Skill UI

A comprehensive guide detailing various 802.11 management frame attacks, including deauthentication and disassociation. It covers targeted single-client deauth for handshake capture, broadcast DoS attacks, and advanced action-frame exploitation to bypass PMF (802.11w). Essential for professional penetration testing and wireless vulnerability assessment.

A comprehensive playbook detailing how open redirect vulnerabilities can be exploited. Covers finding redirect parameters, advanced filter bypass techniques (e.g., protocol-relative, userinfo), and complex exploitation chains including OAuth token theft, SSRF, and Tabnabbing.

A comprehensive, expert playbook for challenging insecure file upload mechanisms. It provides advanced attack vectors covering validation bypass (magic bytes, extension), storage path abuse (traversal, overwrite), and exploitation of post-upload processing chains (XXE, RCE, CMDi). Essential for deep security auditing of file-handling workflows.

An expert-level playbook covering non-obvious XSS techniques, advanced payload selection across various sinks (DOM, SVG, HTML attributes, JavaScript), and sophisticated defense bypass strategies. Use this guide for real-world penetration testing, including WAF bypass, CSP bypass, HttpOnly bypass, and XS-Leaks side channel exploitation. It assumes deep knowledge of web vulnerability mechanics.

This skill helps organizations determine mandatory reporting duties, receiving authorities, and precise deadlines following a security incident, data breach, or vulnerability exploitation. It synthesizes reporting requirements from major EU regimes, including GDPR, NIS2, DORA, and the Cyber Resilience Act, providing a cited map of obligations based on the entity's role and location. It determines *what* must be reported, citing official legal texts.

A practical methodology for turning a known vulnerability into a stable working remote exploit. Covers stack overflow, heap exploitation, and Linux kernel pwn, addressing real-world gaps between local CTF success and reliable remote execution: libc version mismatches, heap spray timing, SMEP/SMAP/KASLR, stack alignment, and network buffering. Uses pwntools with GEF/pwndbg, ROPgadget/Ropper, one_gadget, libc-database, and qemu-system.

Comprehensive techniques for testing REST, SOAP, and GraphQL APIs during bug bounty hunting and penetration testing. Covers vulnerability discovery, authentication bypass, IDOR exploitation, injection attacks, and API-specific vectors.

Master the full penetration testing lifecycle: reconnaissance, scanning, vulnerability analysis, exploitation and reporting. Covers tools like Nmap, Nikto, theHarvester, OSINT techniques, OWASP web testing and professional report deliverables for authorized security assessments only.

This skill helps identify and exploit specific vulnerabilities in Node.js applications. It covers techniques like prototype pollution, Express trust proxy abuse, and template engine SSTI. Users must have explicit authorization before testing. It includes fingerprinting, detection, and exploitation chains for critical security issues.

This skill provides systematic methodologies for identifying and exploiting Insecure Direct Object Reference (IDOR) vulnerabilities in web applications. It covers detection techniques using parameter manipulation, exploitation via Burp Suite, and remediation strategies. Requires authorized security assessments and multiple test accounts to verify cross-user access. Outputs include vulnerability reports, proof of concept, and remediation recommendations.

This skill provides a comprehensive command reference for penetration testing tools. It covers network scanning with Nmap, exploitation via Metasploit, password cracking, and web application testing. Users can quickly lookup commands for security assessments, vulnerability identification, and payload generation. It includes examples for host discovery, port scanning, service detection, and common exploit usage.

Operate 20+ security tools like Nmap, SQLMap, and Nuclei via structured workflows for authorized penetration testing, vulnerability scanning, and exploitation. Supports information gathering, web exploitation, and password cracking.