Skill UI

This template provides production-ready FastAPI project skeletons, incorporating advanced features such as async patterns, dependency injection, middleware, and robust error handling. It is essential for developers starting new high-performance REST APIs, microservices, or complex backend systems in Python, ensuring adherence to best architectural practices.

A comprehensive guide covering advanced traffic routing and management techniques within a service mesh using Istio. Learn how to implement critical deployment strategies like Canary releases and Blue-Green deployments, configure circuit breakers, manage retries, and perform fault injection testing. Includes YAML templates for VirtualService, DestinationRule, and Gateway setup, essential for reliable production service deployments.

A comprehensive guide and set of payloads for detecting and exploiting Server-Side Template Injection (SSTI) vulnerabilities. This skill covers various template engines like Jinja2, Twig, Freemarker, and more, allowing users to achieve Remote Code Execution (RCE) during penetration testing.

This skill provides a comprehensive, structured methodology and checklist for identifying Remote Code Execution (RCE) vulnerabilities across various web applications. It covers advanced attack vectors such as OS command injection, Server-Side Template Injection (SSTI), insecure deserialization, file upload flaws, and XXE. Use this guide during web application penetration testing or bug bounty hunting to systematically discover arbitrary code execution paths.

This skill provides a comprehensive checklist and methodology for identifying Server-Side Template Injection (SSTI) vulnerabilities. It covers template engine identification (e.g., Jinja2, Twig), polyglot payload generation, systematic detection methods, and executing engine-specific Remote Code Execution (RCE) payloads. Ideal for security professionals testing web application input sanitization.

This expert playbook provides comprehensive techniques for exploiting Server-Side Template Injection (SSTI). It covers polyglot detection probes, engine fingerprinting (Jinja2, Twig, FreeMarker, etc.), sandbox escape mechanisms (MRO chains), and advanced bypass techniques. Essential reading for security researchers and penetration testers assessing application vulnerabilities.

This skill allows users to extract structured data (text, tables, attributes) from rendered web pages. It enhances traditional web scraping by ensuring all extracted strings pass mandatory AIDefence PII checks and prompt-injection gates before being stored or returned to the model. It supports building reusable extraction templates and running one-shot queries.