Download

Skill UI

Browse and discover 19269+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Vulnerabilities , found 413 results

Default Newest Most Downloaded

Auth Bypass Hunting

hunt-auth-bypass

sickn33/agentic-awesome-skills

A skill for identifying and exploiting authentication bypass vulnerabilities in web applications, including SSO/SAML, OAuth, XMLRPC, and API auth layers. Provides a step-by-step methodology, attack surface signals, and crown jewel targets. For authorized security assessments only.

Rate Limiting Brute Force Hunt

hunt-brute-force

sickn33/agentic-awesome-skills

Security skill for detecting missing or weak rate limiting on authentication endpoints. Identifies brute force vulnerabilities in OTP, password reset, and login systems. Requires explicit authorization for authorized security assessments only. Includes shadow-throttle detection and enumeration techniques.

Business Logic Vulnerability Hunting

hunt-business-logic

sickn33/agentic-awesome-skills

A skill for identifying and exploiting business logic vulnerabilities in web applications, focusing on payment flows, verification bypasses, rate-limiting issues, and unprotected internal surfaces. Requires explicit authorization for testing.

Hunt CAPTCHA Bypass

hunt-captcha-bypass

sickn33/agentic-awesome-skills

This skill helps identify CAPTCHA bypass vulnerabilities in web applications by testing various patterns such as omitting the CAPTCHA field, sending empty values, replaying tokens, and testing alternate endpoints. It is intended for authorized security assessments only.

CI/CD Pipeline Vulnerability Hunting

sickn33/agentic-awesome-skills

This skill identifies security vulnerabilities in CI/CD pipelines, focusing on Jenkins Script Console, GitHub Actions workflows, and self-hosted runners. It covers techniques like Pwnrequest injection, credential store dumping, and Terraform state leakage. Requires explicit authorization for offensive security assessments.

Hunt Clickjacking Web Vulnerabilities

hunt-clickjacking

sickn33/agentic-awesome-skills

This skill focuses on identifying clickjacking vulnerabilities where malicious sites overlay transparent iframes over legitimate pages to trick users into unintended actions. It involves checking security headers like X-Frame-Options and CSP, verifying if sensitive actions can be triggered via framing, and ensuring proper authorization before testing. It is strictly for authorized security assessments and bug bounty programs.

CSRF Vulnerability Hunting

sickn33/agentic-awesome-skills

A skill for hunting CSRF vulnerabilities in web applications. Covers raw HTTP client techniques, token bypass methods, and high-value target identification, with an emphasis on authorized testing.

Hunt Client-Side DOM Vulnerabilities

sickn33/agentic-awesome-skills

This skill enables the identification and exploitation of client-side DOM vulnerabilities, including DOM Clobbering, PostMessage bypasses, Service Worker abuse, and CSS exfiltration. It is designed for authorized security assessments to discover high-value attack chains that bypass server-side filters. Users must obtain explicit written permission before testing any target.

File Upload Bug Hunter

hunt-file-upload

sickn33/agentic-awesome-skills

This skill provides techniques for hunting file upload vulnerabilities, including content-type bypass, extension bypass, magic bytes spoofing, SVG XSS, ImageMagick/FFmpeg SSRF, headless Chrome SSRF, and archive extraction attacks like Zip Slip. It includes prevention methods and requires explicit authorization.

Hunt Forgot Password Vulnerabilities

hunt-forgot-password

sickn33/agentic-awesome-skills

This skill identifies authentication flaws in password reset flows, including username enumeration, exposed reset tokens, token replay, and missing rate limits. It helps security professionals assess account recovery security risks and prevent unauthorized access.

GraphQL Vulnerability Hunting

sickn33/agentic-awesome-skills

Hunting skill for GraphQL vulnerabilities. Provides methodology to discover endpoints, test introspection, map schemas, and exploit authorization flaws across GraphQL and REST APIs.

gRPC Vulnerability Hunter

sickn33/agentic-awesome-skills

This skill helps identify gRPC security vulnerabilities during penetration testing. It includes fingerprinting gRPC servers, enumerating services via reflection, testing authentication bypasses, and checking for DoS risks like HTTP/2 Rapid Reset. Requires explicit authorization for offensive use.

Prev 1 2 3...27 28 293031 32 33 34 35 Next

Language