Skill UI

Automatically scans code for reflected, stored, and DOM-based XSS risks across HTML, JavaScript, CSS, and URLs, providing reports and safe proof-of-concept payloads for use in reviews, audits, or pre-deployment checks.

Guides product managers from stakeholder requests to structured Opportunity Solution Trees by extracting outcomes, enumerating opportunities, mapping solutions, and evaluating experiments to select the best proof of concept before building.

Guides security leaders through evaluating and selecting Threat Intelligence Platforms, covering mandatory capabilities, integration needs, proof-of-concept tests, scorecards, and rollout planning for procurement or migrations.

Performs authorized clickjacking attack tests by checking frame headers, embedding targets in iframes, and crafting proof-of-concept overlays to verify whether sensitive actions can be hijacked during penetration testing.

Guides penetration testers through identifying CORS misconfigurations on web APIs, validating origin handling, preflight responses, and crafting PoCs to prove sensitive data can be accessed cross-origin during authorized assessments.

This guide provides a comprehensive operational checklist for exploit development. It covers the entire lifecycle, from initial bug identification and vulnerability analysis (e.g., stack overflow, UAF) to payload development, mitigation bypass (ASLR, DEP, CFG), and reliable weaponization. Essential for security researchers developing Proof-of-Concept exploits and establishing a professional exploit development environment.