Skill UI

A specialized security skill for identifying and exploiting race condition vulnerabilities in web applications. Focuses on synchronized request attacks, double-spending, and bypassing access controls. Requires explicit authorization and defensive guidance protocols before execution.

Extract backend API routes from SPA JavaScript bundles to identify missing authentication or broken access control vulnerabilities. Test endpoints without credentials to find unauthenticated data exposure and security gaps in web applications.

This skill provides systematic methodologies for identifying and exploiting Insecure Direct Object Reference (IDOR) vulnerabilities in web applications. It covers detection techniques using parameter manipulation, exploitation via Burp Suite, and remediation strategies. Requires authorized security assessments and multiple test accounts to verify cross-user access. Outputs include vulnerability reports, proof of concept, and remediation recommendations.

A skill for reverse engineering front-end web applications. It helps locate API signature chains, analyze encrypted request parameters, sample runtime behavior, and reproduce logic locally in Node.js for evidence-based output. Suitable for security assessments and understanding client-side encryption.

This skill specializes in secure mobile application development, focusing on input validation, WebView security, and mobile-specific security patterns. It covers secure data storage, authentication implementation, and platform-specific vulnerabilities for iOS and Android. Ideal for building security-first mobile apps that protect sensitive data against common attack vectors like injection and man-in-the-middle attacks.

This skill provides a comprehensive command reference for penetration testing tools. It covers network scanning with Nmap, exploitation via Metasploit, password cracking, and web application testing. Users can quickly lookup commands for security assessments, vulnerability identification, and payload generation. It includes examples for host discovery, port scanning, service detection, and common exploit usage.

Master essential security scanning tools for network discovery, vulnerability assessment, web application testing, wireless security, and compliance validation, covering tool selection, configuration, and authorized usage.

This skill enables comprehensive SQL injection vulnerability assessments on web applications to identify database security flaws and validate input sanitization. It supports detection of in-band, blind, and out-of-band attack vectors. Users can demonstrate exploitation techniques and extract data for authorized security testing purposes only. Requires explicit written permission before execution.