Skill UI

This expert playbook covers advanced techniques for testing HTTP request smuggling and desynchronization vulnerabilities. It is critical when front proxies, CDNs, or load balancers disagree with the origin server on message framing (Content-Length vs Transfer-Encoding), or during protocol downgrades (HTTP/2 to HTTP/1). Use this to uncover deep security flaws like WAF bypass and session hijacking.

A comprehensive, advanced playbook for conducting deep network traffic analysis and PCAP forensics. Covers essential skills like PCAP repair, advanced Wireshark filtering (HTTP, DNS, TLS), data extraction (file carving, credential harvesting), and detecting covert channels. It guides users through sophisticated techniques, including TLS decryption workflows and DNS tunneling identification.

A comprehensive playbook detailing advanced methods to bypass Web Application Firewalls (WAFs) when standard injection payloads (SQLi, XSS, RCE) are blocked. Techniques include encoding (URL, Unicode, Hex), protocol abuse (HTTP/2, chunking), parameter pollution, and path normalization tricks, allowing security professionals to test robust application defenses.

An expert-level playbook covering non-obvious XSS techniques, advanced payload selection across various sinks (DOM, SVG, HTML attributes, JavaScript), and sophisticated defense bypass strategies. Use this guide for real-world penetration testing, including WAF bypass, CSP bypass, HttpOnly bypass, and XS-Leaks side channel exploitation. It assumes deep knowledge of web vulnerability mechanics.

This skill provides a mechanism to execute TypeScript scripts using tsx, enabling fetching and streaming responses from external HTTP endpoints. It is designed for users who need a lightweight Node.js helper utility to manage simple network API calls, making it ideal for rapid integration and data fetching tasks.

This guide assists developers in building robust Model Context Protocol (MCP) servers and clients using C#/.NET. It specifically targets the stable 1.x NuGet packages, providing detailed instructions for configuring various transports (STDIO, Streamable HTTP), defining custom tools, prompts, and resources. It helps solve common integration issues like stale preview pinning, complex HTTP wiring, and structured content handling, ensuring production-ready, standard-compliant code.

This guide details the architectural and implementation patterns for building modular applications or microservices using the tinystruct Java framework. It covers core concepts like using the @Action annotation for dual routing (CLI/HTTP), managing request state with Context, and using native Builder for JSON serialization, ensuring a lightweight and structured development environment.

Pi-hole is a powerful, network-wide DNS ad blocker solution that runs on Linux hosts (like Raspberry Pi). It automatically blocks ads, trackers, and malware domains for every device on your network without requiring browser extensions. This guide details installation via Docker or bare-metal setup, configuring it as the primary DNS server for a home network, managing blocklists, and implementing advanced features like DNS-over-HTTPS (DoH) for enhanced privacy.

A lightweight tool designed to fetch data from a single URL via HTTP/HTTPS using various methods (GET, POST, PUT, DELETE). It serves as a fast, direct shell wrapper, ideal for replacing complex agent steps that only require simple data retrieval. Supports configurable timeouts and response body capping, making it perfect for quick data fetching in meta-skill workflows.

This skill provides a robust method for uploading local digital assets, including images, mockups, and full HTML files, to a Stitch project. It bypasses the limitations of standard tool calls by streaming files directly over HTTP, ensuring that large visual assets or complex web pages can be processed accurately for your design and prototyping workflow. Ideal for integrating local design iterations into cloud-based prototypes.

A comprehensive guide to setting up the open-source Sliver C2 framework. It covers deploying the server, generating cross-platform implants and beacons, establishing resilient multi-protocol listeners (mTLS, DNS, HTTPS), and executing advanced post-exploitation and pivoting techniques using the built-in armory for adversary emulation.

This skill details the advanced red-teaming technique of exploiting Active Directory Certificate Services (AD CS) via the ESC8 path. By abusing the HTTP web-enrollment endpoint and relaying coerced NTLM credentials, an attacker can compel a domain controller to request a machine certificate. This certificate is then used to compromise the domain via PKINIT and DCSync.