Skill UI

The Exa Web Toolkit provides advanced capabilities for high-quality web search and content extraction. It excels at handling scientific, technical, and academic queries, allowing users to filter results by specialized categories like 'research paper' and specific academic domains. Beyond search, it can fetch and extract content from multiple URLs, including articles and academic PDFs, making it essential for deep scholarly research and current information gathering.

This router entry point is designed for comprehensive testing of file access, download endpoints, and file upload workflows. Use this guide when validating file paths, detecting Local File Inclusion (LFI), or analyzing vulnerabilities in preview, storage, or extraction processes. It helps categorize whether the security issue relates to path traversal or insecure data processing chains.

This advanced playbook details expert techniques for format string exploitation. It covers arbitrary stack reading (%p), memory writing (%n), and exploiting weaknesses like GOT/hook overwrites. Essential for CTF challenges and binary vulnerability analysis to achieve reliable Remote Code Execution (RCE).

This expert playbook provides a comprehensive guide to lattice-based cryptanalysis techniques. It covers fundamental concepts like SVP and CVP, and deep dives into advanced algorithms such as LLL and BKZ reduction. Key attack applications include Coppersmith's method for finding small roots in RSA, solving the Hidden Number Problem for recovering DSA/ECDSA nonces, and analyzing knapsack ciphers. Essential for CTF and academic cryptanalysis.

A comprehensive playbook detailing NoSQL injection techniques, moving beyond traditional SQLi. Covers deep vulnerabilities in MongoDB, including operator injection, login bypass, blind data extraction using regex, and $where execution. Also includes attacks specific to Redis, CouchDB, and general API parameter pollution.

A comprehensive methodology for identifying critical vulnerabilities in transactional applications (e-commerce, fintech, SaaS). This goes beyond standard OWASP Top 10 checks, focusing on flaws like workflow bypass, state machine violations, price manipulation, and role boundary abuse. It guides testers to map application flows, identify hidden endpoints, and quantify the potential financial impact of logic failures.

This comprehensive pipeline transforms a completed academic paper into a conference-ready talk artifact. It generates structured slide outlines, Beamer source code, editable PPTX, detailed speaker notes, and a full talk script. Crucially, it includes rigorous assurance checks (claim, citation, anonymity) to ensure academic integrity, making it ideal for top-tier conferences like NeurIPS or ICML.

This tool searches a comprehensive database of over 2500 curated open-source repositories for tools related to Large Language Models (LLMs), ChatGPT, RAG, agents, and NLP. It interprets natural language queries, converts non-English inputs to core English keywords, and systematically filters results across multiple specialized categories (e.g., LangChain, Chatbots, CLIs). Use it whenever the user needs to find specific AI development libraries or open-source AI tooling.

This comprehensive playbook details expert techniques for exploiting Server-Side Request Forgery (SSRF). It covers bypassing URL filters, accessing cloud metadata endpoints (AWS, GCP, Azure), utilizing advanced protocols like Gopher, and chaining vulnerabilities to achieve Remote Code Execution (RCE) in real-world scenarios. Ideal for penetration testers and security researchers.

This playbook provides expert-level techniques for cryptanalysis of symmetric encryption. It details how to exploit weaknesses in various modes and algorithms, including CBC padding oracle attacks, ECB mode exploitation, bit flipping attacks, stream cipher key reuse, and meet-in-the-middle attacks. Essential for authorized penetration testing and CTF challenges.

This expert playbook details advanced techniques for establishing secure network tunnels and pivoting through compromised hosts. It covers various methods like SSH (Local, Remote, Dynamic, Jump), Chisel, Ligolo-ng, socat, and ProxyChains. Use this guide to bypass network restrictions, establish persistent access, and perform multi-layered lateral movement within restricted environments.

This tool functions as a Command Line Interface (CLI) alias for implementing the specific 'pua:mama' protocol within advanced coding models like Codex or Claude Code. It loads and enforces a structured 'mama skill/protocol,' maintaining rigorous verification standards while adjusting the visible narrative style to a specific 'Chinese-mom nagging mode.' It manages configuration by interacting with `~/.pua/config.json`, ensuring existing user fields are preserved.