Skill UI

This comprehensive workflow guides users through a multi-phase process for assessing web application security. It is designed to systematically test for common vulnerabilities listed in the OWASP Top 10, including SQL injection, XSS, broken authentication, and access control issues. Ideal for professional penetration testing, security auditing, and bug bounty hunting.

This skill provides a framework for auditing Web3 smart contracts for security vulnerabilities. It includes pre-audit risk assessment strategies, critical bug class identification (like accounting desynchronization and access control), and Solidity code analysis techniques. Designed for authorized security assessments and educational purposes, it helps identify high-value targets and common exploit patterns in blockchain protocols.

Systematic methodologies for discovering and exploiting Windows privilege escalation vulnerabilities in authorized penetration testing, covering service path abuse, AlwaysInstallElevated, token impersonation, unquoted paths and credential harvesting.

Assess WordPress installations for common vulnerabilities and attack surfaces. Use this skill for authorized security assessments, penetration testing, and defensive validation. Includes WPScan, Metasploit, and Burp Suite integration with legal and technical constraints.

A specialized tool for auditing WordPress plugins, themes, and blocks before deployment. It checks for security vulnerabilities like SQL injection, XSS, and improper escaping, ensures API correctness, and enforces internationalization standards. Use it to review generated code or perform security assessments on WordPress environments.