Download

Skill UI

Browse and discover 18950+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Authorization , found 158 results

Default Newest Most Downloaded

HTTP Request Smuggling Analysis

hunt-http-smuggling

sickn33/agentic-awesome-skills

This skill covers identifying and exploiting HTTP request smuggling vulnerabilities (CL.TE, TE.CL, H2.CL, H2.TE). It includes fingerprinting front-end servers, crafting payloads for cache poisoning, and harvesting credentials via backend desyncs. Requires authorization and defensive guidance protocols.

Hunt Kubernetes Security Vulnerabilities

sickn33/agentic-awesome-skills

A security reconnaissance tool for identifying Kubernetes and Docker misconfigurations, including anonymous cluster-admin access, kubelet RCE, etcd exposure, and docker.sock vulnerabilities. Requires explicit authorization before use. Helps penetration testers find high-impact findings like API anonymous cluster-admin, kubelet 10250 exec/run, and container escape via runc.

MFA and 2FA Bypass Testing

hunt-mfa-bypass

sickn33/agentic-awesome-skills

Offensive security skill for hunting MFA and 2FA bypass flaws: workflow skipping, OTP replay, response tampering, prefix-oracle guessing, and race conditions on verification endpoints. Requires written authorization.

Next.js Vulnerability Hunter

sickn33/agentic-awesome-skills

This skill helps identify and exploit specific vulnerabilities in Next.js applications, such as Server Actions authentication bypasses, middleware bypasses, and SSRF via image optimization. It provides commands for fingerprinting, version detection, and testing attack vectors. Requires explicit written authorization for target scope.

Node.js Vulnerability Hunting

sickn33/agentic-awesome-skills

This skill helps identify and exploit specific vulnerabilities in Node.js applications. It covers techniques like prototype pollution, Express trust proxy abuse, and template engine SSTI. Users must have explicit authorization before testing. It includes fingerprinting, detection, and exploitation chains for critical security issues.

Race Condition Vulnerability Hunting

hunt-race-condition

sickn33/agentic-awesome-skills

A specialized security skill for identifying and exploiting race condition vulnerabilities in web applications. Focuses on synchronized request attacks, double-spending, and bypassing access controls. Requires explicit authorization and defensive guidance protocols before execution.

Remote Code Execution Hunting

sickn33/agentic-awesome-skills

A skill for identifying Remote Code Execution (RCE) vulnerabilities across web applications and infrastructure. Based on bug bounty reports, it guides users to test command injection, template injection, and configuration flaws on admin consoles, APIs, and supply chain targets. Requires explicit authorization for ethical testing.

Spring Boot Vulnerability Hunter

hunt-springboot

sickn33/agentic-awesome-skills

A security assessment tool designed to identify specific vulnerabilities in Spring Boot applications, such as exposed Actuator endpoints, H2 Console access, SpEL injection, and memory dumps containing secrets. Requires explicit written authorization for authorized security assessments.

SQL Injection Hunting Skill

sickn33/agentic-awesome-skills

Offensive security skill for hunting SQL injection flaws under written authorization. Covers injection confirmation, UNION column enumeration, reflected-column discovery, and data dumping, plus high-value targets like search, filter, and report endpoints.

WebSocket Vulnerability Hunting

sickn33/agentic-awesome-skills

A security assessment skill for identifying WebSocket vulnerabilities including Cross-Site WebSocket Hijacking (CSWSH), message tampering, handshake-layer attacks, and socket.io authorization bypasses. Requires explicit written authorization before testing. Includes reconnaissance, endpoint discovery, and exploit verification techniques for authorized security assessments.

iOS Security Red Team Pipeline

ios-redteam-pipeline

sickn33/agentic-awesome-skills

End-to-end iOS security assessment pipeline covering app inventory, IPA acquisition, static analysis, and secret extraction. Requires explicit authorization for offensive testing and bug bounty scopes.

Laravel Security Audit Tool

laravel-security-audit

sickn33/agentic-awesome-skills

A specialized security auditor for Laravel applications. It analyzes code, APIs, and configurations against OWASP standards to detect vulnerabilities such as XSS, IDOR, SQL injection, and misconfigurations. Ideal for reviewing backend logic to ensure robust data protection and authorization.

Prev 1 2 3...9 10 111213 14 Next

Language