Skill UI

A comprehensive playbook detailing advanced methods to bypass Web Application Firewalls (WAFs) when standard injection payloads (SQLi, XSS, RCE) are blocked. Techniques include encoding (URL, Unicode, Hex), protocol abuse (HTTP/2, chunking), parameter pollution, and path normalization tricks, allowing security professionals to test robust application defenses.

A comprehensive playbook detailing expert-level techniques for exploiting web cache vulnerabilities. Covers both Web Cache Deception (stealing authenticated user data) and Web Cache Poisoning (injecting malicious content). Techniques include path confusion, unkeyed header manipulation (X-Forwarded-Host), and exploiting CDN/reverse proxy caching logic. Essential reading for penetration testers and security researchers.

This catalog provides core abstractions for handling language data within administrative interfaces. It includes `LanguageDto` for strongly typing language records and `useLanguages` for managing language state and data fetching. Developers must import the specific abstraction needed and review the source files to understand the exact interfaces and types.

This catalog provides essential database abstractions and specialized clients for robust data persistence. It includes core components like DbRegistry, DynamoDBClient, and various filtering utilities. By utilizing these standardized imports, developers can standardize data access logic, ensuring clean code separation, type safety, and scalable architecture in their applications.

This API module provides eleven core abstractions for managing email functionality. It includes interfaces for repositories (e.g., GetSettingsRepository, SaveSettingsRepository), use cases (e.g., SendMailUseCase), and event handlers (e.g., MailAfterSendEventHandler). It follows clean architectural patterns to ensure the separation of concerns and provides a robust, scalable foundation for all mailing-related features.

The Form Model provides a comprehensive, declarative system for building complex web forms. It supports defining diverse field types (text, number, date/time, file, etc.), implementing advanced layouts (rows, tabs), managing validation (Zod), and handling complex logic like conditional visibility, computed fields, and nested dynamic zones.

This guide details how to configure SMTP settings for email delivery within a Webiny project. By adding the `<Api.Mailer.Smtp />` component to your `webiny.config.tsx`, you can programmatically set the host, port, and credentials for email services. It emphasizes using environment variables for secure password handling and running the build command after any configuration changes.

This skill allows developers to deeply customize the website builder's page settings. You can add entirely new settings tabs (e.g., Publishing, Analytics) or modify existing groups by injecting custom fields. It leverages PageSettingsGroup and PageSettingsGroupModifier interfaces, ensuring all custom data is safely managed and stored within the doc.extensions object, preventing conflicts with built-in system properties.

This skill provides comprehensive testing for WebSocket APIs, covering protocol basics, Cross-Site WebSocket Hijacking (CSWSH), and common security flaws. Use it when testing applications that rely on real-time communication, chat features, or persistent data streams. It validates Origin checks, session binding, and message integrity.

WizTelemetry Notification is the core notification component of the KubeSphere observability platform. It ingests alerts, cloud events, and audit logs in a multi-tenant Kubernetes environment. It intelligently routes and distributes notifications to various channels (Email, Slack, DingTalk, etc.) based on sophisticated label matching and predefined routing rules, ensuring reliable and targeted communication in complex cloud deployments.

WizTelemetry Ruler is a core extension component within the KubeSphere Observability Platform. It provides comprehensive capabilities for defining, managing, and evaluating advanced alerting rules. Users can configure rules based on native Kubernetes events, KubeSphere auditing events, and application logs, ensuring proactive monitoring and timely alerts through sinks like AlertManager.

A comprehensive playbook detailing advanced techniques for bypassing modern Endpoint Detection and Response (EDR) and Antivirus (AV) solutions on Windows. Covers exploiting vulnerabilities in AMSI, ETW, and implementing sophisticated process injection methods (e.g., Process Hollowing, Early Bird) to execute payloads while maintaining stealth.