Download

Skill UI

Browse and discover 10321+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Vulnerability-Assessment , found 49 results

Default Newest Most Downloaded

Xss Vulnerability Penetration Testing

testing-for-xss-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

This comprehensive skill guides the testing of web applications for Cross-Site Scripting (XSS) vulnerabilities. It covers reflected, stored, and DOM-based injection points. Testers learn to map input/output contexts, craft context-appropriate payloads, and bypass complex sanitization and CSP protections, ensuring thorough client-side security assessment.

SBOM Supply Chain Vulnerability Analyzer

analyzing-sbom-for-supply-chain-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

This tool parses Software Bill of Materials (SBOM) in CycloneDX and SPDX formats. It correlates components against the NVD CVE database to identify known supply chain vulnerabilities. Key features include building dependency graphs, calculating transitive risk scores, and generating compliance reports for regulatory assessment.

HTML Injection Testing Guide

html-injection-testing

zebbern/claude-code-guide

Covers comprehensive HTML injection attack scenarios, detection tips, and tooling so security testers can validate and document injection points, phishing overlays, and reflected or stored payloads during vulnerability assessments.

Crash Analysis and Exploitability Assessment

offensive-crash-analysis

SnailSploit/Claude-Red

This skill guides the comprehensive process of crash triage, enabling the assessment of vulnerability exploitability. It covers advanced techniques using debuggers (WinDbg/GDB), sanitizers (ASAN/MSAN), and interpreting low-level data like stack traces and register dumps. It is essential for vulnerability researchers analyzing crash dumps or fuzzer-generated failures to identify root causes and potential attack vectors.

File Upload Vulnerability Checklist

offensive-file-upload

SnailSploit/Claude-Red

A comprehensive checklist and methodology for penetration testing file upload endpoints. Covers critical vulnerabilities such as MIME type bypass, extension bypass, magic byte manipulation, path traversal, and stored XSS. Essential for web application security assessment and bug bounty hunting, guiding testers through basic testing to advanced exploitation techniques like Null Byte injection and double extensions.

GraphQL Security Vulnerability Assessment

offensive-graphql

SnailSploit/Claude-Red

A comprehensive checklist designed for assessing the security posture of GraphQL endpoints. It covers advanced vulnerabilities such as introspection abuse, IDOR, query depth/complexity DoS, injection attacks (SQLi/NoSQLi), and authorization bypass mechanisms. Essential for professional penetration testing and bug bounty hunting.

Business Logic Vulnerability Expert Playbook

business-logic-vulnerabilities

yaklang/hack-skills

This playbook is designed for advanced vulnerability assessment, covering flaws invisible to automated scanners. It guides testing for race conditions, complex workflow bypasses, state machine manipulation, financial parameter tampering (e.g., price/quantity manipulation), and coupon/credit abuse in multi-step applications. Essential for deep manual security testing.

Dependency Confusion Supply Chain Attacks

dependency-confusion

yaklang/hack-skills

An expert playbook for identifying and simulating dependency confusion attacks in software supply chains. It comprehensively covers how internal package names can be squatted on public registries, leading to malicious code execution via package manager lifecycle hooks (e.g., npm, pip, Maven). Use this guide for authorized red-team exercises and deep vulnerability assessment of build processes.

Structured Web And API Security Testing

yaklang/hack-skills

A comprehensive, top-level routing skill for authorized web security assessment, bug bounty hunting, and API penetration testing. It guides the agent through a structured methodology, covering the entire attack lifecycle from reconnaissance and vulnerability triage (XSS, SQLi, IDOR, etc.) to advanced business logic flaw identification. Use this skill to ensure thorough, systematic security analysis.

Wi-Fi Deauth and Network Attack Toolkit

offensive-deauth-disassoc

SnailSploit/Claude-Red

A comprehensive guide detailing various 802.11 management frame attacks, including deauthentication and disassociation. It covers targeted single-client deauth for handshake capture, broadcast DoS attacks, and advanced action-frame exploitation to bypass PMF (802.11w). Essential for professional penetration testing and wireless vulnerability assessment.

Security Reconnaissance and Testing Methodology Router

yaklang/hack-skills

This router serves as the initial guide for comprehensive security assessments on new targets or unknown attack surfaces. It helps users map the scope, discover hidden assets, perform detailed technology fingerprinting, build endpoint inventories, and strategically plan the optimal testing path before diving into specific vulnerability checks (e.g., API, Auth, Injection).

Bumblebee Supply Chain Security Scanner

sickn33/antigravity-awesome-skills

This skill runs the Bumblebee scanner on macOS/Linux to perform read-only inventory and exposure checks. It detects compromised packages, developer tools, and host configurations against known security advisories. It is primarily used for supply-chain incident response and vulnerability assessment, providing developers with a clear picture of local system exposure.

Prev 1 2 345 Next

Language