Download

Skill UI

Browse and discover 10318+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Book Cover , found 163 results

Default Newest Most Downloaded

Advanced Android Security Testing Playbook

android-pentesting-tricks

yaklang/hack-skills

A comprehensive playbook for expert-level Android application security testing. It covers advanced exploitation techniques, including SSL pinning bypass (using Frida/Objection), detecting component exposure (activities, providers, services), and exploiting WebView vulnerabilities (RCE, XSS). Essential for authorized mobile penetration testing assessments.

Anti-Debugging Detection And Bypass Playbook

anti-debugging-techniques

yaklang/hack-skills

A comprehensive playbook for defeating anti-debugging mechanisms in protected binaries. Covers advanced techniques across both Linux (ptrace, /proc/self/status, timing checks) and Windows (PEB flags, NtQueryInformationProcess). Provides detailed detection methods and corresponding bypass strategies (e.g., patching, hooking, kernel modules) essential for advanced binary reverse engineering.

API Authentication And JWT Abuse Testing

api-auth-and-jwt-abuse

yaklang/hack-skills

A comprehensive playbook for security testing APIs relying on JWT, bearer tokens, or API keys. It covers token validation weaknesses (e.g., 'alg:none', RS256 confusion), claim misuse, header spoofing, rate limit bypass, and mass assignment vulnerabilities. Ideal for penetration testers assessing authentication boundaries.

API Reconnaissance and Documentation Review

api-recon-and-docs

yaklang/hack-skills

A comprehensive playbook for API reconnaissance and documentation review. Use this skill early in the testing process to enumerate all reachable endpoints, extract schemas, identify hidden versions (e.g., v1, v2, mobile), and discover undocumented parameters or fields across REST, GraphQL, and mobile APIs. Essential for mapping the full attack surface before deeper exploitation.

Arbitrary Write To Code Execution Playbook

arbitrary-write-to-rce

yaklang/hack-skills

This expert playbook details advanced techniques for converting an arbitrary memory write primitive into full Remote Code Execution (RCE). It covers targeting multiple system structures across different glibc versions, including GOT entries, __malloc_hook, __free_hook, _IO_FILE vtables, and function arrays. Essential for exploiting modern, hardened binaries and mastering advanced binary exploitation.

Authentication Bypass Security Testing Playbook

authbypass-authentication-flaws

yaklang/hack-skills

A comprehensive playbook for identifying authentication vulnerabilities in web applications. Covers advanced topics including SQL injection login bypass, predictable password reset tokens, account enumeration techniques, multi-factor authentication bypass, and brute-force resistance checks. Essential for penetration testers assessing login mechanisms and session management.

V8 and Browser Exploitation Playbook

browser-exploitation-v8

yaklang/hack-skills

A comprehensive playbook covering advanced V8 and Chromium exploitation techniques. It details complex vulnerabilities such as JIT type confusion, incorrect bounds elimination, and pointer compression bypass. This guide is essential for understanding the mechanisms required to achieve renderer RCE and sandbox escape in modern browsers.

Business Logic Vulnerability Expert Playbook

business-logic-vulnerabilities

yaklang/hack-skills

This playbook is designed for advanced vulnerability assessment, covering flaws invisible to automated scanners. It guides testing for race conditions, complex workflow bypasses, state machine manipulation, financial parameter tampering (e.g., price/quantity manipulation), and coupon/credit abuse in multi-step applications. Essential for deep manual security testing.

Expert Classical Cipher Analysis Guide

classical-cipher-analysis

yaklang/hack-skills

This comprehensive playbook provides expert techniques for classical cipher identification and breaking. It covers fundamental methods like frequency analysis, Kasiski examination, and Index of Coincidence (IC), enabling the decryption of monoalphabetic, polyalphabetic, and transposition ciphers (Vigenere, Caesar, Playfair, etc.). It also guides the decoding of various formats (Base64, Hex, Morse).

Clickjacking Attack Playbook

yaklang/hack-skills

A comprehensive playbook for identifying and exploiting clickjacking vulnerabilities (UI redress). Learn how to test if target pages can be framed, bypass security headers like X-Frame-Options and CSP frame-ancestors, and execute high-impact actions through invisible iframes. This guide covers single-click, multi-step, and drag-and-drop attack vectors, applicable to sensitive endpoints like account deletion or admin panels.

Expert Guide to OS Command Injection

cmdi-command-injection

yaklang/hack-skills

A comprehensive playbook detailing expert techniques for OS command injection vulnerabilities. It covers all shell metacharacters, blind injection, time-based detection, out-of-band exfiltration methods, and common vulnerable code patterns across PHP, Python, and Node.js. Essential for security analysts and penetration testers.

Code Obfuscation Deobfuscation Playbook

code-obfuscation-deobfuscation

yaklang/hack-skills

An expert playbook detailing techniques for identifying, classifying, and defeating advanced code obfuscation in native binaries. Covers junk code, opaque predicates, self-modifying code (SMC), control flow flattening (CFF), VM protectors, and string encryption by utilizing symbolic execution, dynamic emulation, and advanced data flow analysis.

Prev 1 2 3...5 6 789 10 11 12 13 14 Next

Language