Download

Skill UI

Browse and discover 15799+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search injection , found 235 results

Default Newest Most Downloaded

Detect Modbus Command Injection Attacks

detecting-modbus-command-injection-attacks

mukul975/Anthropic-Cybersecurity-Skills

An advanced Intrusion Detection System (IDS) module designed for Operational Technology (OT) and ICS/SCADA environments. It monitors Modbus TCP/RTU traffic to detect unauthorized writes, anomalous function codes, malformed frames, and deviations from established communication baselines. Essential for investigating suspicious PLC register modifications and responding to industrial threats.

Detecting Malware Process Injection Techniques

detecting-process-injection-techniques

mukul975/Anthropic-Cybersecurity-Skills

A comprehensive skill for detecting advanced malware techniques, including DLL injection, process hollowing, APC injection, and thread hijacking. Utilizes memory forensics (Volatility), API monitoring (Sysmon), and behavioral analysis to identify malicious code artifacts and suspicious process activities in a deep defense context.

Detecting SQL Injection From WAF Logs

detecting-sql-injection-via-waf-logs

mukul975/Anthropic-Cybersecurity-Skills

This tool analyzes Web Application Firewall (WAF) logs (ModSecurity, AWS WAF, Cloudflare) to detect sophisticated SQL injection attack campaigns. It parses diverse log formats, identifies common SQLi payloads (UNION SELECT, OR 1=1), correlates multi-stage attacks, tracks source IPs, and generates detailed incident reports classified by OWASP standards for SOC analysts and security researchers.

Detect Supply Chain Attacks in CI/CD

detecting-supply-chain-attacks-in-ci-cd

mukul975/Anthropic-Cybersecurity-Skills

A robust security auditing tool designed to scan CI/CD pipeline configurations, such as GitHub Actions YAML, for critical supply chain vulnerabilities. It automatically detects issues like unpinned dependencies, script injection risks, secrets exposure, and dependency confusion, helping teams harden their build systems and maintain secure software development lifecycles.

Detect Process Injection Using Sysmon

detecting-t1055-process-injection-with-sysmon

mukul975/Anthropic-Cybersecurity-Skills

This guide details how to detect T1055 process injection techniques, including DLL injection, process hollowing, and remote thread creation. By analyzing specific Sysmon Event IDs (1, 7, 8, 10, 25) that track cross-process memory operations and handle access, security teams can proactively hunt for defense-evasion activities, investigate EDR alerts, or validate security monitoring coverage.

Exploiting API Injection Vulnerabilities

exploiting-api-injection-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

A comprehensive tool for testing API parameters, headers, and request bodies against various injection flaws, including SQL injection, NoSQL injection, OS command injection, LDAP injection, and SSRF. It assesses input validation and security posture according to OWASP guidelines. Use only for authorized penetration testing.

Exploiting Deep Link Vulnerabilities In Mobile Apps

exploiting-deeplink-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

A comprehensive skill for assessing mobile applications (Android and iOS) for vulnerabilities related to deep links, custom URI schemes, and intent handling. This skill identifies risks such as unauthorized access, data injection, intent hijacking, and improper validation of App Links or Universal Links, crucial for robust mobile security testing.

Exploiting Mass Assignment In Rest Apis

exploiting-mass-assignment-in-rest-apis

mukul975/Anthropic-Cybersecurity-Skills

A specialized skill for discovering and exploiting Mass Assignment vulnerabilities (autobinding) in REST APIs. It guides the injection of unexpected or hidden parameters (such as role or isAdmin) into create/update requests. This technique is crucial during API security assessments to test for privilege escalation, authorization bypass, and unintended parameter binding in ORM-backed endpoints (e.g., Rails, Django).

Exploiting NoSQL Injection Vulnerabilities

exploiting-nosql-injection-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

A comprehensive tool and guide for detecting and exploiting NoSQL injection vulnerabilities in MongoDB, CouchDB, and similar databases. It simulates advanced attacks such as authentication bypass, blind data extraction using regex, and JavaScript execution via the $where operator. Ideal for penetration testers and security researchers assessing APIs and web applications backed by NoSQL backends.

Exploiting SQL Injection Vulnerabilities

exploiting-sql-injection-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

A comprehensive guide detailing the process of identifying and exploiting SQL injection vulnerabilities in web applications. The content covers manual and automated techniques, including error-based, boolean, and time-based blind injections. Users learn to fingerprint major database engines (MySQL, MSSQL, Oracle) and utilize tools like sqlmap to demonstrate data extraction and security risks during authorized penetration tests.

Sqlmap Guide for SQL Injection Exploitation

exploiting-sql-injection-with-sqlmap

mukul975/Anthropic-Cybersecurity-Skills

This comprehensive guide details the professional process of detecting and exploiting SQL injection vulnerabilities using the powerful sqlmap tool. It covers the entire workflow, from initial vulnerability identification and basic scanning to database enumeration, data dumping, advanced exploitation (like file reading and OS command execution), and WAF bypass techniques, ensuring thorough penetration testing reporting.

Exploiting Server-Side Template Injection Vulnerabilities

exploiting-template-injection-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

This guide details the comprehensive methodology for detecting and exploiting Server-Side Template Injection (SSTI) vulnerabilities across multiple popular template engines, including Jinja2, Twig, and Freemarker. It provides step-by-step workflows, covering payload detection using basic arithmetic expressions, engine identification, and executing advanced Remote Code Execution (RCE) payloads for penetration testing purposes.

Prev 1 2 3 4 5 678 9 10...18 19 20 Next

Language