Skill UI

Operate 20+ security tools like Nmap, SQLMap, and Nuclei via structured workflows for authorized penetration testing, vulnerability scanning, and exploitation. Supports information gathering, web exploitation, and password cracking.

Master essential security scanning tools for network discovery, vulnerability assessment, web application testing, wireless security, and compliance validation, covering tool selection, configuration, and authorized usage.

This skill enables comprehensive SQL injection vulnerability assessments on web applications to identify database security flaws and validate input sanitization. It supports detection of in-band, blind, and out-of-band attack vectors. Users can demonstrate exploitation techniques and extract data for authorized security testing purposes only. Requires explicit written permission before execution.

Provides a structured reference for the 100 most critical web application vulnerabilities. Enables systematic vulnerability identification, impact assessment, and remediation guidance. Suitable for authorized security assessments and educational purposes.

A comprehensive asset discovery pipeline for authorized security assessments. It automates subdomain enumeration, live host detection, URL crawling, and vulnerability scanning using tools like subfinder, httpx, nuclei, and katana, delivering prioritized URL lists for penetration testing.

A comprehensive skill for conducting client-side injection vulnerability assessments on web applications. It identifies XSS and HTML injection flaws, demonstrates exploitation techniques for session hijacking and credential theft, and validates input sanitization and output encoding mechanisms. Includes practical examples and strict safety guardrails.