Download

Skill UI

Browse and discover 10323+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Exploitation , found 87 results

Default Newest Most Downloaded

Linux Security Bypass Expert Playbook

linux-security-bypass

yaklang/hack-skills

A comprehensive playbook detailing advanced techniques for post-exploitation security bypass on Linux systems. Covers escaping restricted shells (rbash), evading noexec/read-only filesystems using in-memory execution (DDexec, memfd_create), and circumventing mandatory access controls like AppArmor and SELinux. Essential for penetration testing and red team operations.

Network Protocol Exploitation Attack Playbook

network-protocol-attacks

yaklang/hack-skills

This comprehensive playbook details advanced techniques for exploiting Layer 2 and Layer 3 network protocols. It covers attacks such as ARP spoofing, LLMNR/mDNS poisoning, WPAD abuse, DHCPv6 takeover, VLAN hopping, and STP manipulation. Designed for penetration testers, it facilitates MitM positioning, credential harvesting (NTLM relay), and robust network environment exploitation.

Wi-Fi Deauth and Network Attack Toolkit

offensive-deauth-disassoc

SnailSploit/Claude-Red

A comprehensive guide detailing various 802.11 management frame attacks, including deauthentication and disassociation. It covers targeted single-client deauth for handshake capture, broadcast DoS attacks, and advanced action-frame exploitation to bypass PMF (802.11w). Essential for professional penetration testing and wireless vulnerability assessment.

TOCTOU Race Condition Exploitation Techniques

offensive-toctou

SnailSploit/Claude-Red

A comprehensive methodology for exploiting Time-of-Check / Time-of-Use (TOCTOU) race conditions across diverse system layers. This covers symlink swaps, file-descriptor races, kernel double-fetch vulnerabilities, and advanced window-widening primitives like FUSE slow filesystems and userfaultfd. Essential for security researchers targeting race-based privilege escalation in binaries, kernels, and container orchestrators.

Open Redirect Vulnerability Exploitation Guide

yaklang/hack-skills

A comprehensive playbook detailing how open redirect vulnerabilities can be exploited. Covers finding redirect parameters, advanced filter bypass techniques (e.g., protocol-relative, userinfo), and complex exploitation chains including OAuth token theft, SSRF, and Tabnabbing.

Prototype Pollution RCE and Gadget Exploitation

prototype-pollution-advanced

yaklang/hack-skills

This advanced playbook covers escalating prototype pollution into Remote Code Execution (RCE) and Cross-Site Scripting (XSS). It details exploitation techniques across various environments, including Node.js child_process, EJS, Pug, Handlebars, and client-side libraries like jQuery and Lodash. It is designed for security researchers and penetration testers to systematic locate and exploit deep merge sinks and framework gadgets.

Expert Sandbox Escape Techniques Playbook

sandbox-escape-techniques

yaklang/hack-skills

A comprehensive playbook detailing expert techniques to escape multiple types of restricted environments, including Python pyjail, Docker containers, seccomp filters, and browser rendering processes. It covers advanced exploitation vectors like namespace escapes, kernel exploits, and built-in function bypasses for achieving code execution.

Advanced SQL Injection Exploitation Guide

sqli-sql-injection

yaklang/hack-skills

A comprehensive and advanced playbook for mastering SQL injection techniques. It covers critical areas including WAF bypass, out-of-band data exfiltration, second-order injection, and exploitation strategies across major database systems (MySQL, MSSQL, Oracle, PostgreSQL). Essential for professional penetration testing and security auditing.

Advanced SSTI Exploitation Techniques

ssti-server-side-template-injection

yaklang/hack-skills

This expert playbook provides comprehensive techniques for exploiting Server-Side Template Injection (SSTI). It covers polyglot detection probes, engine fingerprinting (Jinja2, Twig, FreeMarker, etc.), sandbox escape mechanisms (MRO chains), and advanced bypass techniques. Essential reading for security researchers and penetration testers assessing application vulnerabilities.

Subdomain Takeover Detection And Exploitation

subdomain-takeover

yaklang/hack-skills

This playbook details the methodology for detecting and exploiting subdomain takeover vulnerabilities. It focuses on identifying CNAME/NS/MX records pointing to deprovisioned or unclaimed cloud resources (e.g., AWS S3 buckets, Heroku apps). Understanding these weaknesses allows attackers to serve malicious content under the victim's trusted domain, leading to phishing, credential theft, and security bypasses.

Expert Symmetric Cipher Attack Playbook

symmetric-cipher-attacks

yaklang/hack-skills

This playbook provides expert-level techniques for cryptanalysis of symmetric encryption. It details how to exploit weaknesses in various modes and algorithms, including CBC padding oracle attacks, ECB mode exploitation, bit flipping attacks, stream cipher key reuse, and meet-in-the-middle attacks. Essential for authorized penetration testing and CTF challenges.

Insecure File Upload Vulnerability Testing

upload-insecure-files

yaklang/hack-skills

A comprehensive, expert playbook for challenging insecure file upload mechanisms. It provides advanced attack vectors covering validation bypass (magic bytes, extension), storage path abuse (traversal, overwrite), and exploitation of post-upload processing chains (XXE, RCE, CMDi). Essential for deep security auditing of file-handling workflows.

Prev 1 2 3 4 5 678 Next

Language