Skill UI

This skill helps identify gRPC security vulnerabilities during penetration testing. It includes fingerprinting gRPC servers, enumerating services via reflection, testing authentication bypasses, and checking for DoS risks like HTTP/2 Rapid Reset. Requires explicit authorization for offensive use.

A security skill for identifying and exploiting Host header injection vulnerabilities, including password reset poisoning, web cache poisoning, and routing-based SSRF. Provides step-by-step testing methodology and commands for authorized assessments only. Built from public research and real-world findings.

This skill helps security researchers identify HTML injection vulnerabilities in web applications. It provides techniques for detecting unescaped user input, escalating to XSS, and proving impact with unique canaries. Recommended for authorized penetration testing and bug bounty engagements.

Identifies and tests Laravel-specific security flaws such as Ignition RCE, Telescope/Horizon panel exposure, .env and APP_KEY leakage, and signed URL bypass. Intended for authorized penetration testing only.

Offensive security skill for hunting MFA and 2FA bypass flaws: workflow skipping, OTP replay, response tampering, prefix-oracle guessing, and race conditions on verification endpoints. Requires written authorization.

This skill helps identify and exploit specific vulnerabilities in Node.js applications. It covers techniques like prototype pollution, Express trust proxy abuse, and template engine SSTI. Users must have explicit authorization before testing. It includes fingerprinting, detection, and exploitation chains for critical security issues.

This skill identifies session management vulnerabilities like session fixation, failure to invalidate sessions after logout or password changes, and weak session ID generation. It is designed for authorized security assessments to prevent Account Takeover (ATO) and unauthorized access. Users must obtain explicit written permission before testing targets.

Authorized security testing skill for hunting exposed source maps, .env files, .git directories, and Swagger/OpenAPI specs to uncover leaked credentials, internal endpoints, and auth logic gaps in web targets.

A security skill for hunting server-side request forgery (SSRF) vulnerabilities, covering cloud metadata, internal services, OOB confirmation, and authorized testing workflows.

A security assessment skill for identifying WebSocket vulnerabilities including Cross-Site WebSocket Hijacking (CSWSH), message tampering, handshake-layer attacks, and socket.io authorization bypasses. Requires explicit written authorization before testing. Includes reconnaissance, endpoint discovery, and exploit verification techniques for authorized security assessments.

This skill provides systematic methodologies for identifying and exploiting Insecure Direct Object Reference (IDOR) vulnerabilities in web applications. It covers detection techniques using parameter manipulation, exploitation via Burp Suite, and remediation strategies. Requires authorized security assessments and multiple test accounts to verify cross-user access. Outputs include vulnerability reports, proof of concept, and remediation recommendations.

End-to-end iOS security assessment pipeline covering app inventory, IPA acquisition, static analysis, and secret extraction. Requires explicit authorization for offensive testing and bug bounty scopes.