Download

Skill UI

Browse and discover 19426+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Security Testing , found 334 results

Default Newest Most Downloaded

File Path Traversal Testing

file-path-traversal

sickn33/agentic-awesome-skills

Identify and exploit file path traversal vulnerabilities to read arbitrary server files, assess impact, and provide remediation guidance for authorized security assessments.

Guarded Git Pull Request Workflow

git-pr-workflows-git-workflow

sickn33/agentic-awesome-skills

This workflow orchestrates review, tests, commits, and branch pushes using parallel agents to ensure changes move through validation into a pull request. It enforces repository policies, branch protection, and security checks before merging. Ideal for completed implementation work requiring strict validation, automated testing, and compliance with maintainer guidelines without bypassing safeguards.

GitLab CI/CD Pipeline Patterns

gitlab-ci-patterns

sickn33/agentic-awesome-skills

This skill provides comprehensive patterns for creating efficient GitLab CI/CD pipelines. It covers automated testing, building, deployment strategies, Docker integration, multi-environment configurations, Terraform workflows, security scanning, and caching optimization to streamline DevOps processes.

HTML Injection Vulnerability Testing

html-injection-testing

sickn33/agentic-awesome-skills

This skill enables identification and testing of HTML injection vulnerabilities in web applications to assess security risks. It involves using tools like Burp Suite and understanding HTTP structures. Strictly for authorized security assessments, defensive validation, or educational purposes in controlled environments.

Account Takeover Taxonomy

sickn33/agentic-awesome-skills

A security testing skill that maps nine account takeover paths, including password reset poisoning, token leakage, JWT manipulation, and email change flaws, with proof and false-positive guidance for authorized assessments.

Cache Poisoning Hunter

hunt-cache-poison

sickn33/agentic-awesome-skills

Authorized security testing skill for hunting web cache poisoning and password reset host-header injection. Maps CDN caching layers, probes unkeyed headers such as X-Forwarded-Host, and verifies cache HIT signals to confirm exploitable poisoned responses.

Hunt CAPTCHA Bypass

hunt-captcha-bypass

sickn33/agentic-awesome-skills

This skill helps identify CAPTCHA bypass vulnerabilities in web applications by testing various patterns such as omitting the CAPTCHA field, sending empty values, replaying tokens, and testing alternate endpoints. It is intended for authorized security assessments only.

Hunt Clickjacking Web Vulnerabilities

hunt-clickjacking

sickn33/agentic-awesome-skills

This skill focuses on identifying clickjacking vulnerabilities where malicious sites overlay transparent iframes over legitimate pages to trick users into unintended actions. It involves checking security headers like X-Frame-Options and CSP, verifying if sensitive actions can be triggered via framing, and ensuring proper authorization before testing. It is strictly for authorized security assessments and bug bounty programs.

Cloud Infrastructure Misconfiguration Hunter

hunt-cloud-misconfig

sickn33/agentic-awesome-skills

A security skill for identifying cloud and infrastructure misconfigurations such as exposed storage buckets, metadata endpoints, and admin panels. Includes techniques for S3, EC2, Jenkins, and CloudWatch RUM exploitation, requiring explicit authorization for offensive testing.

Hunt Client-Side DOM Vulnerabilities

sickn33/agentic-awesome-skills

This skill enables the identification and exploitation of client-side DOM vulnerabilities, including DOM Clobbering, PostMessage bypasses, Service Worker abuse, and CSS exfiltration. It is designed for authorized security assessments to discover high-value attack chains that bypass server-side filters. Users must obtain explicit written permission before testing any target.

Fintech GraphQL Vulnerability Hunting

hunt-fintech-graphql

sickn33/agentic-awesome-skills

A security-testing methodology for hunting fintech-specific GraphQL flaws such as ledger desync, decimal rounding abuse, idempotency replay, source-account IDOR and KYC field authorization gaps. For authorized assessments only.

gRPC Vulnerability Hunter

sickn33/agentic-awesome-skills

This skill helps identify gRPC security vulnerabilities during penetration testing. It includes fingerprinting gRPC servers, enumerating services via reflection, testing authentication bypasses, and checking for DoS risks like HTTP/2 Rapid Reset. Requires explicit authorization for offensive use.

Prev 1 2 3...22 23 242526 27 28 Next

Language