Skill UI

This template provides production-ready FastAPI project skeletons, incorporating advanced features such as async patterns, dependency injection, middleware, and robust error handling. It is essential for developers starting new high-performance REST APIs, microservices, or complex backend systems in Python, ensuring adherence to best architectural practices.

A comprehensive guide covering advanced traffic routing and management techniques within a service mesh using Istio. Learn how to implement critical deployment strategies like Canary releases and Blue-Green deployments, configure circuit breakers, manage retries, and perform fault injection testing. Includes YAML templates for VirtualService, DestinationRule, and Gateway setup, essential for reliable production service deployments.

Step-by-step reference for detecting and exploiting server-side template injection (SSTI), covering injection point discovery, template engine fingerprinting, and payloads for Jinja2/Twig/Freemarker so authorized penetration tests can reach remote code execution.

Step-by-step workflow for uncovering XML-based vulnerabilities such as XXE, XPath injection, SSRF, and entity bombs in web apps, covering prerequisites, payload templates, and out-of-band detection techniques.

This skill provides a comprehensive, structured methodology and checklist for identifying Remote Code Execution (RCE) vulnerabilities across various web applications. It covers advanced attack vectors such as OS command injection, Server-Side Template Injection (SSTI), insecure deserialization, file upload flaws, and XXE. Use this guide during web application penetration testing or bug bounty hunting to systematically discover arbitrary code execution paths.

This skill provides a comprehensive checklist and methodology for identifying Server-Side Template Injection (SSTI) vulnerabilities. It covers template engine identification (e.g., Jinja2, Twig), polyglot payload generation, systematic detection methods, and executing engine-specific Remote Code Execution (RCE) payloads. Ideal for security professionals testing web application input sanitization.

This expert playbook provides comprehensive techniques for exploiting Server-Side Template Injection (SSTI). It covers polyglot detection probes, engine fingerprinting (Jinja2, Twig, FreeMarker, etc.), sandbox escape mechanisms (MRO chains), and advanced bypass techniques. Essential reading for security researchers and penetration testers assessing application vulnerabilities.