Download

Skill UI

Browse and discover 11171+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Methodology , found 187 results

Default Newest Most Downloaded

IoT Security Testing

SnailSploit/Claude-Red

A hands-on methodology for testing IoT and embedded devices, covering hardware reconnaissance, firmware extraction and analysis, bootloader access, runtime exploitation, wireless protocol attacks, companion app review, and cloud API abuse.

LoRaWAN Sub-GHz Attacks

offensive-lorawan-sub-ghz

SnailSploit/Claude-Red

Methodology for capturing, analyzing, and replaying LoRaWAN and sub-GHz wireless traffic. Useful for testing IoT deployments, fixed-code remotes, garage doors, TPMS, and other devices in 433/868/915 MHz bands.

Mobile Pentest Methodology

offensive-mobile

SnailSploit/Claude-Red

A practical offensive methodology for Android and iOS app testing. It covers static analysis, Frida/Objection instrumentation, SSL pinning bypass, exported component abuse, insecure storage review, and mobile API reconnaissance for pentest and bug bounty work.

Penetration Test Reporting

offensive-reporting

SnailSploit/Claude-Red

A professional methodology for writing penetration test and red team reports, covering executive summaries, technical findings, CVSS scoring, evidence handling, remediation tracking, retest notes, and delivery formats for clients and internal teams.

Offensive Wi-Fi Testing

SnailSploit/Claude-Red

A wireless 802.11 offensive testing methodology for red team and security assessments. It covers monitor-mode setup, handshake and PMKID capture, WPA3/Enterprise attacks, evil twin setups, WPS abuse, and related wireless intrusion techniques.

Wi-Fi Reconnaissance

offensive-wifi-recon

SnailSploit/Claude-Red

Methodology for passive Wi-Fi reconnaissance: choose compatible adapters, enable monitor mode, set regulatory domains, sweep 2.4/5/6 GHz bands, identify hidden SSIDs, clients, vendors, and encryption before active wireless attacks.

WPA3 Attack Methodology

offensive-wpa3-sae

SnailSploit/Claude-Red

Covers WPA3/SAE attack techniques including transition-mode downgrade, Dragonblood side-channel analysis, SAE authentication flooding, H2E checks, and Wi-Fi 6E implications. Useful for assessing wireless security gaps and validating defensive hardening.

WPS PIN Attacks

SnailSploit/Claude-Red

Methodology for assessing WPS-enabled routers using Pixie Dust offline recovery, online PIN brute force, lockout handling, and PBC edge cases. Useful for wireless security testing and understanding WPS exposure on consumer APs.

Structured Web And API Security Testing

yaklang/hack-skills

A comprehensive, top-level routing skill for authorized web security assessment, bug bounty hunting, and API penetration testing. It guides the agent through a structured methodology, covering the entire attack lifecycle from reconnaissance and vulnerability triage (XSS, SQLi, IDOR, etc.) to advanced business logic flaw identification. Use this skill to ensure thorough, systematic security analysis.

Offensive Business Logic Flaw Testing

offensive-business-logic

SnailSploit/Claude-Red

A comprehensive methodology for identifying critical vulnerabilities in transactional applications (e-commerce, fintech, SaaS). This goes beyond standard OWASP Top 10 checks, focusing on flaws like workflow bypass, state machine violations, price manipulation, and role boundary abuse. It guides testers to map application flows, identify hidden endpoints, and quantify the potential financial impact of logic failures.

TOCTOU Race Condition Exploitation Techniques

offensive-toctou

SnailSploit/Claude-Red

A comprehensive methodology for exploiting Time-of-Check / Time-of-Use (TOCTOU) race conditions across diverse system layers. This covers symlink swaps, file-descriptor races, kernel double-fetch vulnerabilities, and advanced window-widening primitives like FUSE slow filesystems and userfaultfd. Essential for security researchers targeting race-based privilege escalation in binaries, kernels, and container orchestrators.

OSINT Methodology for Red Team Assessment

osint-methodology

elementalsouls/Claude-OSINT

A comprehensive methodology designed for authorized external reconnaissance and red-teaming operations. It covers the full attack surface mapping lifecycle, including asset discovery, confidence scoring (Tentative, Firm, Confirmed), and developing structured, evidence-based client deliverables. Essential for ethical hacking, bug bounty, and assessing an organization's external digital footprint.

Prev 1 2 3...10 11 121314 15 16 Next

Language