Download

Skill UI

Browse and discover 9978+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Bypass , found 146 results

Default Newest Most Downloaded

Server-Side Request Forgery Expert Playbook

ssrf-server-side-request-forgery

yaklang/hack-skills

This comprehensive playbook details expert techniques for exploiting Server-Side Request Forgery (SSRF). It covers bypassing URL filters, accessing cloud metadata endpoints (AWS, GCP, Azure), utilizing advanced protocols like Gopher, and chaining vulnerabilities to achieve Remote Code Execution (RCE) in real-world scenarios. Ideal for penetration testers and security researchers.

Advanced SSTI Exploitation Techniques

ssti-server-side-template-injection

yaklang/hack-skills

This expert playbook provides comprehensive techniques for exploiting Server-Side Template Injection (SSTI). It covers polyglot detection probes, engine fingerprinting (Jinja2, Twig, FreeMarker, etc.), sandbox escape mechanisms (MRO chains), and advanced bypass techniques. Essential reading for security researchers and penetration testers assessing application vulnerabilities.

Advanced Stack Overflow And ROP Playbook

stack-overflow-and-rop

yaklang/hack-skills

This expert playbook details advanced techniques for exploiting stack-based vulnerabilities, including classic buffer overflows, Return-Oriented Programming (ROP), ret2libc, and specialized gadgets like ret2csu and SROP. It provides comprehensive guidance on bypassing modern memory mitigations (NX, ASLR, PIE) to hijack program control flow and achieve reliable remote code execution in userland binaries.

Subdomain Takeover Detection And Exploitation

subdomain-takeover

yaklang/hack-skills

This playbook details the methodology for detecting and exploiting subdomain takeover vulnerabilities. It focuses on identifying CNAME/NS/MX records pointing to deprovisioned or unclaimed cloud resources (e.g., AWS S3 buckets, Heroku apps). Understanding these weaknesses allows attackers to serve malicious content under the victim's trusted domain, leading to phishing, credential theft, and security bypasses.

Network Tunneling and Pivoting Playbook

tunneling-and-pivoting

yaklang/hack-skills

This expert playbook details advanced techniques for establishing secure network tunnels and pivoting through compromised hosts. It covers various methods like SSH (Local, Remote, Dynamic, Jump), Chisel, Ligolo-ng, socat, and ProxyChains. Use this guide to bypass network restrictions, establish persistent access, and perform multi-layered lateral movement within restricted environments.

PHP Type Juggling and Weak Comparison Bypass

yaklang/hack-skills

A comprehensive guide to exploiting PHP's loose type checking (using '==') and type juggling mechanics. This skill is crucial for bypassing security controls like authentication checks, HMAC/signature validations, and token comparisons that fail to use strictly typed comparisons (===) or timing-safe functions (hash_equals). Includes techniques for magic hash collisions and PHP version delta analysis.

Insecure File Upload Vulnerability Testing

upload-insecure-files

yaklang/hack-skills

A comprehensive, expert playbook for challenging insecure file upload mechanisms. It provides advanced attack vectors covering validation bypass (magic bytes, extension), storage path abuse (traversal, overwrite), and exploitation of post-upload processing chains (XXE, RCE, CMDi). Essential for deep security auditing of file-handling workflows.

Waf Bypass Techniques and Evasion Playbook

waf-bypass-techniques

yaklang/hack-skills

A comprehensive playbook detailing advanced methods to bypass Web Application Firewalls (WAFs) when standard injection payloads (SQLi, XSS, RCE) are blocked. Techniques include encoding (URL, Unicode, Hex), protocol abuse (HTTP/2, chunking), parameter pollution, and path normalization tricks, allowing security professionals to test robust application defenses.

Advanced Windows EDR Evasion Playbook

windows-av-evasion

yaklang/hack-skills

A comprehensive playbook detailing advanced techniques for bypassing modern Endpoint Detection and Response (EDR) and Antivirus (AV) solutions on Windows. Covers exploiting vulnerabilities in AMSI, ETW, and implementing sophisticated process injection methods (e.g., Process Hollowing, Early Bird) to execute payloads while maintaining stealth.

Advanced Cross-Site Scripting Attack Playbook

xss-cross-site-scripting

yaklang/hack-skills

An expert-level playbook covering non-obvious XSS techniques, advanced payload selection across various sinks (DOM, SVG, HTML attributes, JavaScript), and sophisticated defense bypass strategies. Use this guide for real-world penetration testing, including WAF bypass, CSP bypass, HttpOnly bypass, and XS-Leaks side channel exploitation. It assumes deep knowledge of web vulnerability mechanics.

YouTube Content Analysis Via API

sickn33/antigravity-awesome-skills

A robust API-backed skill for fetching YouTube transcripts, searching video content, browsing channels, and extracting playlists. It functions reliably from any cloud server environment, bypassing limitations found in local tools like yt-dlp or reliance on Google API keys. Ideal for building research corpora, competitive intelligence monitoring, and systematic content analysis.

Automating Datadog Log Querying and Analysis

ComposioHQ/awesome-codex-skills

This tool empowers users to query, filter, and aggregate logs from Datadog directly from the command line using the Composio CLI. It bypasses the graphical UI, providing structured JSON output for complex analysis, cross-service correlation, and automated reporting. Ideal for deep dive investigations, tracking latency regressions, or building scheduled operational digests.

Prev 1 2 3...9 10 111213 Next

Language