Skill UI

A guide to building production-grade, fault-tolerant integrations with Notion. Learn industry best practices for handling API failures, including exponential backoff retries, implementing circuit breakers to prevent cascade failures, utilizing offline caching for graceful degradation, and setting up health checks. Essential for maintaining high system uptime when interacting with the Notion API.

A comprehensive offensive checklist for assessing the security and robustness of AI and Large Language Model (LLM) applications. It covers advanced adversarial techniques such as prompt injection, jailbreaking, model extraction, data poisoning, and analyzing system vulnerabilities across components. Essential for red-teaming and security assessment.

This comprehensive checklist provides a deep dive into Endpoint Detection and Response (EDR) architecture and monitoring mechanisms. It details advanced evasion techniques, such as direct syscalls, AMSI bypass, kernel patching, and memory manipulation. This skill is essential for red team engagements, penetration testing, and advanced malware research to thoroughly assess and bypass modern security defenses.

This guide provides a comprehensive operational checklist for exploit development. It covers the entire lifecycle, from initial bug identification and vulnerability analysis (e.g., stack overflow, UAF) to payload development, mitigation bypass (ASLR, DEP, CFG), and reliable weaponization. Essential for security researchers developing Proof-of-Concept exploits and establishing a professional exploit development environment.

A speed-optimized, comprehensive checklist for rapid security assessments. This guide covers full-cycle penetration testing methodologies, including deep reconnaissance (WAF bypass, CDN mapping), access control testing (MFA, JWT, API keys), and session management vulnerabilities. Ideal for time-boxed engagements, CTF competition, or initial service triage.

A comprehensive checklist and methodology for penetration testing file upload endpoints. Covers critical vulnerabilities such as MIME type bypass, extension bypass, magic byte manipulation, path traversal, and stored XSS. Essential for web application security assessment and bug bounty hunting, guiding testers through basic testing to advanced exploitation techniques like Null Byte injection and double extensions.

This comprehensive checklist guides penetration testers through discovering Insecure Direct Object References (IDOR). It covers techniques like object ID enumeration, horizontal and vertical privilege escalation, and parameter manipulation. Use it for web application pentests and bug bounty hunting to identify broken access control vulnerabilities.

This comprehensive checklist provides a detailed methodology for simulating the initial access phase in red team engagements and penetration testing. It covers a wide spectrum of modern attack vectors, including advanced social engineering (e.g., deepfake, BEC), sophisticated phishing (spear/smishing), exploiting exposed perimeter services (RDP/VPN), and identifying cloud misconfigurations. Use this guide when planning or executing the initial foothold stage to ensure comprehensive coverage against modern threats.

A comprehensive checklist detailing advanced attack methodologies for JSON Web Tokens (JWT). Covers critical misconfigurations such as algorithm confusion (alg:none, RS256→HS256), weak secret brute forcing, header injection (kid, jku, jwk), cache poisoning, and improper validation. Also provides specific vectors for extracting JWTs from mobile environments (Android/iOS). Ideal for penetration testers conducting deep security assessments on authentication systems.

This comprehensive checklist guides thorough security testing of OAuth 2.0 and OpenID Connect (OIDC) protocols. It covers advanced vulnerabilities such as authorization code interception, PKCE bypass, CSRF flaws, and improper scope validation. The methodology emphasizes modern industry standards like FAPI (DPoP, JAR, PAR), making it essential for penetration testers and security researchers assessing web application integrity and API security.

This comprehensive checklist guides users through identifying and exploiting open redirect vulnerabilities in web applications. It covers parameter identification, advanced bypass techniques (e.g., URL encoding, CRLF injection), and chaining the vulnerability with other flaws like OAuth or SSRF. Ideal for web application penetration testing and bug bounty hunting.

This skill provides a comprehensive operational checklist for identifying and exploiting HTTP Parameter Pollution (HPP) vulnerabilities. It details how various web technologies (ASP.NET, PHP, Python, etc.) handle duplicate parameters differently (e.g., first-wins, last-wins, concatenation). Use this skill during penetration testing to discover flaws in parameter parsing, which can lead to bypassing WAFs, performing logic manipulation, or achieving unauthorized access.