Skill UI

Build and configure Laravel 10+ apps using Eloquent models, Sanctum auth, Horizon queues, Livewire interfaces, and REST APIs while ensuring PSR-12, dependency injection, eager loading, and Pest/PHPUnit coverage above 85%.

Expert skill for building robust, enterprise-grade PHP applications using modern features (PHP 8.3+), major frameworks (Laravel, Symfony), and strict architectural patterns. Specializes in implementing typed DTOs, value objects, dependency injection, and ensuring high test coverage for secure REST/GraphQL APIs.

A comprehensive guide for authorized penetration testers on identifying and exploiting insecure deserialization vulnerabilities across multiple languages (Java, PHP, Python, .NET). Covers techniques for generating payloads using tools like ysoserial and phpggc, and testing various application components such as cookies, HTTP parameters, and message queues to achieve potential Remote Code Execution (RCE).

This skill details techniques for exploiting PHP's type juggling vulnerabilities, primarily caused by loose (==) comparison operators. It demonstrates how attackers can bypass authentication mechanisms, defeat magic hash function verifications, and manipulate application logic through controlled type coercion when testing web applications. Ideal for authorized security penetration testing.

Scans web server roots for high-entropy files, suspicious PHP/JSP/ASP payloads, and recent modifications to flag obfuscated webshells via entropy thresholds, regex signatures, and file metadata.

This guide provides a comprehensive workflow for Test-Driven Development (TDD) within Laravel applications. It covers best practices for writing unit, feature, and integration tests using modern tools like Pest and PHPUnit. Learn how to manage database states, mock external services, and achieve high code coverage efficiently.

This skill is designed for implementing and managing user verification workflows within a Laravel PHP framework. It facilitates processes such as email confirmation, password reset validation, and ensuring data integrity for secure application access. It is essential for robust web backend development.

A comprehensive tool for discovering, vetting, and evaluating Laravel packages. Users can search for packages based on keywords, filter by health score (e.g., Healthy, Unhealthy), and verify compatibility across different Laravel and PHP versions. It helps developers choose actively maintained, robust packages, ensuring project stability and reducing technical debt.

This tool generates a complete, production-ready PHP Model Context Protocol (MCP) server project. It automatically scaffolds the entire structure, including tools, resources, prompts, and comprehensive tests, utilizing the official PHP SDK. It provides a standardized, robust starting point for developers building AI-integrated backend services in PHP.

A comprehensive guide covering advanced exploitation techniques for insecure deserialization vulnerabilities across multiple languages (Java, PHP, Python, .NET, Node.js). It details how to enumerate data sinks (cookies, message queues), fingerprint various serialization formats (e.g., Pickle, Marshal, JSON.NET), and construct complex gadget chains using tools like ysoserial. This is essential for penetration testers reviewing applications that process untrusted serialized input.

This skill provides a comprehensive operational checklist for identifying and exploiting HTTP Parameter Pollution (HPP) vulnerabilities. It details how various web technologies (ASP.NET, PHP, Python, etc.) handle duplicate parameters differently (e.g., first-wins, last-wins, concatenation). Use this skill during penetration testing to discover flaws in parameter parsing, which can lead to bypassing WAFs, performing logic manipulation, or achieving unauthorized access.

A comprehensive playbook detailing expert techniques for OS command injection vulnerabilities. It covers all shell metacharacters, blind injection, time-based detection, out-of-band exfiltration methods, and common vulnerable code patterns across PHP, Python, and Node.js. Essential for security analysts and penetration testers.