Skill UI

This comprehensive guide details the professional process of detecting and exploiting SQL injection vulnerabilities using the powerful sqlmap tool. It covers the entire workflow, from initial vulnerability identification and basic scanning to database enumeration, data dumping, advanced exploitation (like file reading and OS command execution), and WAF bypass techniques, ensuring thorough penetration testing reporting.

This skill details how to execute HTTP Parameter Pollution (HPP) attacks. HPP exploits differences in how web applications and Web Application Firewalls (WAFs) process duplicate parameters within a single request (e.g., query strings or POST bodies). It is crucial for penetration testing to bypass input validation, WAF rules, and uncover parameter parsing inconsistencies in APIs and web forms.

This guide details advanced techniques for bypassing Web Application Firewalls (WAFs). It covers methods such as payload obfuscation, advanced URL encoding, HTTP method manipulation (PUT, PATCH, etc.), parameter pollution, and utilizing specialized tools like SQLMap tamper scripts to smuggle exploit payloads (e.g., SQLi, XSS) past perimeter security controls. Essential for penetration testing and red team engagements.

A speed-optimized, comprehensive checklist for rapid security assessments. This guide covers full-cycle penetration testing methodologies, including deep reconnaissance (WAF bypass, CDN mapping), access control testing (MFA, JWT, API keys), and session management vulnerabilities. Ideal for time-boxed engagements, CTF competition, or initial service triage.

This skill provides a comprehensive operational checklist for identifying and exploiting HTTP Parameter Pollution (HPP) vulnerabilities. It details how various web technologies (ASP.NET, PHP, Python, etc.) handle duplicate parameters differently (e.g., first-wins, last-wins, concatenation). Use this skill during penetration testing to discover flaws in parameter parsing, which can lead to bypassing WAFs, performing logic manipulation, or achieving unauthorized access.

A comprehensive guide to advanced SQL injection (SQLi) methodologies for offensive security assessments and bug bounty hunting. Covers all major injection types, including error-based, boolean/time-based blind, out-of-band, and second-order injection. Provides specific payloads and techniques for MySQL, MSSQL, PostgreSQL, Oracle, and NoSQL databases, along with methods for bypassing WAFs, exploiting GraphQL, WebSocket, and modern API filters. Includes full automation workflows using tools like sqlmap.

This comprehensive checklist details advanced methods for bypassing Web Application Firewalls (WAFs) during security assessments. Techniques covered include encoding bypass (URL, Unicode, double encoding), HTTP header manipulation, IP rotation, payload obfuscation, and fingerprinting specific WAF vendors (e.g., Cloudflare, Akamai). It is essential for penetration testers evaluating the robustness of web defenses.

A sophisticated payload bypass technique targeting Java applications. It exploits the silent loss of high 8 bits when 16-bit Java characters are cast or written as 8-bit bytes. This allows attackers to bypass WAF/IDS security measures by making the WAF see harmless Unicode, while the backend service processes the original malicious ASCII byte payload. Ideal for blind SQLi, deserialization RCE, and path traversal. This primitive affects major frameworks like Tomcat, Spring, Jackson, and HttpClient.

HTTP Parameter Pollution (HPP) occurs when a single request contains multiple instances of the same parameter key. Different components in the request path (e.g., WAFs, proxies, application frameworks) may parse these duplicate keys using different rules (first value, last value, array join). This skill teaches how to exploit these discrepancies to bypass security checks, execute SSRF, or manipulate business logic.

This expert playbook details advanced attack vectors specific to the HTTP/2 protocol. It covers sophisticated techniques such as h2c smuggling, exploiting pseudo-header discrepancies, HPACK compression vulnerabilities, and abusing stream multiplexing. Use this skill for professional penetration testing and security auditing of H2 services, especially for bypassing proxy-level controls and WAFs.

This expert playbook covers advanced techniques for testing HTTP request smuggling and desynchronization vulnerabilities. It is critical when front proxies, CDNs, or load balancers disagree with the origin server on message framing (Content-Length vs Transfer-Encoding), or during protocol downgrades (HTTP/2 to HTTP/1). Use this to uncover deep security flaws like WAF bypass and session hijacking.

A comprehensive and advanced playbook for mastering SQL injection techniques. It covers critical areas including WAF bypass, out-of-band data exfiltration, second-order injection, and exploitation strategies across major database systems (MySQL, MSSQL, Oracle, PostgreSQL). Essential for professional penetration testing and security auditing.