Download

Skill UI

Browse and discover 6278+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Injection-Testing , found 30 results

Default Newest Most Downloaded

Host Header Injection Testing

testing-for-host-header-injection

mukul975/Anthropic-Cybersecurity-Skills

Tests web applications for HTTP Host header injection vulnerabilities, uncovering risks such as password reset poisoning, cache poisoning, SSRF, and virtual-host manipulation through curl/Burp workflows.

JWT Vulnerability Testing

testing-for-json-web-token-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Simulate JWT attacks to expose algorithm confusion, none algorithm bypass, kid injection, and weak secret flaws so API and SSO integrations can harden authentication controls before deployment.

XML Injection Security Testing

testing-for-xml-injection-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Guides security testers through identifying XML interfaces, crafting XXE/XPath payloads, and validating defenses against entity-based data leaks, SSRF, and XML bomb attacks in SOAP/XML workflows.

XSS Vulnerability Testing

testing-for-xss-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Assesses web apps for XSS by mapping injection points, crafting context-aware payloads, bypassing sanitization/CSP protections, and demonstrating client-side execution or session hijack risks.

XXE Injection Testing

testing-for-xxe-injection-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Guides authorized penetration testers through identifying XML processing points and exploiting XXE injection to read files, trigger SSRF, or exfiltrate data via blind/out‑of‑band techniques using Burp Suite, interactsh, and custom payloads.

WebSocket Security Tester

testing-websocket-api-security

mukul975/Anthropic-Cybersecurity-Skills

Automates manual-style WebSocket security checks by intercepting handshakes, manipulating authentication headers, and sending malicious frames to verify CSWSH, injection, DoS, and leakage protections in real-time APIs.

Language