Skill UI

A security skill for identifying and exploiting Host header injection vulnerabilities, including password reset poisoning, web cache poisoning, and routing-based SSRF. Provides step-by-step testing methodology and commands for authorized assessments only. Built from public research and real-world findings.

This skill helps security researchers identify HTML injection vulnerabilities in web applications. It provides techniques for detecting unescaped user input, escalating to XSS, and proving impact with unique canaries. Recommended for authorized penetration testing and bug bounty engagements.

Hunt LDAP injection and XPath injection vulnerabilities in web applications. Covers authentication bypass, blind attribute exfiltration, and Active Directory vs generic LDAP differences. Includes attack surface signals, filter grammar, and authorized-use guidance.

Methodology for hunting open redirect flaws in web apps: parameter discovery, bypass payloads, DOM-based sinks, OAuth auth-code theft chains and SSRF escalation. Docs-only, for authorized bug bounty and pentest use.

A specialized security skill for identifying and exploiting race condition vulnerabilities in web applications. Focuses on synchronized request attacks, double-spending, and bypassing access controls. Requires explicit authorization and defensive guidance protocols before execution.

A skill for identifying Remote Code Execution (RCE) vulnerabilities across web applications and infrastructure. Based on bug bounty reports, it guides users to test command injection, template injection, and configuration flaws on admin consoles, APIs, and supply chain targets. Requires explicit authorization for ethical testing.

Authorized security testing skill for hunting exposed source maps, .env files, .git directories, and Swagger/OpenAPI specs to uncover leaked credentials, internal endpoints, and auth logic gaps in web targets.

Extract backend API routes from SPA JavaScript bundles to identify missing authentication or broken access control vulnerabilities. Test endpoints without credentials to find unauthenticated data exposure and security gaps in web applications.

A security assessment skill for identifying WebSocket vulnerabilities including Cross-Site WebSocket Hijacking (CSWSH), message tampering, handshake-layer attacks, and socket.io authorization bypasses. Requires explicit written authorization before testing. Includes reconnaissance, endpoint discovery, and exploit verification techniques for authorized security assessments.

Hunts reflected, stored and blind XSS during authorized web security assessments: reflection verification, unique canary payloads, context-based injection and out-of-band confirmation.

A comprehensive icon library and AI-driven icon generation skill for premium UI/UX design. Use it to pick coordinated Linear, Bold, Bulk, or Two-tone icon styles, generate custom icons when none exists, and integrate them as SVGs or web components with consistent sizing and alignment.

This skill provides systematic methodologies for identifying and exploiting Insecure Direct Object Reference (IDOR) vulnerabilities in web applications. It covers detection techniques using parameter manipulation, exploitation via Burp Suite, and remediation strategies. Requires authorized security assessments and multiple test accounts to verify cross-user access. Outputs include vulnerability reports, proof of concept, and remediation recommendations.