Download

Skill UI

Browse and discover 18950+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Web-security , found 258 results

Default Newest Most Downloaded

File Path Traversal Testing

file-path-traversal

sickn33/agentic-awesome-skills

Identify and exploit file path traversal vulnerabilities to read arbitrary server files. Used in security assessments to test web application security against directory traversal attacks.

GEO Technical SEO Audit

sickn33/agentic-awesome-skills

A technical SEO audit skill with GEO-specific checks for crawlability, indexability, security, performance, SSR, and AI crawler access. It helps optimize websites for AI search citation by identifying technical issues affecting visibility.

HTML Injection Vulnerability Testing

html-injection-testing

sickn33/agentic-awesome-skills

This skill enables identification and testing of HTML injection vulnerabilities in web applications to assess security risks. It involves using tools like Burp Suite and understanding HTTP structures. Strictly for authorized security assessments, defensive validation, or educational purposes in controlled environments.

Auth Bypass Hunting

hunt-auth-bypass

sickn33/agentic-awesome-skills

A skill for identifying and exploiting authentication bypass vulnerabilities in web applications, including SSO/SAML, OAuth, XMLRPC, and API auth layers. Provides a step-by-step methodology, attack surface signals, and crown jewel targets. For authorized security assessments only.

Cache Poisoning Hunter

hunt-cache-poison

sickn33/agentic-awesome-skills

Authorized security testing skill for hunting web cache poisoning and password reset host-header injection. Maps CDN caching layers, probes unkeyed headers such as X-Forwarded-Host, and verifies cache HIT signals to confirm exploitable poisoned responses.

Hunt CAPTCHA Bypass

hunt-captcha-bypass

sickn33/agentic-awesome-skills

This skill helps identify CAPTCHA bypass vulnerabilities in web applications by testing various patterns such as omitting the CAPTCHA field, sending empty values, replaying tokens, and testing alternate endpoints. It is intended for authorized security assessments only.

Hunt Clickjacking Web Vulnerabilities

hunt-clickjacking

sickn33/agentic-awesome-skills

This skill focuses on identifying clickjacking vulnerabilities where malicious sites overlay transparent iframes over legitimate pages to trick users into unintended actions. It involves checking security headers like X-Frame-Options and CSP, verifying if sensitive actions can be triggered via framing, and ensuring proper authorization before testing. It is strictly for authorized security assessments and bug bounty programs.

Host Header Injection Hunter

hunt-host-header

sickn33/agentic-awesome-skills

A security skill for identifying and exploiting Host header injection vulnerabilities, including password reset poisoning, web cache poisoning, and routing-based SSRF. Provides step-by-step testing methodology and commands for authorized assessments only. Built from public research and real-world findings.

HTML Injection Hunting

hunt-html-injection

sickn33/agentic-awesome-skills

This skill helps security researchers identify HTML injection vulnerabilities in web applications. It provides techniques for detecting unescaped user input, escalating to XSS, and proving impact with unique canaries. Recommended for authorized penetration testing and bug bounty engagements.

Race Condition Vulnerability Hunting

hunt-race-condition

sickn33/agentic-awesome-skills

A specialized security skill for identifying and exploiting race condition vulnerabilities in web applications. Focuses on synchronized request attacks, double-spending, and bypassing access controls. Requires explicit authorization and defensive guidance protocols before execution.

Source Code Leak Hunting

hunt-source-leak

sickn33/agentic-awesome-skills

Authorized security testing skill for hunting exposed source maps, .env files, .git directories, and Swagger/OpenAPI specs to uncover leaked credentials, internal endpoints, and auth logic gaps in web targets.

Discover SPA Hidden API Routes

sickn33/agentic-awesome-skills

Extract backend API routes from SPA JavaScript bundles to identify missing authentication or broken access control vulnerabilities. Test endpoints without credentials to find unauthenticated data exposure and security gaps in web applications.

Prev 1 2 3...17 18 192021 22 Next

Language