Download

Skill UI

Browse and discover 19290+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Enumeration , found 60 results

Default Newest Most Downloaded

FFUF Web Fuzzing Guide

ffuf-web-fuzzing

sickn33/agentic-awesome-skills

This skill provides expert guidance for using ffuf during authorized web penetration testing. It covers authenticated fuzzing, raw requests, auto-calibration, and result analysis. Users must confirm authorization before probing targets. It helps with content discovery, subdomain enumeration, and parameter fuzzing efficiently while ensuring safety protocols are followed.

Rate Limiting Brute Force Hunt

hunt-brute-force

sickn33/agentic-awesome-skills

Security skill for detecting missing or weak rate limiting on authentication endpoints. Identifies brute force vulnerabilities in OTP, password reset, and login systems. Requires explicit authorization for authorized security assessments only. Includes shadow-throttle detection and enumeration techniques.

Hunt Forgot Password Vulnerabilities

hunt-forgot-password

sickn33/agentic-awesome-skills

This skill identifies authentication flaws in password reset flows, including username enumeration, exposed reset tokens, token replay, and missing rate limits. It helps security professionals assess account recovery security risks and prevent unauthorized access.

SQL Injection Hunting Skill

sickn33/agentic-awesome-skills

Offensive security skill for hunting SQL injection flaws under written authorization. Covers injection confirmation, UNION column enumeration, reflected-column discovery, and data dumping, plus high-value targets like search, filter, and report endpoints.

M365 Entra ID Attack Chain

m365-entra-attack

sickn33/agentic-awesome-skills

Red-team playbook for Microsoft 365 and Entra ID: tenant discovery, AADSTS error-code triage, Smart Lockout math for safe credential spraying, and user-enumeration vectors. Authorized engagements only.

Configure Network Services For Penetration Testing

sickn33/agentic-awesome-skills

This skill guides users to configure and test common network services like HTTP, HTTPS, SNMP, and SMB within a controlled penetration testing lab environment. It covers service enumeration, log analysis, and security testing procedures. Users will learn to set up web servers, secure connections, and file shares while practicing defensive and offensive security techniques on properly configured target systems.

Okta IdP Attack Chain

sickn33/agentic-awesome-skills

This skill provides a red-team attack chain for Okta-as-IdP environments, covering tenant discovery, user enumeration, and authentication flow analysis. It includes commands for probing Okta APIs and analyzing responses to identify security weaknesses. Strictly for authorized security assessments.

SMTP Penetration Testing

smtp-penetration-testing

sickn33/agentic-awesome-skills

Conduct authorized security assessments of SMTP servers to identify open relays, user enumeration, weak authentication, TLS issues, and misconfigurations using nmap, hydra, and smtp-user-enum.

SQLMap Database Penetration Testing

sqlmap-database-pentesting

sickn33/agentic-awesome-skills

Provide systematic methodologies for automated SQL injection detection and exploitation using SQLMap. Covers database enumeration, table and column discovery, data extraction, multiple target specification methods, and advanced exploitation techniques for various DBMS.

Bug Bounty Vulnerability Hunting Workflow

sickn33/agentic-awesome-skills

A comprehensive five-phase methodology for bug bounty and SRC vulnerability hunting, covering intake, reconnaissance, enumeration, active hunting, and reporting. Includes attack playbooks for SQLi, XSS, RCE, SSRF, IDOR, and more, with WAF bypass techniques and prioritization strategies for efficient security assessments.

SSH Penetration Testing

ssh-penetration-testing

sickn33/agentic-awesome-skills

This skill enables comprehensive security assessments of SSH services. It covers enumeration, credential attacks, vulnerability exploitation, and configuration auditing using tools like Nmap, Hydra, and Metasploit. Suitable for authorized penetration testing and security research to identify weaknesses in SSH implementations.

Web2 Recon Pipeline

sickn33/agentic-awesome-skills

A comprehensive asset discovery pipeline for authorized security assessments. It automates subdomain enumeration, live host detection, URL crawling, and vulnerability scanning using tools like subfinder, httpx, nuclei, and katana, delivering prioritized URL lists for penetration testing.

Language