Download

Skill UI

Browse and discover 19166+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Vulnerabilities , found 422 results

Default Newest Most Downloaded

Hunt Clickjacking Web Vulnerabilities

hunt-clickjacking

sickn33/agentic-awesome-skills

This skill focuses on identifying clickjacking vulnerabilities where malicious sites overlay transparent iframes over legitimate pages to trick users into unintended actions. It involves checking security headers like X-Frame-Options and CSP, verifying if sensitive actions can be triggered via framing, and ensuring proper authorization before testing. It is strictly for authorized security assessments and bug bounty programs.

CSRF Vulnerability Hunting

sickn33/agentic-awesome-skills

A skill for hunting CSRF vulnerabilities in web applications. Covers raw HTTP client techniques, token bypass methods, and high-value target identification, with an emphasis on authorized testing.

Hunt Client-Side DOM Vulnerabilities

sickn33/agentic-awesome-skills

This skill enables the identification and exploitation of client-side DOM vulnerabilities, including DOM Clobbering, PostMessage bypasses, Service Worker abuse, and CSS exfiltration. It is designed for authorized security assessments to discover high-value attack chains that bypass server-side filters. Users must obtain explicit written permission before testing any target.

File Upload Bug Hunter

hunt-file-upload

sickn33/agentic-awesome-skills

This skill provides techniques for hunting file upload vulnerabilities, including content-type bypass, extension bypass, magic bytes spoofing, SVG XSS, ImageMagick/FFmpeg SSRF, headless Chrome SSRF, and archive extraction attacks like Zip Slip. It includes prevention methods and requires explicit authorization.

Hunt Forgot Password Vulnerabilities

hunt-forgot-password

sickn33/agentic-awesome-skills

This skill identifies authentication flaws in password reset flows, including username enumeration, exposed reset tokens, token replay, and missing rate limits. It helps security professionals assess account recovery security risks and prevent unauthorized access.

GraphQL Vulnerability Hunting

sickn33/agentic-awesome-skills

Hunting skill for GraphQL vulnerabilities. Provides methodology to discover endpoints, test introspection, map schemas, and exploit authorization flaws across GraphQL and REST APIs.

gRPC Vulnerability Hunter

sickn33/agentic-awesome-skills

This skill helps identify gRPC security vulnerabilities during penetration testing. It includes fingerprinting gRPC servers, enumerating services via reflection, testing authentication bypasses, and checking for DoS risks like HTTP/2 Rapid Reset. Requires explicit authorization for offensive use.

Host Header Injection Hunter

hunt-host-header

sickn33/agentic-awesome-skills

A security skill for identifying and exploiting Host header injection vulnerabilities, including password reset poisoning, web cache poisoning, and routing-based SSRF. Provides step-by-step testing methodology and commands for authorized assessments only. Built from public research and real-world findings.

HTML Injection Hunting

hunt-html-injection

sickn33/agentic-awesome-skills

This skill helps security researchers identify HTML injection vulnerabilities in web applications. It provides techniques for detecting unescaped user input, escalating to XSS, and proving impact with unique canaries. Recommended for authorized penetration testing and bug bounty engagements.

HTTP Request Smuggling Analysis

hunt-http-smuggling

sickn33/agentic-awesome-skills

This skill covers identifying and exploiting HTTP request smuggling vulnerabilities (CL.TE, TE.CL, H2.CL, H2.TE). It includes fingerprinting front-end servers, crafting payloads for cache poisoning, and harvesting credentials via backend desyncs. Requires authorization and defensive guidance protocols.

IDOR Vulnerability Hunting

sickn33/agentic-awesome-skills

A security hunting skill for IDOR vulnerabilities, built from 26 public bug bounty reports. Provides methodology, attack surface signals, and payload patterns for authorized security assessments.

Hunt JWT Crypto Failures

hunt-jwt-crypto

sickn33/agentic-awesome-skills

This skill identifies and exploits JWT cryptographic weaknesses such as alg:none and key confusion attacks. It helps security professionals find critical vulnerabilities in authentication systems by forging tokens to bypass security checks and gain unauthorized access.

Prev 1 2 3...28 29 303132 33 34 35 36 Next

Language