Download

Skill UI

Browse and discover 9630+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search IDE , found 6340 results

Default Newest Most Downloaded

JWT Algorithm Confusion

exploiting-jwt-algorithm-confusion-attack

mukul975/Anthropic-Cybersecurity-Skills

Guides API testers through exploiting JWT algorithm confusion by forcing RS256 tokens to HS256, abusing alg:none signature bypasses, and injecting attacker-controlled keys via kid/jku/x5u headers to verify that servers enforce the expected signing algorithm.

Kerberoasting With Impacket

exploiting-kerberoasting-with-impacket

mukul975/Anthropic-Cybersecurity-Skills

Guide to performing Kerberoasting via Impacket's GetUserSPNs to enumerate SPN-enabled accounts, request tickets, and crack TGS hashes during red-team or penetration tests.

Mass Assignment API Exploitation

exploiting-mass-assignment-in-rest-apis

mukul975/Anthropic-Cybersecurity-Skills

Guide for enumerating REST API fields, injecting unexpected parameters, and exploiting mass assignment weaknesses to elevate privileges or manipulate sensitive data during security testing.

EternalBlue Exploitation Workflow

exploiting-ms17-010-eternalblue-vulnerability

mukul975/Anthropic-Cybersecurity-Skills

Guides red teamers through scanning SMB networks, exploiting MS17-010 (EternalBlue), and conducting post-exploitation tasks safely in authorized engagements using tools like Metasploit, Nmap, and AutoBlue.

NoSQL Injection Exploitation Guide

exploiting-nosql-injection-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Step-by-step workflow for pentesters to detect and exploit NoSQL injection in MongoDB, CouchDB, and similar stacks, covering operator abuse, authentication bypass, blind data extraction, JavaScript injection, and automation with NoSQLMap.

OAuth Misconfiguration Exploits

exploiting-oauth-misconfiguration

mukul975/Anthropic-Cybersecurity-Skills

Identifies and exploits OAuth 2.0/OpenID Connect misconfigurations during authorized security assessments, covering redirect URI manipulation, token leakage, authorization code theft, and scope escalation to evaluate provider and consumer defenses.

Prototype Pollution Attack Guide

exploiting-prototype-pollution-in-javascript

mukul975/Anthropic-Cybersecurity-Skills

A step-by-step playbook for spotting and abusing JavaScript prototype pollution in both browsers and Node.js services to trigger DOM XSS, remote code execution, and authorization bypasses during security hunts and code reviews.

SSRF Exploitation Playbook

exploiting-server-side-request-forgery

mukul975/Anthropic-Cybersecurity-Skills

Guides penetration testers through identifying SSRF-prone features, calling cloud metadata endpoints, internal scanning, and filter bypass techniques for safely validating SSRF flaws during authorized assessments.

Advanced SQL Injection Exploitation

exploiting-sql-injection-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Guides penetration testers through detecting and exploiting SQL injection flaws using manual and sqlmap-based techniques across major database engines, covering discovery, fingerprinting, exploitation, automation, and reporting for authorized assessments.

Sqlmap SQL Injection

exploiting-sql-injection-with-sqlmap

mukul975/Anthropic-Cybersecurity-Skills

Walks authorized testers through identifying injectable inputs, running sqlmap scans, enumerating databases, extracting data, and proving impact during secure penetration tests or CTF challenges.

Template Injection Exploitation Guide

exploiting-template-injection-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Step-by-step reference for detecting and exploiting server-side template injection (SSTI), covering injection point discovery, template engine fingerprinting, and payloads for Jinja2/Twig/Freemarker so authorized penetration tests can reach remote code execution.

Type Juggling Exploits

exploiting-type-juggling-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Guide to abusing PHP loose comparison to bypass authentication, tamper hashes, and manipulate logic during pentests by sending typed payloads via JSON or serialization. Includes payload collections, curl commands, and workflow steps.

Prev 1 2 3...273 274 275276277 278 279...527 528 529 Next

Language