Download

Skill UI

Browse and discover 19182+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search exploit , found 283 results

Default Newest Most Downloaded

Exploiting NoPac for Domain Admin Escalation

exploiting-nopac-cve-2021-42278-42287

mukul975/Anthropic-Cybersecurity-Skills

This guide details the exploitation chain for noPac, combining CVE-2021-42278 (sAMAccountName spoofing) and CVE-2021-42287 (KDC PAC confusion). It demonstrates how an attacker can escalate from a standard domain user to Domain Admin by manipulating Active Directory tickets and performing DCSync. Primarily used in authorized red-teaming and penetration testing to validate domain security.

Exploiting NoSQL Injection Vulnerabilities

exploiting-nosql-injection-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

A comprehensive tool and guide for detecting and exploiting NoSQL injection vulnerabilities in MongoDB, CouchDB, and similar databases. It simulates advanced attacks such as authentication bypass, blind data extraction using regex, and JavaScript execution via the $where operator. Ideal for penetration testers and security researchers assessing APIs and web applications backed by NoSQL backends.

Exploiting OAuth And OIDC Misconfigurations

exploiting-oauth-misconfiguration

mukul975/Anthropic-Cybersecurity-Skills

A comprehensive guide for penetration testers detailing methods to identify and exploit misconfigurations in OAuth 2.0 and OpenID Connect (OIDC) flows. Techniques cover redirect URI manipulation, authorization code theft, token leakage via headers, and scope escalation during security assessments.

Exploiting Prototype Pollution In JavaScript

exploiting-prototype-pollution-in-javascript

mukul975/Anthropic-Cybersecurity-Skills

This skill guides the detection and exploitation of JavaScript prototype pollution vulnerabilities. It covers both client-side (DOM XSS) and server-side (RCE, Auth Bypass) attacks by injecting properties into Object.prototype using keys like `__proto__`. Use this when assessing APIs that deep-merge or clone user-controlled JSON data, or for general web application security testing.

Exploiting Race Condition Vulnerabilities In Web Apps

exploiting-race-condition-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

This skill guides penetration testers on detecting and exploiting race condition (TOCTOU) flaws in web applications. It details advanced techniques, such as using Burp Suite's Turbo Intruder and single-packet attacks, to bypass rate limits, duplicate transactions (e.g., coupon redemption), or manipulate state-changing operations. Essential for comprehensive security assessments and bug bounty hunting.

Exploiting SSRF for Internal Network Access

exploiting-server-side-request-forgery

mukul975/Anthropic-Cybersecurity-Skills

A comprehensive guide detailing the methodology for identifying and exploiting Server-Side Request Forgery (SSRF). This technique is critical in authorized penetration testing, allowing attackers to pivot from public-facing applications to internal resources. Use cases include stealing cloud provider metadata (AWS, GCP), scanning private IP ranges, and accessing internal APIs and admin panels.

Exploiting SMB Vulnerabilities via Metasploit

exploiting-smb-vulnerabilities-with-metasploit

mukul975/Anthropic-Cybersecurity-Skills

A comprehensive guide for authorized penetration testing, demonstrating how to identify and exploit critical vulnerabilities in the SMB protocol (e.g., EternalBlue, PrintNightmare). This skill covers network enumeration, lateral movement techniques (Pass-the-Hash, SMB Relay), and post-exploitation activities using Metasploit and Impacket tools to assess enterprise network security posture.

Exploiting SQL Injection Vulnerabilities

exploiting-sql-injection-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

A comprehensive guide detailing the process of identifying and exploiting SQL injection vulnerabilities in web applications. The content covers manual and automated techniques, including error-based, boolean, and time-based blind injections. Users learn to fingerprint major database engines (MySQL, MSSQL, Oracle) and utilize tools like sqlmap to demonstrate data extraction and security risks during authorized penetration tests.

Sqlmap Guide for SQL Injection Exploitation

exploiting-sql-injection-with-sqlmap

mukul975/Anthropic-Cybersecurity-Skills

This comprehensive guide details the professional process of detecting and exploiting SQL injection vulnerabilities using the powerful sqlmap tool. It covers the entire workflow, from initial vulnerability identification and basic scanning to database enumeration, data dumping, advanced exploitation (like file reading and OS command execution), and WAF bypass techniques, ensuring thorough penetration testing reporting.

Exploiting Server-Side Template Injection Vulnerabilities

exploiting-template-injection-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

This guide details the comprehensive methodology for detecting and exploiting Server-Side Template Injection (SSTI) vulnerabilities across multiple popular template engines, including Jinja2, Twig, and Freemarker. It provides step-by-step workflows, covering payload detection using basic arithmetic expressions, engine identification, and executing advanced Remote Code Execution (RCE) payloads for penetration testing purposes.

Exploiting PHP Type Juggling Vulnerabilities

exploiting-type-juggling-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

This skill details techniques for exploiting PHP's type juggling vulnerabilities, primarily caused by loose (==) comparison operators. It demonstrates how attackers can bypass authentication mechanisms, defeat magic hash function verifications, and manipulate application logic through controlled type coercion when testing web applications. Ideal for authorized security penetration testing.

Exploiting Vulnerabilities with Metasploit Framework

exploiting-vulnerabilities-with-metasploit-framework

mukul975/Anthropic-Cybersecurity-Skills

A comprehensive guide to using the Metasploit Framework for advanced penetration testing and vulnerability validation. This skill details how to confirm exploitability of identified CVEs, gather post-exploitation evidence, and validate patch remediation effectiveness. It is essential for risk-based vulnerability management and red team exercises, providing proof of real-world impact beyond simple scanner scores.

Prev 1 2 3 4 567 8 9...22 23 24 Next

Language