Download

Skill UI

Browse and discover 9369+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search c-pro , found 5784 results

Default Newest Most Downloaded

Subdomain Takeover Detection And Exploitation

subdomain-takeover

yaklang/hack-skills

This playbook details the methodology for detecting and exploiting subdomain takeover vulnerabilities. It focuses on identifying CNAME/NS/MX records pointing to deprovisioned or unclaimed cloud resources (e.g., AWS S3 buckets, Heroku apps). Understanding these weaknesses allows attackers to serve malicious content under the victim's trusted domain, leading to phishing, credential theft, and security bypasses.

Symbolic Execution and Constraint Solving Playbook

symbolic-execution-tools

yaklang/hack-skills

This playbook provides advanced techniques for symbolic execution using angr, Z3, and Unicorn Engine. It covers automating CTF challenges, handling constraint solving patterns, function hooking, memory manipulation, and emulating custom virtual machines for binary analysis and key recovery.

Expert Symmetric Cipher Attack Playbook

symmetric-cipher-attacks

yaklang/hack-skills

This playbook provides expert-level techniques for cryptanalysis of symmetric encryption. It details how to exploit weaknesses in various modes and algorithms, including CBC padding oracle attacks, ECB mode exploitation, bit flipping attacks, stream cipher key reuse, and meet-in-the-middle attacks. Essential for authorized penetration testing and CTF challenges.

Network Tunneling and Pivoting Playbook

tunneling-and-pivoting

yaklang/hack-skills

This expert playbook details advanced techniques for establishing secure network tunnels and pivoting through compromised hosts. It covers various methods like SSH (Local, Remote, Dynamic, Jump), Chisel, Ligolo-ng, socat, and ProxyChains. Use this guide to bypass network restrictions, establish persistent access, and perform multi-layered lateral movement within restricted environments.

Unauthorized Access to Common Services

unauthorized-access-common-services

yaklang/hack-skills

A comprehensive playbook detailing expert techniques for exploiting common network services (such as Redis, Rsync, PHP-FPM, AJP, etc.) when they are exposed without proper authentication or weak access controls. This guide covers various methods including RCE, data theft, and file reading, crucial for advanced penetration testing and infrastructure security assessments.

Insecure File Upload Vulnerability Testing

upload-insecure-files

yaklang/hack-skills

A comprehensive, expert playbook for challenging insecure file upload mechanisms. It provides advanced attack vectors covering validation bypass (magic bytes, extension), storage path abuse (traversal, overwrite), and exploitation of post-upload processing chains (XXE, RCE, CMDi). Essential for deep security auditing of file-handling workflows.

VM Bytecode Reverse Engineering Playbook

vm-and-bytecode-reverse

yaklang/hack-skills

This playbook provides expert techniques for reverse engineering custom virtual machines and proprietary bytecode. It guides users through identifying dispatchers (switch/table), mapping unknown opcodes, reconstructing custom ISAs, and writing dedicated disassemblers. Essential for solving complex CTF challenges, analyzing protected software, or tackling custom runtime environments.

Waf Bypass Techniques and Evasion Playbook

waf-bypass-techniques

yaklang/hack-skills

A comprehensive playbook detailing advanced methods to bypass Web Application Firewalls (WAFs) when standard injection payloads (SQLi, XSS, RCE) are blocked. Techniques include encoding (URL, Unicode, Hex), protocol abuse (HTTP/2, chunking), parameter pollution, and path normalization tricks, allowing security professionals to test robust application defenses.

Advanced Web Cache Deception and Poisoning

web-cache-deception

yaklang/hack-skills

A comprehensive playbook detailing expert-level techniques for exploiting web cache vulnerabilities. Covers both Web Cache Deception (stealing authenticated user data) and Web Cache Poisoning (injecting malicious content). Techniques include path confusion, unkeyed header manipulation (X-Forwarded-Host), and exploiting CDN/reverse proxy caching logic. Essential reading for penetration testers and security researchers.

Admin Language Management Utilities

webiny-admin-languages-catalog

webiny/webiny-js

This module provides essential abstractions for managing language data within the admin panel. It includes `LanguageDto` for strongly typed data structures and `useLanguages` hook for fetching and handling language-related state and logic. Use this when developing administrative features that require language catalog management.

API Database Abstraction Utilities

webiny-api-db-catalog

webiny/webiny-js

Provides essential database abstractions and utility classes for robust API development. This module includes components like FilterUtil, ValueFilter, and ValueFilterRegistry, allowing developers to implement standardized, efficient, and complex data querying and filtering logic across various database contexts.

Webiny Mailer API Abstractions

webiny-api-mailer-catalog

webiny/webiny-js

This catalog provides 11 core abstractions for implementing robust mailing functionalities within the Webiny API architecture. It includes Use Cases, Repositories, and various Event Handlers (e.g., before/after send, save). Developers should use these structured patterns to ensure their mailer logic is modular, highly testable, and follows industry best practices.

Prev 1 2 3...477 478 479480481 482 Next

Language