Skill UI

A comprehensive guide covering expert techniques for breaking out of container isolation. This playbook details methods for exploiting privileged modes, abusing cgroups, manipulating namespaces, and leveraging vulnerabilities in Docker or Kubernetes environments. Essential for advanced security research and penetration testing.

A detailed playbook covering CRLF (Carriage Return Line Feed) injection techniques. This exploit targets insecure handling of user input within HTTP response headers (e.g., Location, Set-Cookie) or log files. It demonstrates advanced attacks like response splitting, XSS escalation via double CRLF, cache poisoning, and session fixation, essential for deep security testing.

This expert playbook provides comprehensive techniques for testing Cross-Site Request Forgery (CSRF) vulnerabilities in web applications. It covers identifying state-changing endpoints, bypassing anti-CSRF tokens (including missing validation and predictable tokens), and exploiting modern weaknesses like SameSite=Lax via GET methods or misconfigured JSON APIs. Essential reading for security professionals and penetration testers.

A comprehensive playbook detailing advanced exploitation techniques in decentralized finance (DeFi). Covers flash loan mechanics, price oracle manipulation (spot vs. TWAP), MEV extraction strategies (Sandwich, JIT), governance exploits, and core smart contract vulnerabilities. Essential for security auditors and risk analysts.

An expert playbook for identifying and simulating dependency confusion attacks in software supply chains. It comprehensively covers how internal package names can be squatted on public registries, leading to malicious code execution via package manager lifecycle hooks (e.g., npm, pip, Maven). Use this guide for authorized red-team exercises and deep vulnerability assessment of build processes.

A comprehensive playbook detailing advanced techniques for exploiting insecure deserialization flaws across Java, PHP, and Python. It covers traffic fingerprinting, identifying specific gadget chains (e.g., Commons Collections, Shiro), and utilizing tools like ysoserial to achieve Remote Code Execution (RCE) and privilege escalation.

This expert playbook covers advanced techniques for email header injection and authentication bypass. It details exploiting CRLF vulnerabilities in SMTP headers (e.g., BCC/CC injection, body control) and bypassing modern email security standards like SPF, DKIM, and DMARC. Essential for penetration testing of contact forms, email APIs, and password reset workflows.

An expert guide covering advanced exploitation techniques for Expression Language (EL) injection across multiple Java frameworks, including Spring (SpEL), Struts2 (OGNL), and JSP/JSF (Java EL). Details detection methods, sandbox bypasses, and real-world CVE chains for Remote Code Execution (RCE).

This advanced playbook details expert techniques for format string exploitation. It covers arbitrary stack reading (%p), memory writing (%n), and exploiting weaknesses like GOT/hook overwrites. Essential for CTF challenges and binary vulnerability analysis to achieve reliable Remote Code Execution (RCE).

A comprehensive playbook for advanced API security testing targeting GraphQL and REST APIs. It guides users through schema introspection, discovering hidden or undocumented fields, analyzing batching capabilities, and identifying authorization gaps (like IDORs). Essential for deep reconnaissance and identifying privilege escalation vectors.

A comprehensive playbook covering advanced cryptographic hash attack techniques. Learn how to exploit inherent weaknesses such as length extension attacks (MD5, SHA-256), generating identical-prefix or chosen-prefix collisions, and analyzing side-channel timing leaks. Essential for CTF challenges and authorized penetration testing scenarios.

A comprehensive playbook detailing advanced techniques for exploiting glibc heap vulnerabilities using ptmalloc2. Covers various memory corruption primitives, including Use-After-Free, double free, and overflows. Provides version-specific guidance on bypassing modern protections like safe-linking (glibc >= 2.32) and RCE methods for post-2.34 environments.