Skill UI

An expert playbook detailing DNS rebinding techniques to bypass the Same-Origin Policy (SOP). This method is used in penetration testing to exploit client-side applications that rely on DNS resolution for origin checks, allowing attackers to trick the browser into sending requests to internal, non-publicly accessible services (like cloud metadata endpoints) while maintaining a seemingly trusted origin.

This router entry point is designed for comprehensive testing of file access, download endpoints, and file upload workflows. Use this guide when validating file paths, detecting Local File Inclusion (LFI), or analyzing vulnerabilities in preview, storage, or extraction processes. It helps categorize whether the security issue relates to path traversal or insecure data processing chains.

This comprehensive playbook details expert techniques for exploiting Server-Side Request Forgery (SSRF). It covers bypassing URL filters, accessing cloud metadata endpoints (AWS, GCP, Azure), utilizing advanced protocols like Gopher, and chaining vulnerabilities to achieve Remote Code Execution (RCE) in real-world scenarios. Ideal for penetration testers and security researchers.

This playbook provides expert-level techniques for exploiting common infrastructure services that are exposed without proper authentication. Coverage includes Redis RCE, Rsync data theft, PHP-FPM code execution, AJP file reads, and MongoDB/Hadoop vulnerabilities. Essential for deep penetration testing and security auditing.

Provides direct access to real Google field data, integrating metrics from Search Console (GSC), Google Analytics 4 (GA4), and PageSpeed Insights. Analyze Core Web Vitals (CWV), CTR, impressions, organic traffic trends, indexation status, and search performance history (25-week data). Essential for technical SEO audits and marketing performance tracking.

Provides a structured workflow for systematically accessing and analyzing official intellectual property data from the USPTO. This skill covers patent search (PatentSearch API), trademark status checks (TSDR), ownership transfer tracking, and building reproducible IP landscape logs. It is designed for data collection and record verification, emphasizing the use of official APIs and rigorous logging practices. (Warning: Not for legal advice.)

This expert simulates an experienced design system author for Ant Design, specializing in structured, enterprise-focused, data-dense web applications. It generates comprehensive, implementation-ready guidelines covering design tokens, component anatomy, interaction states, accessibility requirements (WCAG 2.2 AA), and content standards, ensuring maximal clarity and consistency for development and design teams.

A risk-paranoid, mandatory review process designed to interrogate any plan that touches sensitive customer data, regulatory compliance, or production access. It forces consideration of critical security pillars including STRIDE threat modeling, blast radius quantification, detection mechanisms (MTTD), incident response runbooks, regulatory notification windows, and third-party vendor security posture. Essential before deploying features handling PII, PHI, or before compliance audits (SOC 2, HIPAA, GDPR).

A comprehensive design system guide for building modern, high-density, and data-rich dashboards. It establishes foundational rules covering dark-themed aesthetics, modular grids, typography, color tokens, and rigorous accessibility standards (WCAG 2.2 AA). Ideal for engineers and designers building complex cloud-platform interfaces for optimal productivity and data analysis.

This skill acts as an expert guide for creating comprehensive, implementation-ready design system documentation for enterprise applications. It mandates the generation of detailed guidelines covering style foundations, component anatomy, interaction patterns, and accessibility (WCAG 2.2 AA). It ensures the design is consistent, professional, and optimized for complex, data-driven workflows.

A comprehensive guide for integrating Microsoft Graph SDK into applications. It covers accessing Microsoft 365 data (users, mail, calendar, Teams, SharePoint) from various languages (.NET, Python, TypeScript). Key topics include robust authentication patterns (Managed Identity, OBO), advanced data retrieval techniques like pagination, delta queries, batch requests, and setting up change notifications via webhooks. Learn best practices for secure and efficient API interaction.

Use the HasData CLI to access real-time, structured web data from major platforms. This tool provides dedicated subcommands for various APIs (including Google SERP, Amazon, Zillow, Booking, etc.), enabling users to automate data collection, scrape specific URLs, and retrieve structured information like local business listings, product pricing, and real estate data directly from the command line.