Skill UI

Generates a single, self-contained animated slide designed for educational or historical explainers. Utilizing CSS keyframes, this skill creates a retro, 8-bit, or pixel-art aesthetic, complete with animated mascots, kinetic typography, and timeline ribbons. Ideal for marketing campaigns, product history reveals, or any content requiring a nostalgic, video-like feel without external JavaScript.

A sophisticated payload bypass technique targeting Java applications. It exploits the silent loss of high 8 bits when 16-bit Java characters are cast or written as 8-bit bytes. This allows attackers to bypass WAF/IDS security measures by making the WAF see harmless Unicode, while the backend service processes the original malicious ASCII byte payload. Ideal for blind SQLi, deserialization RCE, and path traversal. This primitive affects major frameworks like Tomcat, Spring, Jackson, and HttpClient.

This comprehensive playbook details advanced techniques for detecting Prototype Pollution vulnerabilities in JavaScript environments (Node.js and browser). It covers various attack vectors, including using `__proto__` and `constructor.prototype` paths, and provides black-box testing payloads for JSON parsing, query string merging, and deep object assignment. Use this when analyzing applications for potential Remote Code Execution (RCE) or unintended property leakage via object merging sinks.

An expert-level playbook covering non-obvious XSS techniques, advanced payload selection across various sinks (DOM, SVG, HTML attributes, JavaScript), and sophisticated defense bypass strategies. Use this guide for real-world penetration testing, including WAF bypass, CSP bypass, HttpOnly bypass, and XS-Leaks side channel exploitation. It assumes deep knowledge of web vulnerability mechanics.

A full-featured tool for comprehensive SEO site auditing. It supports full-site crawling, mapping site structure (URL discovery), and deep scraping of JavaScript-rendered content. Ideal for technical SEO audits, content inventory, and identifying link gaps.

An internal utility designed for deep investigation of JavaScript or TypeScript stack traces. It analyzes complex runtime errors, providing specific checks for asynchronous boundaries, module resolution issues, JSON parsing failures, and type contract violations. It aids developers by generating minimal reproduction commands and identifying potential patch targets for robust error handling.