Skill UI

A skill for identifying Remote Code Execution (RCE) vulnerabilities across web applications and infrastructure. Based on bug bounty reports, it guides users to test command injection, template injection, and configuration flaws on admin consoles, APIs, and supply chain targets. Requires explicit authorization for ethical testing.

Assess on-premises Microsoft SharePoint Server farms (2013/2016/2019/Subscription Edition) during authorized red-team or bug-bounty work: fingerprint versions via response headers, map exposed endpoints such as ToolPane.aspx and Authentication.asmx, and prioritize permanently unpatched legacy CVEs.

Implement proven methodologies and tool workflows from top security researchers for effective reconnaissance, vulnerability discovery, and bug bounty hunting. Automate common tasks while maintaining thorough coverage of attack surfaces.

Squirrel is an advanced, full-cycle AI coding skill designed to guide software development from concept to production. It automatically detects the current project state (greenfield, in-progress, or mature) and adapts an 8-phase engineering pipeline. This comprehensive workflow covers planning, building, rigorous testing, bug hunting, code polishing, documentation, and deployment readiness, ensuring high-quality, maintainable results.

This skill provides a structured five-phase workflow for bug bounty and SRC vulnerability hunting. It guides users through intake, reconnaissance, enumeration, active hunting, and reporting. Includes attack playbooks for SQLi, XSS, RCE, SSRF, IDOR, CSRF, and file upload vulnerabilities. Features WAF bypass techniques, industry-specific guides, and evidence discipline for compliance.