Download

Skill UI

Browse and discover 18671+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Injection , found 295 results

Default Newest Most Downloaded

Cache Poisoning Hunter

hunt-cache-poison

sickn33/agentic-awesome-skills

Authorized security testing skill for hunting web cache poisoning and password reset host-header injection. Maps CDN caching layers, probes unkeyed headers such as X-Forwarded-Host, and verifies cache HIT signals to confirm exploitable poisoned responses.

CI/CD Pipeline Vulnerability Hunting

sickn33/agentic-awesome-skills

This skill identifies security vulnerabilities in CI/CD pipelines, focusing on Jenkins Script Console, GitHub Actions workflows, and self-hosted runners. It covers techniques like Pwnrequest injection, credential store dumping, and Terraform state leakage. Requires explicit authorization for offensive security assessments.

Insecure Deserialization Hunting

hunt-deserialization

sickn33/agentic-awesome-skills

Offensive security skill for hunting insecure deserialization flaws in Java, PHP, Python, .NET and Ruby. Covers ysoserial gadget chains, PHP object injection, pickle payloads, ViewState and JNDI/Log4Shell, with strict authorization gates.

Host Header Injection Hunter

hunt-host-header

sickn33/agentic-awesome-skills

A security skill for identifying and exploiting Host header injection vulnerabilities, including password reset poisoning, web cache poisoning, and routing-based SSRF. Provides step-by-step testing methodology and commands for authorized assessments only. Built from public research and real-world findings.

HTML Injection Hunting

hunt-html-injection

sickn33/agentic-awesome-skills

This skill helps security researchers identify HTML injection vulnerabilities in web applications. It provides techniques for detecting unescaped user input, escalating to XSS, and proving impact with unique canaries. Recommended for authorized penetration testing and bug bounty engagements.

LDAP and XPath Injection Hunter

sickn33/agentic-awesome-skills

Hunt LDAP injection and XPath injection vulnerabilities in web applications. Covers authentication bypass, blind attribute exfiltration, and Active Directory vs generic LDAP differences. Includes attack surface signals, filter grammar, and authorized-use guidance.

LLM AI Feature Bug Hunting

sickn33/agentic-awesome-skills

This skill focuses on identifying security vulnerabilities in Large Language Model (LLM) and AI features. It covers prompt injection, system prompt leakage, cross-tenant access, and data exfiltration techniques. Users must verify findings against false positives using reproducibility checks and out-of-band callbacks before reporting.

NoSQL Injection Hunting

sickn33/agentic-awesome-skills

Guides authorized security testers through identifying and exploiting NoSQL injection vulnerabilities in MongoDB, Redis, and Elasticsearch, including auth bypass, blind injection, data extraction, and automation with nosqlmap.

Remote Code Execution Hunting

sickn33/agentic-awesome-skills

A skill for identifying Remote Code Execution (RCE) vulnerabilities across web applications and infrastructure. Based on bug bounty reports, it guides users to test command injection, template injection, and configuration flaws on admin consoles, APIs, and supply chain targets. Requires explicit authorization for ethical testing.

SAML SSO Attack Hunter

sickn33/agentic-awesome-skills

Hunt SAML/SSO attacks including XML Signature Wrapping, comment injection, signature stripping, XXE, and NameID manipulation. Provides attack surface discovery, manual exploitation workflows, and triage guidance for authorized security assessments.

Spring Boot Vulnerability Hunter

hunt-springboot

sickn33/agentic-awesome-skills

A security assessment tool designed to identify specific vulnerabilities in Spring Boot applications, such as exposed Actuator endpoints, H2 Console access, SpEL injection, and memory dumps containing secrets. Requires explicit written authorization for authorized security assessments.

SQL Injection Hunting Skill

sickn33/agentic-awesome-skills

Offensive security skill for hunting SQL injection flaws under written authorization. Covers injection confirmation, UNION column enumeration, reflected-column discovery, and data dumping, plus high-value targets like search, filter, and report endpoints.

Prev 1 2 3...20 21 222324 25 Next

Language