Skill UI

This skill is designed for assessing the security of Android inter-process communication (IPC) by systematically testing intents, broadcast receivers, content providers, and exported components. It helps identify critical vulnerabilities such as intent injection, unauthorized data leakage, and component hijacking, which are crucial during mobile penetration testing and security audits.

A comprehensive security script designed to test REST API authentication mechanisms for common vulnerabilities. It assesses broken token validation, missing authentication on critical endpoints, weak password policies, and session management flaws. The tool specifically evaluates JWT implementation, API key handling, and adherence to OWASP API Security Top 10, helping identify authentication bypasses before production deployment.

A specialized skill for assessing REST and GraphQL APIs against Broken Object Level Authorization (BOLA/IDOR), a critical vulnerability highlighted by OWASP API1:2023. This process involves intercepting API calls, identifying object identifiers (numeric IDs, UUIDs, slugs), and systematically substituting these IDs with those belonging to other users or tenants. It verifies whether the API server correctly enforces per-object authorization checks, mitigating risks of horizontal privilege escalation and unauthorized data access in multi-tenant environments.

This script automates the testing of API endpoints for mass assignment (over-posting) vulnerabilities, adhering to OWASP API3:2023 guidelines. It systematically injects undocumented, privileged fields (like 'role', 'isAdmin', 'balance', 'price') into request bodies of typical endpoints (e.g., profile updates, order creation). It checks if the server binds these unexpected fields to the data model without proper filtering, potentially allowing unauthorized privilege escalation or data manipulation.

A comprehensive guide for systematically assessing modern API endpoints (REST, GraphQL, gRPC) against the OWASP API Security Top 10 (2023). This workflow covers identifying endpoints, testing for Broken Object Level Authorization (BOLA/IDOR), assessing broken authentication, and validating rate limiting. Use this during authorized penetration tests or before production deployment to ensure robust API security.

A comprehensive guide for systematically assessing web applications and APIs for broken access control vulnerabilities (OWASP A01:2021). The methodology covers role-based access control (RBAC) auditing, horizontal and vertical privilege escalation, and multi-tenant data leakage using tools like Burp Suite, ffuf, and custom scripts. Essential for authorized penetration testing and security audits.

A comprehensive guide for manually assessing critical business rules and workflows in web applications. This technique goes beyond automated scanning by simulating attacks like price manipulation, multi-step process bypass, and privilege escalation. Ideal for securing e-commerce checkout funnels, financial transactions, and complex authorization systems.

This skill guides comprehensive security testing for Host Header Injection vulnerabilities in web applications. It simulates attacks to identify critical risks such as password reset poisoning, web cache poisoning, Server-Side Request Forgery (SSRF), and virtual host routing manipulation. It is essential for penetration testers assessing backend security behind proxies and load balancers.

This guide details methodologies for identifying and exploiting XML External Entity (XXE) injection vulnerabilities in web applications. It covers basic file retrieval, blind XXE detection using out-of-band techniques, and data exfiltration, all critical steps during authorized penetration testing of XML-consuming APIs and services.

A comprehensive guide and toolkit for performing deep security assessments on mobile application backends. It covers identifying vulnerabilities such as broken authentication, insecure token management (JWT, opaque tokens), session fixation, privilege escalation, and IDOR (Broken Object-Level Authorization) across various OAuth flows (OIDC, PKCE). Essential for penetration testers assessing API security.

A comprehensive security tool designed to assess the resilience of OAuth 2.0 and OpenID Connect (OIDC) implementations. It probes for critical misconfigurations and security flaws, including authorization code interception, redirect URI manipulation (open redirects), CSRF vulnerabilities, scope escalation, token leakage, and PKCE bypass. Essential for penetration testing of Single Sign-On (SSO) systems and API security.

A structured guide for SOC Tier 1 analysts to triage security alerts within Splunk Enterprise Security (ES). It provides a systematic workflow for classifying severity, investigating notable events, correlating evidence across diverse data sources (proxy, firewall, logs), and making clear disposition decisions (True Positive, False Positive) required for escalation or closure.