Download

Skill UI

Browse and discover 19087+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search exploit , found 283 results

Default Newest Most Downloaded

GraphQL Vulnerability Hunting

sickn33/agentic-awesome-skills

Hunting skill for GraphQL vulnerabilities. Provides methodology to discover endpoints, test introspection, map schemas, and exploit authorization flaws across GraphQL and REST APIs.

Host Header Injection Hunter

hunt-host-header

sickn33/agentic-awesome-skills

A security skill for identifying and exploiting Host header injection vulnerabilities, including password reset poisoning, web cache poisoning, and routing-based SSRF. Provides step-by-step testing methodology and commands for authorized assessments only. Built from public research and real-world findings.

HTTP Request Smuggling Analysis

hunt-http-smuggling

sickn33/agentic-awesome-skills

This skill covers identifying and exploiting HTTP request smuggling vulnerabilities (CL.TE, TE.CL, H2.CL, H2.TE). It includes fingerprinting front-end servers, crafting payloads for cache poisoning, and harvesting credentials via backend desyncs. Requires authorization and defensive guidance protocols.

Hunt JWT Crypto Failures

hunt-jwt-crypto

sickn33/agentic-awesome-skills

This skill identifies and exploits JWT cryptographic weaknesses such as alg:none and key confusion attacks. It helps security professionals find critical vulnerabilities in authentication systems by forging tokens to bypass security checks and gain unauthorized access.

Next.js Vulnerability Hunter

sickn33/agentic-awesome-skills

This skill helps identify and exploit specific vulnerabilities in Next.js applications, such as Server Actions authentication bypasses, middleware bypasses, and SSRF via image optimization. It provides commands for fingerprinting, version detection, and testing attack vectors. Requires explicit written authorization for target scope.

Node.js Vulnerability Hunting

sickn33/agentic-awesome-skills

This skill helps identify and exploit specific vulnerabilities in Node.js applications. It covers techniques like prototype pollution, Express trust proxy abuse, and template engine SSTI. Users must have explicit authorization before testing. It includes fingerprinting, detection, and exploitation chains for critical security issues.

NoSQL Injection Hunting

sickn33/agentic-awesome-skills

Guides authorized security testers through identifying and exploiting NoSQL injection vulnerabilities in MongoDB, Redis, and Elasticsearch, including auth bypass, blind injection, data extraction, and automation with nosqlmap.

Race Condition Vulnerability Hunting

hunt-race-condition

sickn33/agentic-awesome-skills

A specialized security skill for identifying and exploiting race condition vulnerabilities in web applications. Focuses on synchronized request attacks, double-spending, and bypassing access controls. Requires explicit authorization and defensive guidance protocols before execution.

Vector Store Attack Hunt

hunt-rag-vector

sickn33/agentic-awesome-skills

Identify and exploit vector-store and embedding-layer weaknesses in RAG pipelines, including persistent corpus poisoning and cross-tenant IDOR, for authorized security assessments.

SAML SSO Attack Hunter

sickn33/agentic-awesome-skills

Hunt SAML/SSO attacks including XML Signature Wrapping, comment injection, signature stripping, XXE, and NameID manipulation. Provides attack surface discovery, manual exploitation workflows, and triage guidance for authorized security assessments.

Hunting SSTI Vulnerabilities

sickn33/agentic-awesome-skills

Detects and exploits server-side template injection (SSTI) across Jinja2, Twig, Freemarker, ERB, Spring, Velocity, Mako, Thymeleaf, and Smarty, offering detection payloads, RCE escalation paths, and authorized testing guidance.

Subdomain Takeover Vulnerability Hunting

sickn33/agentic-awesome-skills

This skill enables security professionals to identify subdomain takeover vulnerabilities by enumerating subdomains, analyzing DNS records, and verifying unclaimed third-party resources. It is used in authorized security assessments to find high-value targets like GitHub Pages, GitLab Pages, or S3 buckets that can be exploited to serve malicious content under a trusted domain.

Prev 1 2 3...19 20 212223 24 Next

Language