Skill UI

A comprehensive guide detailing advanced techniques for bypassing Web Application Firewalls (WAFs). It covers multiple evasion methods, including various encoding schemes (URL, Unicode, HTML entities), payload obfuscation (mixed case, comments), and manipulation of HTTP protocols (methods, headers, parameter pollution). This skill is crucial for penetration testing, red team engagements, and evaluating the robustness of perimeter security controls against sophisticated attacks like SQL Injection and XSS.

This comprehensive guide teaches advanced iOS reverse engineering techniques using Frida dynamic instrumentation. Users can analyze proprietary app logic, extract encryption keys, trace method calls, and bypass anti-tampering or anti-debugging mechanisms without needing source code. It is essential for authorized mobile security testing and protocol analysis.

This skill provides a comprehensive methodology for identifying and exploiting open redirect vulnerabilities in web applications. It covers advanced bypass techniques (e.g., URL encoding, protocol-relative URLs, path traversal) and demonstrates chaining with other flaws like OAuth redirection for advanced phishing simulations and token theft. Designed for authorized security professionals conducting penetration tests.

This tool enables deep inspection and validation of web applications by connecting to the browser's DevTools Protocol (MCP). It allows agents to perform tasks like DOM inspection, capturing console logs, monitoring network requests, profiling performance, and taking screenshots in a live environment. Essential for debugging UIs, validating API integrations, and performing end-to-end automated testing.

This generator provides a comprehensive, production-ready template for building a Model Context Protocol (MCP) server using Kotlin. It sets up the full Gradle structure, integrates essential dependencies (MCP SDK, Ktor, Coroutines), and includes robust placeholders for custom tools, error handling, and testing, accelerating the development of context-aware backend services.

This tool scaffolds a complete, production-ready Model Context Protocol (MCP) server project written in Rust. It utilizes the official `rmcp` SDK to ensure full compatibility. The generated structure includes modules for handling logic, defining tools, managing prompts, and providing resources. Users can configure different transports (stdio, SSE, HTTP) and immediately run the server for integration testing or production use.

A comprehensive framework for transforming raw observations into rigorous, evidence-bounded, and testable research plans. It guides users through establishing research questions (PICO/PECO), formulating candidate hypotheses and rival explanations, defining causal estimands, and creating preregistration-ready analysis plans, all while maintaining strict ethical and scientific guardrails.

This comprehensive checklist guides thorough security testing of OAuth 2.0 and OpenID Connect (OIDC) protocols. It covers advanced vulnerabilities such as authorization code interception, PKCE bypass, CSRF flaws, and improper scope validation. The methodology emphasizes modern industry standards like FAPI (DPoP, JAR, PAR), making it essential for penetration testers and security researchers assessing web application integrity and API security.

This guide outlines best practices and structured workflows for automating complex tasks within the Unity Editor using the Model Context Protocol (MCP). It provides programmatic methods for managing GameObjects, applying script edits, analyzing the editor state, executing batch commands, and capturing detailed, multi-view screenshots. Ideal for developers needing robust, repeatable, and automated testing or operational tasks within Unity projects.

Captures complete, full-page screenshots of any modern web page using the Chrome DevTools Protocol (CDP). Unlike standard tools, this utility handles Single Page Applications (SPAs), scrolling content, lazy-loaded images, and complex scroll containers, ensuring the entire visible content is captured in a single, high-fidelity PNG file. Ideal for documenting complex web flows and testing.

A hands-on methodology for testing IoT and embedded devices, covering hardware reconnaissance, firmware extraction and analysis, bootloader access, runtime exploitation, wireless protocol attacks, companion app review, and cloud API abuse.

A comprehensive playbook for bypassing 401/403 Forbidden errors. Covers advanced techniques like path normalization tricks (encoding, traversal), HTTP method tampering, IP spoofing headers, and protocol downgrade attacks. Essential knowledge for penetration testing and security auditing.