Download

Skill UI

Browse and discover 18950+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Hunting , found 180 results

Default Newest Most Downloaded

CORS Misconfiguration Hunting

sickn33/agentic-awesome-skills

Authorized-only guide for hunting CORS misconfigurations, validating credentialed cross-origin reads with browser PoCs, and prioritizing high-impact targets.

CSRF Vulnerability Hunting

sickn33/agentic-awesome-skills

A skill for hunting CSRF vulnerabilities in web applications. Covers raw HTTP client techniques, token bypass methods, and high-value target identification, with an emphasis on authorized testing.

Insecure Deserialization Hunting

hunt-deserialization

sickn33/agentic-awesome-skills

Offensive security skill for hunting insecure deserialization flaws in Java, PHP, Python, .NET and Ruby. Covers ysoserial gadget chains, PHP object injection, pickle payloads, ViewState and JNDI/Log4Shell, with strict authorization gates.

Verbose Error Disclosure Hunting

hunt-exceptional-conditions

sickn33/agentic-awesome-skills

Technique for authorized bug-bounty and penetration-testing engagements that hunts mishandled exceptional conditions in web apps, inducing unhandled exceptions with wrong-type, malformed, or boundary inputs to detect verbose stack traces, ORM internals, server paths, and framework version leaks.

File Upload Bug Hunter

hunt-file-upload

sickn33/agentic-awesome-skills

This skill provides techniques for hunting file upload vulnerabilities, including content-type bypass, extension bypass, magic bytes spoofing, SVG XSS, ImageMagick/FFmpeg SSRF, headless Chrome SSRF, and archive extraction attacks like Zip Slip. It includes prevention methods and requires explicit authorization.

Fintech GraphQL Vulnerability Hunting

hunt-fintech-graphql

sickn33/agentic-awesome-skills

A security-testing methodology for hunting fintech-specific GraphQL flaws such as ledger desync, decimal rounding abuse, idempotency replay, source-account IDOR and KYC field authorization gaps. For authorized assessments only.

GraphQL Vulnerability Hunting

sickn33/agentic-awesome-skills

Hunting skill for GraphQL vulnerabilities. Provides methodology to discover endpoints, test introspection, map schemas, and exploit authorization flaws across GraphQL and REST APIs.

HTML Injection Hunting

hunt-html-injection

sickn33/agentic-awesome-skills

This skill helps security researchers identify HTML injection vulnerabilities in web applications. It provides techniques for detecting unescaped user input, escalating to XSS, and proving impact with unique canaries. Recommended for authorized penetration testing and bug bounty engagements.

IDOR Vulnerability Hunting

sickn33/agentic-awesome-skills

A security hunting skill for IDOR vulnerabilities, built from 26 public bug bounty reports. Provides methodology, attack surface signals, and payload patterns for authorized security assessments.

Laravel Vulnerability Hunting

sickn33/agentic-awesome-skills

Identifies and tests Laravel-specific security flaws such as Ignition RCE, Telescope/Horizon panel exposure, .env and APP_KEY leakage, and signed URL bypass. Intended for authorized penetration testing only.

Hunt LFI RFI Path Traversal

sickn33/agentic-awesome-skills

Guides authorized security testers through hunting Local File Inclusion, Remote File Inclusion, and Path Traversal vulnerabilities, including blind confirmation, PHP filter-chain RCE, log poisoning, wrappers, and safe OOB validation.

LLM AI Feature Bug Hunting

sickn33/agentic-awesome-skills

This skill focuses on identifying security vulnerabilities in Large Language Model (LLM) and AI features. It covers prompt injection, system prompt leakage, cross-tenant access, and data exfiltration techniques. Users must verify findings against false positives using reproducibility checks and out-of-band callbacks before reporting.

Prev 1 2 3...10 11 121314 15 Next

Language