Skill UI

A comprehensive playbook for advanced API security testing targeting GraphQL and REST APIs. It guides users through schema introspection, discovering hidden or undocumented fields, analyzing batching capabilities, and identifying authorization gaps (like IDORs). Essential for deep reconnaissance and identifying privilege escalation vectors.

An expert playbook detailing advanced attacks against JWT and OAuth 2.0 tokens. Covers cryptographic weaknesses like alg:none, key confusion (RS256 to HS256), and header injection (kid, jku). It also addresses critical OAuth flow abuses, such as missing state parameters, account takeover, and token leakage, essential for robust application security testing.

A comprehensive playbook detailing how open redirect vulnerabilities can be exploited. Covers finding redirect parameters, advanced filter bypass techniques (e.g., protocol-relative, userinfo), and complex exploitation chains including OAuth token theft, SSRF, and Tabnabbing.

A specialized assistant designed to navigate and accurately retrieve commands and parameters from the offline Alibaba Cloud CLI Chinese documentation mirror. It enforces a strict, hierarchical workflow: first consulting quick usage guides, then checking the main index, and finally drilling down to specific chapter pages. This structured approach ensures all provided information is accurate, evidence-based, and highly relevant to the user's intent.

This tool generates comprehensive API documentation directly from source code. It supports various API types, including REST, GraphQL, and RPC, and extracts crucial details like endpoints, parameters, data models, and authentication methods. It outputs standard formats such as Markdown, OpenAPI 3.0 YAML, and API Blueprint, streamlining the process of creating accurate and complete interface specifications for development teams.