Skill UI

A comprehensive security script designed to test REST API authentication mechanisms for common vulnerabilities. It assesses broken token validation, missing authentication on critical endpoints, weak password policies, and session management flaws. The tool specifically evaluates JWT implementation, API key handling, and adherence to OWASP API Security Top 10, helping identify authentication bypasses before production deployment.

This skill provides a comprehensive guide and methodology for identifying and exploiting Cross-Origin Resource Sharing (CORS) misconfigurations in web applications. It covers testing origin validation bypasses, analyzing preflight requests, and simulating data exfiltration during authorized penetration tests, crucial for assessing API security.

A comprehensive guide for advanced penetration testing designed to identify flaws in application business rules that automated scanners miss. Focus areas include price manipulation, workflow bypass, privilege escalation, and race conditions. Essential for securing e-commerce platforms, financial systems, and multi-step critical processes.

This guide details a comprehensive methodology for testing JSON Web Token (JWT) implementations against critical security vulnerabilities. It covers attacks such as algorithm confusion (e.g., RS256 to HS256), 'None' algorithm bypass, Key ID (kid) injection, JKU/X5U manipulation, and brute-forcing weak secrets. Essential for API and SSO security assessments.

This skill provides a comprehensive methodology for identifying and exploiting open redirect vulnerabilities in web applications. It covers advanced bypass techniques (e.g., URL encoding, protocol-relative URLs, path traversal) and demonstrates chaining with other flaws like OAuth redirection for advanced phishing simulations and token theft. Designed for authorized security professionals conducting penetration tests.

This comprehensive skill guides the testing of web applications for Cross-Site Scripting (XSS) vulnerabilities. It covers reflected, stored, and DOM-based injection points. Testers learn to map input/output contexts, craft context-appropriate payloads, and bypass complex sanitization and CSP protections, ensuring thorough client-side security assessment.

A comprehensive guide detailing how to identify and validate Cross-Site Scripting (XSS) vulnerabilities using Burp Suite's advanced tools (Repeater, Intruder, DOM Invader). This methodology covers reflected, stored, and DOM-based XSS, and includes strategies for bypassing security filters and Content Security Policy (CSP), making it essential for web application penetration testing and bug bounty programs.

A comprehensive guide and framework for assessing real-time WebSocket APIs (ws:// or wss://). This skill covers critical security checks, including Cross-Site WebSocket Hijacking (CSWSH), authentication bypass, message injection attacks, input validation flaws, and denial-of-service (DoS) via message flooding. It utilizes tools like Burp Suite and Python for simulating malicious payloads and ensuring secure real-time communication channels.

This comprehensive skill provides a systematic framework for performing deep security assessments on iOS applications. It covers static analysis of IPA packages, dynamic instrumentation using Frida and Objection, SSL pinning bypass for traffic interception, extraction and auditing of sensitive data from the Keychain, and runtime method hooking. Use this for authorized penetration testing against standards like OWASP MASTG.

A comprehensive guide detailing how to configure and manage GitHub's secret scanning feature. This skill covers enabling Secret Protection, setting up push protection to block leaked credentials before they reach the repository, defining custom regex patterns, and providing workflows for triaging alerts and resolving blocked pushes (including using git rebase or bypassing protections). Essential for maintaining secure code repositories and complying with security standards.

This skill helps test the robustness of an AI agent's authorization mechanisms. Use it when the agent handles user roles, permissions, or sensitive data (e.g., admin functions, cross-tenant data). It simulates attempts to bypass authentication, escalate privileges, or access data belonging to other users or tenants.

A specialized technique for locating the full legal birth name of European actors, particularly French actors, who frequently use stage names. This process involves a two-phase search: first, identifying the stage name using general career clues (films, era, director); second, using specific queries like "birth name," "née," or "nom de naissance" to bypass the stage name and find the legal name. Ideal for deep biographical research.