Download

Skill UI

Browse and discover 18950+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Vulnerability , found 226 results

Default Newest Most Downloaded

HTML Injection Vulnerability Testing

html-injection-testing

sickn33/agentic-awesome-skills

This skill enables identification and testing of HTML injection vulnerabilities in web applications to assess security risks. It involves using tools like Burp Suite and understanding HTTP structures. Strictly for authorized security assessments, defensive validation, or educational purposes in controlled environments.

Business Logic Vulnerability Hunting

hunt-business-logic

sickn33/agentic-awesome-skills

A skill for identifying and exploiting business logic vulnerabilities in web applications, focusing on payment flows, verification bypasses, rate-limiting issues, and unprotected internal surfaces. Requires explicit authorization for testing.

CI/CD Pipeline Vulnerability Hunting

sickn33/agentic-awesome-skills

This skill identifies security vulnerabilities in CI/CD pipelines, focusing on Jenkins Script Console, GitHub Actions workflows, and self-hosted runners. It covers techniques like Pwnrequest injection, credential store dumping, and Terraform state leakage. Requires explicit authorization for offensive security assessments.

CSRF Vulnerability Hunting

sickn33/agentic-awesome-skills

A skill for hunting CSRF vulnerabilities in web applications. Covers raw HTTP client techniques, token bypass methods, and high-value target identification, with an emphasis on authorized testing.

Fintech GraphQL Vulnerability Hunting

hunt-fintech-graphql

sickn33/agentic-awesome-skills

A security-testing methodology for hunting fintech-specific GraphQL flaws such as ledger desync, decimal rounding abuse, idempotency replay, source-account IDOR and KYC field authorization gaps. For authorized assessments only.

GraphQL Vulnerability Hunting

sickn33/agentic-awesome-skills

Hunting skill for GraphQL vulnerabilities. Provides methodology to discover endpoints, test introspection, map schemas, and exploit authorization flaws across GraphQL and REST APIs.

gRPC Vulnerability Hunter

sickn33/agentic-awesome-skills

This skill helps identify gRPC security vulnerabilities during penetration testing. It includes fingerprinting gRPC servers, enumerating services via reflection, testing authentication bypasses, and checking for DoS risks like HTTP/2 Rapid Reset. Requires explicit authorization for offensive use.

IDOR Vulnerability Hunting

sickn33/agentic-awesome-skills

A security hunting skill for IDOR vulnerabilities, built from 26 public bug bounty reports. Provides methodology, attack surface signals, and payload patterns for authorized security assessments.

Laravel Vulnerability Hunting

sickn33/agentic-awesome-skills

Identifies and tests Laravel-specific security flaws such as Ignition RCE, Telescope/Horizon panel exposure, .env and APP_KEY leakage, and signed URL bypass. Intended for authorized penetration testing only.

Misc Vulnerability Hunting

sickn33/agentic-awesome-skills

A comprehensive skill for identifying miscellaneous security vulnerabilities like access control failures, information disclosure, and misconfigurations. Based on 225 public bug bounty reports, it helps hunters target SaaS platforms, identity flows, and internal APIs to find high-value issues.

Next.js Vulnerability Hunter

sickn33/agentic-awesome-skills

This skill helps identify and exploit specific vulnerabilities in Next.js applications, such as Server Actions authentication bypasses, middleware bypasses, and SSRF via image optimization. It provides commands for fingerprinting, version detection, and testing attack vectors. Requires explicit written authorization for target scope.

Node.js Vulnerability Hunting

sickn33/agentic-awesome-skills

This skill helps identify and exploit specific vulnerabilities in Node.js applications. It covers techniques like prototype pollution, Express trust proxy abuse, and template engine SSTI. Users must have explicit authorization before testing. It includes fingerprinting, detection, and exploitation chains for critical security issues.

Prev 1 2 3...13 14 151617 18 19 Next

Language