Skill UI

A comprehensive skill for assessing mobile applications (Android and iOS) for vulnerabilities related to deep links, custom URI schemes, and intent handling. This skill identifies risks such as unauthorized access, data injection, intent hijacking, and improper validation of App Links or Universal Links, crucial for robust mobile security testing.

A specialized security testing skill designed to identify excessive data exposure in REST or GraphQL APIs, adhering to OWASP API3:2023 guidelines. It works by intercepting raw API responses and systematically comparing the returned data against what the frontend UI actually displays. This helps auditors detect leaked PII, internal identifiers, debug fields, or other sensitive business data that should have been filtered out by the endpoint response. Use cases include auditing microservice boundaries, assessing mobile API responses designed for multiple clients, and verifying proper respons...

This comprehensive guide outlines methods to identify and exploit specific IPv6 vulnerabilities, including SLAAC spoofing, Router Advertisement (RA) manipulation, and Neighbor Discovery Protocol (NDP) attacks. It is designed strictly for authorized penetration testing to assess dual-stack security controls, detect unauthorized tunnels (like Teredo or 6to4), and validate network defenses against IPv6-specific threats. Always obtain explicit written authorization before use.

This skill demonstrates how to exploit vulnerabilities in JWT implementations, specifically algorithm confusion. It targets APIs that fail to strictly enforce the signing algorithm, allowing attackers to downgrade signatures (e.g., RS256 to HS256) or bypass signature verification entirely (alg:none). Use this for authorized penetration testing of API security and cryptographic integrity.

This guide details the exploitation chain for noPac, combining CVE-2021-42278 (sAMAccountName spoofing) and CVE-2021-42287 (KDC PAC confusion). It demonstrates how an attacker can escalate from a standard domain user to Domain Admin by manipulating Active Directory tickets and performing DCSync. Primarily used in authorized red-teaming and penetration testing to validate domain security.

This skill guides the detection and exploitation of JavaScript prototype pollution vulnerabilities. It covers both client-side (DOM XSS) and server-side (RCE, Auth Bypass) attacks by injecting properties into Object.prototype using keys like `__proto__`. Use this when assessing APIs that deep-merge or clone user-controlled JSON data, or for general web application security testing.

A comprehensive guide for authorized penetration testing, demonstrating how to identify and exploit critical vulnerabilities in the SMB protocol (e.g., EternalBlue, PrintNightmare). This skill covers network enumeration, lateral movement techniques (Pass-the-Hash, SMB Relay), and post-exploitation activities using Metasploit and Impacket tools to assess enterprise network security posture.

This skill details techniques for exploiting PHP's type juggling vulnerabilities, primarily caused by loose (==) comparison operators. It demonstrates how attackers can bypass authentication mechanisms, defeat magic hash function verifications, and manipulate application logic through controlled type coercion when testing web applications. Ideal for authorized security penetration testing.

This comprehensive guide outlines techniques for authorized penetration testing of real-time web applications using WebSocket connections. It covers discovering various WebSocket endpoints, testing for authentication bypass, identifying Cross-Site WebSocket Hijacking (CSWSH) vulnerabilities, and assessing message handling for injection flaws (SQLi, XSS). Essential for securing chat, trading, and live notification platforms.

This skill implements comprehensive API security testing using the 42Crunch platform. It combines static analysis (API Audit) on OpenAPI definitions, dynamic vulnerability scanning (API Conformance Scan) against running APIs, and runtime threat protection. Ideal for integrating OWASP API Security Top 10 checks into CI/CD pipelines and IDEs, enabling 'shift-left' security practices.

This skill guides the deployment and implementation of Breach and Attack Simulation (BAS) platforms. It provides a continuous, automated method to validate security control effectiveness against real-world attacker techniques mapped to the MITRE ATT&CK framework. Use this when moving beyond traditional point-in-time penetration testing to establish continuous control validation and automated adversary emulation across the entire IT environment.

This guide details implementing Policy-as-Code using Open Policy Agent (OPA) and Gatekeeper. It covers writing complex Rego policies, deploying OPA Gatekeeper as a Kubernetes admission controller, and integrating policy testing into CI/CD pipelines to enforce security standards across clusters. Ideal for DevSecOps practitioners requiring robust governance.