Skill UI

This skill provides a comprehensive, structured methodology and checklist for identifying Remote Code Execution (RCE) vulnerabilities across various web applications. It covers advanced attack vectors such as OS command injection, Server-Side Template Injection (SSTI), insecure deserialization, file upload flaws, and XXE. Use this guide during web application penetration testing or bug bounty hunting to systematically discover arbitrary code execution paths.

This comprehensive guide provides quick, actionable solutions for the top common Palantir Foundry API and data transformation errors. It covers critical issues such as 401 Unauthorized, 403 Forbidden, ObjectTypeNotFound, and OutOfMemoryError. By offering specific code examples and best practices, this resource helps users efficiently debug and resolve complex issues in their Foundry pipelines.

This skill provides comprehensive implementation patterns for integrating with the Podium API, focusing on key business functions such as messaging, reviews, and payments. It utilizes OAuth2 authentication and demonstrates how to handle common API errors (e.g., 401 Unauthorized, 429 Rate Limited, 403 Forbidden). Use this when developing workflows that require robust, secure, and reliable interaction with the Podium platform.

This guide provides a quick reference for the most common SalesLoft REST API v2 errors, including 401 (Unauthorized), 403 (Forbidden), 422 (Validation), 429 (Rate Limit), and 5xx (Server Errors). It details the causes, specific fixes, and best practices, helping developers quickly diagnose and resolve integration issues to ensure seamless data exchange within the SalesLoft platform.

This comprehensive, guided 4-phase workflow helps teams establish clear identity, boundaries, and strategic positioning. It guides users through absorbing existing context, auditing current capabilities versus claimed responsibilities, articulating a defined mission, and finally achieving stakeholder alignment. Use this framework when starting a new role, inheriting ambiguity, or needing to define clear operational boundaries.

This utility evaluates complex arithmetic expressions using arbitrary-precision decimal mathematics. It is specifically designed for scientific, financial, or engineering calculations where standard floating-point arithmetic causes unacceptable rounding errors (e.g., 0.1 + 0.2). Supports addition, subtraction, multiplication, division, exponents, and parentheses.

A comprehensive playbook for bypassing 401/403 Forbidden errors. Covers advanced techniques like path normalization tricks (encoding, traversal), HTTP method tampering, IP spoofing headers, and protocol downgrade attacks. Essential knowledge for penetration testing and security auditing.

This expert playbook details advanced techniques for converting an arbitrary memory write primitive into full Remote Code Execution (RCE). It covers targeting multiple system structures across different glibc versions, including GOT entries, __malloc_hook, __free_hook, _IO_FILE vtables, and function arrays. Essential for exploiting modern, hardened binaries and mastering advanced binary exploitation.

The Desktop Commander MCP grants agents deep reach across the user's entire operating environment, extending far beyond the typical IDE sandbox. Key capabilities include maintaining persistent shell sessions, managing long-running background processes, accessing arbitrary filesystems, and natively handling structured data formats (Excel, PDF, DOCX). It also enables remote operations via SSH and large-scale content search, making it ideal for complex, multi-turn development, DevOps, and data analysis workflows.

This advanced playbook details expert techniques for format string exploitation. It covers arbitrary stack reading (%p), memory writing (%n), and exploiting weaknesses like GOT/hook overwrites. Essential for CTF challenges and binary vulnerability analysis to achieve reliable Remote Code Execution (RCE).

A comprehensive playbook for testing XSLT injection vulnerabilities. This guide details advanced attack chains, starting with processor fingerprinting (Java, PHP, .NET, libxslt). It covers critical vectors including XXE (External Entities), Server-Side Request Forgery (SSRF) via document(), arbitrary file writing (EXSLT), and achieving Remote Code Execution (RCE) through language-specific extensions.

HasData is a comprehensive cloud platform designed for extracting structured public web data. It supports three core execution modes: Web Scraping API for arbitrary URLs (including JS rendering), pre-parsed Scraper APIs for known platforms (like Google or Amazon), and asynchronous Scraper Jobs for bulk or recursive crawling. Ideal for market research, e-commerce intelligence, job data collection, and local business lead generation.