Skill UI

Authorized Android/iOS reverse engineering and security testing: APK/IPA analysis, runtime instrumentation (Frida/Objection), SSL-pinning and jailbreak/root-detection bypass, per OWASP MASTG.

This skill performs Static Application Security Testing (SAST) to detect code vulnerabilities across multiple programming languages and frameworks. It helps identify injection flaws, hardcoded secrets, and security policy violations before deployment. Suitable for code reviews, compliance checks like OWASP, and legacy code assessment. Requires source code access and is not for runtime testing.

Master advanced vulnerability analysis principles aligned with OWASP 2025 standards. Learn to think like an attacker and defend like an expert. Covers supply chain security, attack surface mapping, risk prioritization using CVSS and EPSS, and exceptional condition handling. Includes methodologies for scanning, code pattern analysis, and cloud security considerations to identify and mitigate critical security risks effectively.

Deploy and tune Web Application Firewalls (AWS WAF, Cloudflare WAF, ModSecurity) with managed rules for OWASP Top 10 protection, rate limiting, and geo-blocking.

This comprehensive workflow guides users through a multi-phase process for assessing web application security. It is designed to systematically test for common vulnerabilities listed in the OWASP Top 10, including SQL injection, XSS, broken authentication, and access control issues. Ideal for professional penetration testing, security auditing, and bug bounty hunting.