Download

Skill UI

Browse and discover 6201+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Exploit , found 87 results

Default Newest Most Downloaded

API Injection Testing

exploiting-api-injection-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Simulates malicious API requests to probe SQL, NoSQL, LDAP, command injection, and SSRF entry points, helping teams validate input controls and backend misconfigurations during authorized security assessments.

BGP Hijack Simulation Lab

exploiting-bgp-hijacking-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Simulates BGP hijacking scenarios in isolated labs to assess route origin validation, RPKI deployment, and monitoring defenses so network teams can verify prefix filtering, AS path handling, and alerting without touching production routing.

Broken Function Authorization Testing

exploiting-broken-function-level-authorization

mukul975/Anthropic-Cybersecurity-Skills

Detects Broken Function Level Authorization by enumerating admin endpoints, probing with regular user sessions, and validating role enforcement to reveal API privilege escalation paths during penetration tests.

Broken Link Hijacking

exploiting-broken-link-hijacking

mukul975/Anthropic-Cybersecurity-Skills

Identify and exploit broken link hijacking by mapping expired domains, dead external services, and dangling subdomains so you can prove risky dependencies during web app, supply-chain, or bug bounty assessments.

Constrained Delegation Abuse

exploiting-constrained-delegation-abuse

mukul975/Anthropic-Cybersecurity-Skills

Explains how to abuse Kerberos constrained delegation misconfigurations in Active Directory to impersonate privileged accounts via S4U2self/S4U2proxy, secure service tickets, and access CIFS/LDAP/HTTP targets for lateral movement and privilege escalation during red-team or authorized security exercises.

Deep Link Exploitation

exploiting-deeplink-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Automates testing and exploitation of mobile app deep link handlers (custom schemes, App Links, Universal Links) to surface unauthorized access, injection, hijacking, and WebView loading flaws during security assessments.

API Excessive Data Exposure

exploiting-excessive-data-exposure-in-api

mukul975/Anthropic-Cybersecurity-Skills

Audits API responses to detect excessive data exposure when endpoints emit sensitive fields that frontends omit, combining schema discovery, regex pattern matching, and interception tooling to flag leaked PII, identifiers, and debug info before they reach clients.

HTTP Request Smuggling Guide

exploiting-http-request-smuggling

mukul975/Anthropic-Cybersecurity-Skills

Walks through detecting and exploiting HTTP request smuggling by comparing front-end and back-end parsing, using tools like Burp Suite, smuggler.py, and curl during penetration tests.

Exploiting IDOR Vulnerabilities

exploiting-idor-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Guides security testers through identifying and exploiting IDOR flaws, covering endpoint mapping, Burp Authorize setup, horizontal/vertical access checks, and non-obvious request vectors to confirm broken object-level authorization.

Insecure Mobile Data Storage

exploiting-insecure-data-storage-in-mobile

mukul975/Anthropic-Cybersecurity-Skills

Identifies and exploits insecure local data storage in Android and iOS apps, guiding assessments of SharedPreferences, SQLite, Keychain/Keeper, and backups during OWASP M9 or MASVS-STORAGE-focused mobile penetration tests.

Insecure Deserialization Exploits

exploiting-insecure-deserialization

mukul975/Anthropic-Cybersecurity-Skills

Guides pentesters through spotting serialized payloads in Java, PHP, Python, and .NET apps, then crafting ysoserial, PHPGGC, and ysoserial.net payloads to verify remote code execution vectors safely.

IPv6 Vulnerability Exploitation

exploiting-ipv6-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Conducts authorized IPv6 penetration tests by enumerating dual-stack hosts, spoofing router advertisements, launching SLAAC MITM, manipulating neighbor discovery, and spotting tunneling protocols to validate IPv6-aware defenses during security assessments.

Prev 1 2 345 6 7 8 Next

Language