Skill UI

A security skill for identifying cloud and infrastructure misconfigurations such as exposed storage buckets, metadata endpoints, and admin panels. Includes techniques for S3, EC2, Jenkins, and CloudWatch RUM exploitation, requiring explicit authorization for offensive testing.

Authorized-only guide for hunting CORS misconfigurations, validating credentialed cross-origin reads with browser PoCs, and prioritizing high-impact targets.

A security reconnaissance tool for identifying Kubernetes and Docker misconfigurations, including anonymous cluster-admin access, kubelet RCE, etcd exposure, and docker.sock vulnerabilities. Requires explicit authorization before use. Helps penetration testers find high-impact findings like API anonymous cluster-admin, kubelet 10250 exec/run, and container escape via runc.

A comprehensive skill for identifying miscellaneous security vulnerabilities like access control failures, information disclosure, and misconfigurations. Based on 225 public bug bounty reports, it helps hunters target SaaS platforms, identity flows, and internal APIs to find high-value issues.

Hunt TLS/SSL and DNS misconfigurations for authorized security assessments. Covers testssl.sh, sslyze, OpenSSL checks, and guidance on reporting realistic findings.

Authorized assessment of federated identity systems: SAML, OIDC, OAuth2 flows, SSO misconfiguration, and token-confusion issues. Provides workflow checklists and toolchain guidance for validating SSO flows, signature checks, redirect_uri handling, PKCE, and more.

A specialized security auditor for Laravel applications. It analyzes code, APIs, and configurations against OWASP standards to detect vulnerabilities such as XSS, IDOR, SQL injection, and misconfigurations. Ideal for reviewing backend logic to ensure robust data protection and authorization.

This skill enables security professionals to conduct authorized assessments on Linux systems, identifying misconfigurations and vulnerabilities that allow privilege escalation from standard users to root. It covers techniques like SUID exploitation, sudo misconfigurations, and cron job hijacking, strictly requiring written authorization and defensive guardrails.

Conduct authorized security assessments of SMTP servers to identify open relays, user enumeration, weak authentication, TLS issues, and misconfigurations using nmap, hydra, and smtp-user-enum.