Download

Skill UI

Browse and discover 9630+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Search , found 1082 results

Default Newest Most Downloaded

Kernel Exploitation: Privilege Escalation Playbook

kernel-exploitation

yaklang/hack-skills

An expert playbook detailing advanced techniques for Linux kernel exploitation. Covers vulnerability classes (UAF, OOB, Race Condition), building primitives, bypassing modern mitigations (KASLR, SMEP, SMAP, KPTI), and achieving root privilege escalation via functions like commit_creds or modprobe_path overwrite. Essential for CTF and advanced security research.

Expert Playbook for LLM Prompt Injection

llm-prompt-injection

yaklang/hack-skills

This comprehensive playbook details advanced techniques for testing and exploiting Large Language Models (LLMs). It covers direct instruction override, indirect poisoning via RAG and web sources, function/tool abuse, and sophisticated data exfiltration methods. Essential reading for AI security researchers and penetration testers.

Expert macOS Process Injection Playbook

macos-process-injection

yaklang/hack-skills

A comprehensive playbook detailing advanced macOS process injection techniques. It covers exploiting system mechanisms such as DYLD_INSERT_LIBRARIES, dylib hijacking (weak/rpath), XPC abuse, and Mach port manipulation. Essential for security researchers and penetration testers aiming to execute code in target processes.

TOCTOU Race Condition Exploitation Techniques

offensive-toctou

SnailSploit/Claude-Red

A comprehensive methodology for exploiting Time-of-Check / Time-of-Use (TOCTOU) race conditions across diverse system layers. This covers symlink swaps, file-descriptor races, kernel double-fetch vulnerabilities, and advanced window-widening primitives like FUSE slow filesystems and userfaultfd. Essential for security researchers targeting race-based privilege escalation in binaries, kernels, and container orchestrators.

Prototype Pollution RCE and Gadget Exploitation

prototype-pollution-advanced

yaklang/hack-skills

This advanced playbook covers escalating prototype pollution into Remote Code Execution (RCE) and Cross-Site Scripting (XSS). It details exploitation techniques across various environments, including Node.js child_process, EJS, Pug, Handlebars, and client-side libraries like jQuery and Lodash. It is designed for security researchers and penetration testers to systematic locate and exploit deep merge sinks and framework gadgets.

AI Open Source Repository Search Engine

taishi-i/awesome-ChatGPT-repositories

This specialized tool serves as a comprehensive search engine for over 2500 curated open-source repositories focusing on Large Language Models (LLMs), RAG, AI agents, and advanced NLP applications. It intelligently parses complex, multilingual queries, providing users with highly targeted suggestions for AI development tools, libraries, and codebases.

Server-Side Request Forgery Expert Playbook

ssrf-server-side-request-forgery

yaklang/hack-skills

This comprehensive playbook details expert techniques for exploiting Server-Side Request Forgery (SSRF). It covers bypassing URL filters, accessing cloud metadata endpoints (AWS, GCP, Azure), utilizing advanced protocols like Gopher, and chaining vulnerabilities to achieve Remote Code Execution (RCE) in real-world scenarios. Ideal for penetration testers and security researchers.

Advanced SSTI Exploitation Techniques

ssti-server-side-template-injection

yaklang/hack-skills

This expert playbook provides comprehensive techniques for exploiting Server-Side Template Injection (SSTI). It covers polyglot detection probes, engine fingerprinting (Jinja2, Twig, FreeMarker, etc.), sandbox escape mechanisms (MRO chains), and advanced bypass techniques. Essential reading for security researchers and penetration testers assessing application vulnerabilities.

Advanced Web Cache Deception and Poisoning

web-cache-deception

yaklang/hack-skills

A comprehensive playbook detailing expert-level techniques for exploiting web cache vulnerabilities. Covers both Web Cache Deception (stealing authenticated user data) and Web Cache Poisoning (injecting malicious content). Techniques include path confusion, unkeyed header manipulation (X-Forwarded-Host), and exploiting CDN/reverse proxy caching logic. Essential reading for penetration testers and security researchers.

Scientific Literature Search with PubMed API

pubmed-database

affaan-m/everything-claude-code

Provides comprehensive workflows for searching biomedical literature in PubMed and NCBI. Users can construct highly complex queries using MeSH terms, specific field tags, and Boolean operators. It details the programmatic use of NCBI E-utilities (like esearch, efetch) for reliable, repeatable retrieval of abstracts, metadata, and citations, making it invaluable for systematic reviews and bioinformatic research projects.

SERP-Driven Content Cluster Planner

AgriciDaniel/claude-seo

This tool performs SERP-based semantic topic clustering, grouping keywords based on actual Google search engine results page (SERP) overlap, rather than simple text similarity. It designs comprehensive hub-and-spoke content clusters, complete with internal link matrices and interactive visualizations. Ideal for SEO strategists planning large-scale content architecture and pillar pages.

Generating SEO Content Briefs

seo-content-brief

AgriciDaniel/claude-seo

This tool generates comprehensive, research-backed content briefs designed to outrank current search results. It analyzes competitor gaps, classifies search intent (informational, commercial, etc.), and provides detailed, section-by-section guidance including recommended word counts and keyword placement rules. Ideal for content strategists and writers.

Prev 1 2 3...85 86 878889 90 91 Next

Language