Skill UI

This skill guides comprehensive security testing for Host Header Injection vulnerabilities in web applications. It simulates attacks to identify critical risks such as password reset poisoning, web cache poisoning, Server-Side Request Forgery (SSRF), and virtual host routing manipulation. It is essential for penetration testers assessing backend security behind proxies and load balancers.

AgentPhone is an API-first platform designed for developers building AI agents with advanced telephony capabilities. It allows agents to manage phone numbers, make/receive voice calls, and handle SMS messages. Developers can utilize hosted mode for simple AI interactions or webhook mode for custom, complex logic, making it ideal for building sophisticated customer support bots or virtual assistants.

A comprehensive playbook detailing how web applications can be vulnerable to attacks by manipulating the HTTP Host header. Covers critical techniques such as password reset poisoning, Web Cache Poisoning, Server-Side Request Forgery (SSRF), and Virtual Host bypass. Essential reading for penetration testers and security researchers.