Download

Skill UI

Browse and discover 19345+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Methodology , found 470 results

Default Newest Most Downloaded

Mobile Pentest Methodology

offensive-mobile

SnailSploit/Claude-Red

A practical offensive methodology for Android and iOS app testing. It covers static analysis, Frida/Objection instrumentation, SSL pinning bypass, exported component abuse, insecure storage review, and mobile API reconnaissance for pentest and bug bounty work.

Penetration Test Reporting

offensive-reporting

SnailSploit/Claude-Red

A professional methodology for writing penetration test and red team reports, covering executive summaries, technical findings, CVSS scoring, evidence handling, remediation tracking, retest notes, and delivery formats for clients and internal teams.

Offensive Wi-Fi Testing

SnailSploit/Claude-Red

A wireless 802.11 offensive testing methodology for red team and security assessments. It covers monitor-mode setup, handshake and PMKID capture, WPA3/Enterprise attacks, evil twin setups, WPS abuse, and related wireless intrusion techniques.

Wi-Fi Reconnaissance

offensive-wifi-recon

SnailSploit/Claude-Red

Methodology for passive Wi-Fi reconnaissance: choose compatible adapters, enable monitor mode, set regulatory domains, sweep 2.4/5/6 GHz bands, identify hidden SSIDs, clients, vendors, and encryption before active wireless attacks.

WPA3 Attack Methodology

offensive-wpa3-sae

SnailSploit/Claude-Red

Covers WPA3/SAE attack techniques including transition-mode downgrade, Dragonblood side-channel analysis, SAE authentication flooding, H2E checks, and Wi-Fi 6E implications. Useful for assessing wireless security gaps and validating defensive hardening.

WPS PIN Attacks

SnailSploit/Claude-Red

Methodology for assessing WPS-enabled routers using Pixie Dust offline recovery, online PIN brute force, lockout handling, and PBC edge cases. Useful for wireless security testing and understanding WPS exposure on consumer APs.

Offensive Business Logic Flaw Testing

offensive-business-logic

SnailSploit/Claude-Red

A comprehensive methodology for identifying critical vulnerabilities in transactional applications (e-commerce, fintech, SaaS). This goes beyond standard OWASP Top 10 checks, focusing on flaws like workflow bypass, state machine violations, price manipulation, and role boundary abuse. It guides testers to map application flows, identify hidden endpoints, and quantify the potential financial impact of logic failures.

TOCTOU Race Condition Exploitation Techniques

offensive-toctou

SnailSploit/Claude-Red

A comprehensive methodology for exploiting Time-of-Check / Time-of-Use (TOCTOU) race conditions across diverse system layers. This covers symlink swaps, file-descriptor races, kernel double-fetch vulnerabilities, and advanced window-widening primitives like FUSE slow filesystems and userfaultfd. Essential for security researchers targeting race-based privilege escalation in binaries, kernels, and container orchestrators.

OSINT Methodology For External Red Teaming

osint-methodology

elementalsouls/Claude-OSINT

A comprehensive methodology for executing external Open Source Intelligence (OSINT) reconnaissance and authorized red-team operations. It guides users through a multi-stage attack surface assessment pipeline, covering asset discovery, confidence scoring, vulnerability prioritization, breach correlation, and structured client reporting for professional security assessments.

Expert Bug Bounty Reconnaissance Methodology

recon-and-methodology

yaklang/hack-skills

A comprehensive playbook for professional bug bounty hunting and penetration testing. This guide covers systematic reconnaissance, from initial asset discovery (subdomains, IPs) and technology fingerprinting to advanced endpoint and source code mining. Learn the structured methodology used by top hunters to maximize coverage and find high-severity vulnerabilities.

Recon and Methodology Router

yaklang/hack-skills

Entry-level reconnaissance router for new targets and unknown attack surfaces. Helps map scope, discover assets, fingerprint technology, inventory endpoints, and choose the first high-value security testing path.

Subdomain Takeover Detection And Exploitation

subdomain-takeover

yaklang/hack-skills

This playbook details the methodology for detecting and exploiting subdomain takeover vulnerabilities. It focuses on identifying CNAME/NS/MX records pointing to deprovisioned or unclaimed cloud resources (e.g., AWS S3 buckets, Heroku apps). Understanding these weaknesses allows attackers to serve malicious content under the victim's trusted domain, leading to phishing, credential theft, and security bypasses.

Prev 1 2 3...9 10 111213 14 15...38 39 40 Next

Language