Skill UI

A comprehensive guide to advanced SQL injection (SQLi) methodologies for offensive security assessments and bug bounty hunting. Covers all major injection types, including error-based, boolean/time-based blind, out-of-band, and second-order injection. Provides specific payloads and techniques for MySQL, MSSQL, PostgreSQL, Oracle, and NoSQL databases, along with methods for bypassing WAFs, exploiting GraphQL, WebSocket, and modern API filters. Includes full automation workflows using tools like sqlmap.

This comprehensive guide provides a detailed methodology for detecting and exploiting Server-Side Request Forgery (SSRF) vulnerabilities. It covers basic, blind, and out-of-band techniques, including testing against cloud metadata endpoints (AWS/GCP/Azure) and advanced bypass methods like DNS rebinding. It is an essential resource for web application security testing and bug bounty hunting.

This skill provides a comprehensive checklist and methodology for identifying Server-Side Template Injection (SSTI) vulnerabilities. It covers template engine identification (e.g., Jinja2, Twig), polyglot payload generation, systematic detection methods, and executing engine-specific Remote Code Execution (RCE) payloads. Ideal for security professionals testing web application input sanitization.

A deep-dive curriculum into core memory corruption vulnerability classes, covering topics like stack/heap buffer overflows, Use-After-Free (UAF), integer overflows, and format strings. This guide uses real-world CVE case studies (e.g., QNAP, Chrome) to illustrate attack vectors, impact analysis, and modern mitigation techniques. Ideal for cybersecurity professionals, penetration testers, and students learning exploit development.

This skill provides a deep dive into modern Windows exploit mitigations, including ASLR, DEP/NX, CFG, and CET. It covers how these core protections work, techniques for detecting them, and advanced methodologies for analyzing bypass strategies. It is essential reading for security researchers and penetration testers planning advanced exploitation chains against modern operating systems.

This skill provides comprehensive strategies for testing OneNote integrations within CI/CD pipelines. It supports mock-only PR checks using MSW for zero-dependency testing, and robust live integration tests for nightly builds using Azure AD credentials. Ideal for automating quality assurance when connecting OneNote features via the Graph API.

This comprehensive guide serves as a complete error decoder for the OneNote Graph API. It analyzes major HTTP status codes (400, 403, 404, 429, 500, 502, 507) and provides root cause analysis, diagnostic steps, and code fixes for common issues. It specifically addresses critical failure modes like deprecated authentication methods and silent 200 OK failures, helping developers debug complex API integrations in production.

This skill provides comprehensive CRUD (Create, Read, Update, Delete) capabilities for OneNote's entire hierarchical structure, including Notebooks, Section Groups, Sections, and Pages, using the Microsoft Graph API. It is designed for complex workflow automation, addressing critical pain points like strict XHTML formatting, delegated credential handling, and managing the unique content retrieval process in a production-safe manner.

A comprehensive guide and implementation pattern for querying, searching, and paginating OneNote content using the Microsoft Graph API. This skill addresses the limitations of the standard OneNote search endpoint, providing robust methods for cross-notebook querying, advanced OData filtering on metadata, and client-side full-text indexing for body content. Ideal for building complex knowledge retrieval systems that handle large, distributed result sets.

This skill provides comprehensive strategies to optimize resource usage and mitigate rate limits when integrating with the OneNote Graph API. It focuses on reducing the operational 'cost' of making API calls by implementing metadata caching (TTL), utilizing JSON batch requests, and performing delta synchronization instead of full list fetches. Essential for high-volume, stable OneNote enterprise integrations.

Provides a comprehensive, production-ready deployment solution for OneNote integrations in containerized environments. This skill addresses critical issues like MSAL token persistence (supporting both file and Redis caches), implementing deep health/readiness checks that validate actual Graph API connectivity, and managing graceful shutdowns. Ideal for containerizing OneNote services for robust, scalable production use with Docker and Kubernetes.

This skill provides a comprehensive guide and code examples for creating a complete OneNote structure (Notebook, Section, and Page) using the Microsoft Graph API. It specifically addresses the critical technical requirement that OneNote content must follow strict XHTML standards, detailing common HTML pitfalls (such as unclosed tags, unsupported attributes, and merge cell usage) that can lead to silent content corruption during API calls.