Download

Skill UI

Browse and discover 10578+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search IDE , found 7411 results

Default Newest Most Downloaded

Business Logic Vulnerability Testing Guide

testing-for-business-logic-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

A comprehensive guide for advanced penetration testing designed to identify flaws in application business rules that automated scanners miss. Focus areas include price manipulation, workflow bypass, privilege escalation, and race conditions. Essential for securing e-commerce platforms, financial systems, and multi-step critical processes.

Testing Email Header Injection Vulnerabilities

testing-for-email-header-injection

mukul975/Anthropic-Cybersecurity-Skills

Provides a comprehensive methodology for testing web applications susceptible to email header injection, SMTP injection, and CRLF attacks. This skill guides users in identifying vulnerable inputs (e.g., contact forms, subject lines) that allow unauthorized modification of email headers (Cc, Bcc, From) or abuse the system for spam relaying.

Host Header Injection Vulnerability Testing

testing-for-host-header-injection

mukul975/Anthropic-Cybersecurity-Skills

This skill guides comprehensive security testing for Host Header Injection vulnerabilities in web applications. It simulates attacks to identify critical risks such as password reset poisoning, web cache poisoning, Server-Side Request Forgery (SSRF), and virtual host routing manipulation. It is essential for penetration testers assessing backend security behind proxies and load balancers.

JWT Vulnerability Testing and Security Assessment

testing-for-json-web-token-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

This guide details a comprehensive methodology for testing JSON Web Token (JWT) implementations against critical security vulnerabilities. It covers attacks such as algorithm confusion (e.g., RS256 to HS256), 'None' algorithm bypass, Key ID (kid) injection, JKU/X5U manipulation, and brute-forcing weak secrets. Essential for API and SSO security assessments.

Testing For Open Redirect Vulnerabilities

testing-for-open-redirect-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

This skill provides a comprehensive methodology for identifying and exploiting open redirect vulnerabilities in web applications. It covers advanced bypass techniques (e.g., URL encoding, protocol-relative URLs, path traversal) and demonstrates chaining with other flaws like OAuth redirection for advanced phishing simulations and token theft. Designed for authorized security professionals conducting penetration tests.

Testing for Sensitive Data Exposure

testing-for-sensitive-data-exposure

mukul975/Anthropic-Cybersecurity-Skills

A comprehensive guide for performing security assessments to identify various forms of sensitive data exposure, such as leaked API keys, PII in API responses, insecure client-side storage, and unprotected data transmission. This workflow covers scanning JavaScript files, analyzing API responses, verifying data encryption, and examining browser storage.

Testing for XML Injection Vulnerabilities

testing-for-xml-injection-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

A comprehensive guide and set of payloads for penetration testing web applications that process XML input. It details how to test for major vulnerabilities such as XXE, XPath injection, SSRF, and XML parsing attacks, providing step-by-step workflows and advanced payloads for identifying data exposure and security flaws.

Xss Vulnerability Penetration Testing

testing-for-xss-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

This comprehensive skill guides the testing of web applications for Cross-Site Scripting (XSS) vulnerabilities. It covers reflected, stored, and DOM-based injection points. Testers learn to map input/output contexts, craft context-appropriate payloads, and bypass complex sanitization and CSP protections, ensuring thorough client-side security assessment.

Testing XSS Vulnerabilities With Burp Suite

testing-for-xss-vulnerabilities-with-burpsuite

mukul975/Anthropic-Cybersecurity-Skills

A comprehensive guide detailing how to identify and validate Cross-Site Scripting (XSS) vulnerabilities using Burp Suite's advanced tools (Repeater, Intruder, DOM Invader). This methodology covers reflected, stored, and DOM-based XSS, and includes strategies for bypassing security filters and Content Security Policy (CSP), making it essential for web application penetration testing and bug bounty programs.

Testing for XXE Injection Vulnerabilities

testing-for-xxe-injection-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

This guide details methodologies for identifying and exploiting XML External Entity (XXE) injection vulnerabilities in web applications. It covers basic file retrieval, blind XXE detection using out-of-band techniques, and data exfiltration, all critical steps during authorized penetration testing of XML-consuming APIs and services.

Testing JWT Token Security Vulnerabilities

testing-jwt-token-security

mukul975/Anthropic-Cybersecurity-Skills

A comprehensive guide for assessing the security of JSON Web Token (JWT) implementations. This toolkit details attacks against cryptographic weaknesses, including algorithm confusion (e.g., RS256 to HS256), 'none' attacks, brute-forcing HMAC secrets, and claim manipulation. Ideal for penetration testing and security audits of modern APIs and SSO systems.

Testing Mobile API Authentication Security

testing-mobile-api-authentication

mukul975/Anthropic-Cybersecurity-Skills

A comprehensive guide and toolkit for performing deep security assessments on mobile application backends. It covers identifying vulnerabilities such as broken authentication, insecure token management (JWT, opaque tokens), session fixation, privilege escalation, and IDOR (Broken Object-Level Authorization) across various OAuth flows (OIDC, PKCE). Essential for penetration testers assessing API security.

Prev 1 2 3...317 318 319320321 322 323...616 617 618 Next

Language