Skill UI

This comprehensive guide details the end-to-end process for integrating Bright Data into development projects. It covers gathering zone credentials, setting up environment variables, downloading necessary SSL certificates, and configuring both Node.js and Python environments for robust and reliable web scraping proxy authentication.

This guide provides production-ready patterns for integrating with Bright Data proxy services. It covers critical aspects like setting up a proxy client, implementing robust retry logic for transient errors (e.g., 502, 503), managing sticky sessions for consistent IPs, and parsing complex HTML responses. Essential for building reliable, high-scale web scrapers using TypeScript and Python.

This guide addresses critical LangGraph streaming pitfalls, including state overdraw, proxy buffering issues (Nginx, Cloud Run), and excessive event noise. It provides a production-grade pattern for implementing robust SSE/WebSocket endpoints using FastAPI. Learn how to correctly select the `stream_mode` (messages, updates, values) and implement server-side event filtering to reliably build live-token chat UIs and perform comprehensive state visualization.

Designed to handle API integrations for services like Navan that lack a dedicated sandbox environment. This skill implements robust environment isolation (Development, Staging, Production) using separate OAuth credentials, advanced environment variable management, and a local development proxy/mock server. It ensures that development, testing, and CI/CD processes can run safely without modifying live production data.

This expert playbook details advanced attack vectors specific to the HTTP/2 protocol. It covers sophisticated techniques such as h2c smuggling, exploiting pseudo-header discrepancies, HPACK compression vulnerabilities, and abusing stream multiplexing. Use this skill for professional penetration testing and security auditing of H2 services, especially for bypassing proxy-level controls and WAFs.

This expert playbook details advanced techniques for establishing secure network tunnels and pivoting through compromised hosts. It covers various methods like SSH (Local, Remote, Dynamic, Jump), Chisel, Ligolo-ng, socat, and ProxyChains. Use this guide to bypass network restrictions, establish persistent access, and perform multi-layered lateral movement within restricted environments.

A comprehensive playbook detailing expert-level techniques for exploiting web cache vulnerabilities. Covers both Web Cache Deception (stealing authenticated user data) and Web Cache Poisoning (injecting malicious content). Techniques include path confusion, unkeyed header manipulation (X-Forwarded-Host), and exploiting CDN/reverse proxy caching logic. Essential reading for penetration testers and security researchers.

Provides a comprehensive guide to implementing Zero Trust Network Architecture on Google Cloud Platform (GCP) using Identity-Aware Proxy (IAP). It enforces rigorous, per-request identity verification and context-aware authorization for services like Compute Engine, App Engine, and Cloud Run. This ensures that only authenticated users who meet specific criteria (e.g., device posture, corporate location, time window) can access protected resources, eliminating reliance on public IPs or VPNs.