Download

Skill UI

Browse and discover 5986+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Penetration-Testing , found 52 results

Default Newest Most Downloaded

Android Dynamic Analysis

performing-dynamic-analysis-of-android-app

mukul975/Anthropic-Cybersecurity-Skills

Performs runtime analysis of Android apps via Frida, Objection, and ADB to monitor behavior, hook sensitive methods, alter values, and expose vulnerabilities that static checks miss during penetration testing or forensic review.

GCP Bucket Pen Testing

performing-gcp-penetration-testing-with-gcpbucketbrute

mukul975/Anthropic-Cybersecurity-Skills

Use GCPBucketBrute plus gcloud IAM inspection to enumerate buckets, probe permissions, audit bindings, inspect service accounts, and map privilege escalation paths for cloud security testing.

GraphQL Security Testing

performing-graphql-security-assessment

mukul975/Anthropic-Cybersecurity-Skills

Guides penetration testers through discovering GraphQL endpoints, extracting schemas, verifying authorization, and probing injection risks during authorized assessments of web, mobile, or microservice GraphQL APIs.

IoT Security Assessment

performing-iot-security-assessment

mukul975/Anthropic-Cybersecurity-Skills

Performs comprehensive penetration testing of IoT devices and their ecosystems, covering hardware interfaces, firmware, network, cloud APIs, and companion apps to uncover vulnerabilities before deployment in enterprise, consumer, or industrial settings.

JWT None Attack

performing-jwt-none-algorithm-attack

mukul975/Anthropic-Cybersecurity-Skills

Automates the JWT none algorithm attack by decoding a real token, swapping the alg header to none variants, and sending forged tokens to confirm signature bypass vulnerabilities during penetration testing.

Kubernetes Penetration Testing

performing-kubernetes-penetration-testing

mukul975/Anthropic-Cybersecurity-Skills

Provides a systematic Kubernetes penetration testing workflow covering reconnaissance, automated scanning (kube-hunter, kube-bench, Kubescape), RBAC/secret checks, and pod exploitation to validate defense posture before remediation.

Server Side Request Forgery Testing

performing-ssrf-vulnerability-exploitation

mukul975/Anthropic-Cybersecurity-Skills

Walk through SSRF detection by probing metadata endpoints, internal services, and protocol handlers via controllable URL inputs, analyzing responses for disclosure, and producing vulnerability reports for authorized penetration tests.

Nessus Vulnerability Scanning

performing-vulnerability-scanning-with-nessus

mukul975/Anthropic-Cybersecurity-Skills

Guides authenticated and unauthenticated Nessus scans to spot vulnerabilities, correlate findings with CVEs/CVSS, and prioritize remediation for compliance audits and penetration testing.

Wireless Penetration Testing Guide

performing-wireless-network-penetration-test

mukul975/Anthropic-Cybersecurity-Skills

Structured playbook for validating WiFi defenses by running Aircrack-ng, Bettercap, hostapd, Kismet, hashcat, and related tools to capture handshakes, reveal rogue APs, and assess segmentation.

CORS Misconfiguration Testing

testing-cors-misconfiguration

mukul975/Anthropic-Cybersecurity-Skills

Guides penetration testers through identifying CORS misconfigurations that allow unauthorized cross-domain requests, validating Origin handling, invoking preflight checks, and building PoCs to expose credential theft risks during API audits.

Business Logic Testing

testing-for-business-logic-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Structured guidance for penetration testers to map and manipulate workflows, pricing, and permissions manually when automated scanners miss business logic flaws in e-commerce, finance, or multi-step web applications.

JWT Vulnerability Testing Guide

testing-for-json-web-token-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Assess JWT implementations for algorithm confusion, none bypass, kid/JKU/X5U injections, and weak secrets to detect authentication bypass and privilege escalation risks during API, OAuth/OIDC, or SSO penetration tests.

Prev 1 2 345 Next

Language