Skill UI

This skill provides a comprehensive checklist and detailed methodology for detecting HTTP Request Smuggling vulnerabilities. It covers various desynchronization types (CL.TE, TE.CL, TE.TE), including HTTP/2 and modern variants. Use this when penetration testing multi-server architectures, proxies, or load balancers to identify potential security bypasses, unauthorized access, or cache poisoning risks.

A comprehensive guide to advanced SQL injection (SQLi) methodologies for offensive security assessments and bug bounty hunting. Covers all major injection types, including error-based, boolean/time-based blind, out-of-band, and second-order injection. Provides specific payloads and techniques for MySQL, MSSQL, PostgreSQL, Oracle, and NoSQL databases, along with methods for bypassing WAFs, exploiting GraphQL, WebSocket, and modern API filters. Includes full automation workflows using tools like sqlmap.

This skill provides a comprehensive checklist and methodology for identifying Server-Side Template Injection (SSTI) vulnerabilities. It covers template engine identification (e.g., Jinja2, Twig), polyglot payload generation, systematic detection methods, and executing engine-specific Remote Code Execution (RCE) payloads. Ideal for security professionals testing web application input sanitization.

A comprehensive checklist and methodology for testing Cross-Site Scripting (XSS) vulnerabilities. Covers all major types, including Stored, Reflected, DOM, and Blind XSS, along with advanced techniques like CSP bypass, polyglot payloads, and event handler injection. Essential for web application security testing and bug bounty hunting to identify and mitigate malicious script injection risks.

This comprehensive checklist details how to test for XML External Entity (XXE) injection vulnerabilities. It covers classic, blind, error-based, and out-of-band techniques, enabling testers to identify weaknesses in XML parsers. The methodology includes finding various injection points (e.g., file uploads, SOAP/REST endpoints) and exploiting potential risks like file disclosure, SSRF, and DoS. Use this guide for robust web application security testing and bug bounty hunting.

This guide provides comprehensive methods for load testing and capacity planning specifically for Salesforce integrations. It walks users through calculating API limit budgets, running high-volume performance tests using tools like k6, and optimizing Bulk API throughput. Use this when scaling complex, high-volume, or mission-critical Salesforce processes.

This guide outlines the complete workflow for setting up a fast, reproducible local development environment for Salesforce. It covers initializing SFDX projects, managing scratch orgs, integrating Node.js for backend logic, and configuring hot reload and unit/integration testing using modern tools like Vitest. Ideal for developers aiming for rapid iteration and robust testing cycles.

This guide provides a comprehensive framework for load testing Shopify app integrations, specifically designed to respect strict API rate limits. It teaches users how to plan and benchmark system capacity for high-traffic events like Black Friday/Cyber Monday (BFCM) or flash sales using tools like k6. Users learn to optimize for burst events, analyze GraphQL cost, and configure infrastructure scaling for reliable e-commerce performance.

This guide provides a comprehensive and reproducible local development workflow for Shopify applications. It details how to use the Shopify CLI for scaffolding and hot reloading, integrate ngrok for stable webhook tunneling, and set up Vitest for robust API testing, enabling developers to achieve rapid and reliable iteration cycles.

This guide provides a comprehensive methodology for load testing and capacity planning within Snowflake data warehouses. It covers optimizing query performance by adjusting warehouse sizes (Scale UP), simulating high concurrency using multi-threading (Scale OUT), and configuring advanced scaling policies (Standard, Economy, Maximized). Users can benchmark critical queries using SQL and simulate real-world user traffic using Python, ensuring robust and cost-efficient production environments.

A comprehensive guide to configuring a fast, reproducible local development workflow for Webflow Data API v2 integrations. This setup includes TypeScript, hot reloading, Vitest mocking, and ngrok webhook tunneling, enabling developers to establish a rapid iteration cycle for seamless Webflow development and testing.

Captures complete, full-page screenshots of any modern web page using the Chrome DevTools Protocol (CDP). Unlike standard tools, this utility handles Single Page Applications (SPAs), scrolling content, lazy-loaded images, and complex scroll containers, ensuring the entire visible content is captured in a single, high-fidelity PNG file. Ideal for documenting complex web flows and testing.