1 2 3...54 55 565758 59 60 Next

Language