Skill UI

A professional methodology for writing penetration test and red team reports, covering executive summaries, technical findings, CVSS scoring, evidence handling, remediation tracking, retest notes, and delivery formats for clients and internal teams.

Methodology for passive Wi-Fi reconnaissance: choose compatible adapters, enable monitor mode, set regulatory domains, sweep 2.4/5/6 GHz bands, identify hidden SSIDs, clients, vendors, and encryption before active wireless attacks.

A comprehensive playbook for identifying and exploiting clickjacking vulnerabilities (UI redress). Learn how to test if target pages can be framed, bypass security headers like X-Frame-Options and CSP frame-ancestors, and execute high-impact actions through invisible iframes. This guide covers single-click, multi-step, and drag-and-drop attack vectors, applicable to sensitive endpoints like account deletion or admin panels.

An expert playbook detailing DNS rebinding techniques to bypass the Same-Origin Policy (SOP). This method is used in penetration testing to exploit client-side applications that rely on DNS resolution for origin checks, allowing attackers to trick the browser into sending requests to internal, non-publicly accessible services (like cloud metadata endpoints) while maintaining a seemingly trusted origin.

A sophisticated payload bypass technique targeting Java applications. It exploits the silent loss of high 8 bits when 16-bit Java characters are cast or written as 8-bit bytes. This allows attackers to bypass WAF/IDS security measures by making the WAF see harmless Unicode, while the backend service processes the original malicious ASCII byte payload. Ideal for blind SQLi, deserialization RCE, and path traversal. This primitive affects major frameworks like Tomcat, Spring, Jackson, and HttpClient.

A comprehensive guide detailing various 802.11 management frame attacks, including deauthentication and disassociation. It covers targeted single-client deauth for handshake capture, broadcast DoS attacks, and advanced action-frame exploitation to bypass PMF (802.11w). Essential for professional penetration testing and wireless vulnerability assessment.

A comprehensive methodology designed for authorized external reconnaissance and red-teaming operations. It covers the full attack surface mapping lifecycle, including asset discovery, confidence scoring (Tentative, Firm, Confirmed), and developing structured, evidence-based client deliverables. Essential for ethical hacking, bug bounty, and assessing an organization's external digital footprint.

This advanced playbook covers escalating prototype pollution into Remote Code Execution (RCE) and Cross-Site Scripting (XSS). It details exploitation techniques across various environments, including Node.js child_process, EJS, Pug, Handlebars, and client-side libraries like jQuery and Lodash. It is designed for security researchers and penetration testers to systematic locate and exploit deep merge sinks and framework gadgets.

This tool searches a comprehensive database of over 2500 curated open-source repositories for tools related to Large Language Models (LLMs), ChatGPT, RAG, agents, and NLP. It interprets natural language queries, converts non-English inputs to core English keywords, and systematically filters results across multiple specialized categories (e.g., LangChain, Chatbots, CLIs). Use it whenever the user needs to find specific AI development libraries or open-source AI tooling.

A powerful skill that enables natural-language interaction with complex DeFi protocols across multiple EVM chains. It acts as a non-custodial agent, interpreting user prompts (e.g., 'swap X for Y') into simulated, multi-step transactions (like approve + swap). It utilizes account abstraction (EIP-7702/ERC-4337) to simulate and queue secure, user-signed transactions via the CLI, making advanced DeFi accessible from the terminal.

This CLI alias functions as a command for gracefully canceling an active PUA loop, mirroring the functionality of the Claude Code `/pua:cancel-loop` command. It cleans up loop state and worktree references, ensuring the cancellation event is recorded. It also safely manages configuration files, preserving unknown fields in `~/.pua/config.json`.

This utility serves as a Command Line Interface (CLI) alias for managing 'flavor' profiles within AI code environments (like Claude Code). It allows users to set or select specific configuration flavors in the ~/.pua/config.json file. Crucially, it is designed to safely update the configuration by preserving any unknown fields, ensuring no unrelated settings are accidentally overwritten.