Download

Skill UI

Browse and discover 19424+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search security , found 1867 results

Default Newest Most Downloaded

gRPC Vulnerability Hunter

sickn33/agentic-awesome-skills

This skill helps identify gRPC security vulnerabilities during penetration testing. It includes fingerprinting gRPC servers, enumerating services via reflection, testing authentication bypasses, and checking for DoS risks like HTTP/2 Rapid Reset. Requires explicit authorization for offensive use.

Host Header Injection Hunter

hunt-host-header

sickn33/agentic-awesome-skills

A security skill for identifying and exploiting Host header injection vulnerabilities, including password reset poisoning, web cache poisoning, and routing-based SSRF. Provides step-by-step testing methodology and commands for authorized assessments only. Built from public research and real-world findings.

HTML Injection Hunting

hunt-html-injection

sickn33/agentic-awesome-skills

This skill helps security researchers identify HTML injection vulnerabilities in web applications. It provides techniques for detecting unescaped user input, escalating to XSS, and proving impact with unique canaries. Recommended for authorized penetration testing and bug bounty engagements.

IDOR Vulnerability Hunting

sickn33/agentic-awesome-skills

A security hunting skill for IDOR vulnerabilities, built from 26 public bug bounty reports. Provides methodology, attack surface signals, and payload patterns for authorized security assessments.

Hunt JWT Crypto Failures

hunt-jwt-crypto

sickn33/agentic-awesome-skills

This skill identifies and exploits JWT cryptographic weaknesses such as alg:none and key confusion attacks. It helps security professionals find critical vulnerabilities in authentication systems by forging tokens to bypass security checks and gain unauthorized access.

Hunt Kubernetes Security Vulnerabilities

sickn33/agentic-awesome-skills

A security reconnaissance tool for identifying Kubernetes and Docker misconfigurations, including anonymous cluster-admin access, kubelet RCE, etcd exposure, and docker.sock vulnerabilities. Requires explicit authorization before use. Helps penetration testers find high-impact findings like API anonymous cluster-admin, kubelet 10250 exec/run, and container escape via runc.

Laravel Vulnerability Hunting

sickn33/agentic-awesome-skills

Identifies and tests Laravel-specific security flaws such as Ignition RCE, Telescope/Horizon panel exposure, .env and APP_KEY leakage, and signed URL bypass. Intended for authorized penetration testing only.

Hunt LFI RFI Path Traversal

sickn33/agentic-awesome-skills

Guides authorized security testers through hunting Local File Inclusion, Remote File Inclusion, and Path Traversal vulnerabilities, including blind confirmation, PHP filter-chain RCE, log poisoning, wrappers, and safe OOB validation.

LLM AI Feature Bug Hunting

sickn33/agentic-awesome-skills

This skill focuses on identifying security vulnerabilities in Large Language Model (LLM) and AI features. It covers prompt injection, system prompt leakage, cross-tenant access, and data exfiltration techniques. Users must verify findings against false positives using reproducibility checks and out-of-band callbacks before reporting.

MFA and 2FA Bypass Testing

hunt-mfa-bypass

sickn33/agentic-awesome-skills

Offensive security skill for hunting MFA and 2FA bypass flaws: workflow skipping, OTP replay, response tampering, prefix-oracle guessing, and race conditions on verification endpoints. Requires written authorization.

Misc Vulnerability Hunting

sickn33/agentic-awesome-skills

A comprehensive skill for identifying miscellaneous security vulnerabilities like access control failures, information disclosure, and misconfigurations. Based on 225 public bug bounty reports, it helps hunters target SaaS platforms, identity flows, and internal APIs to find high-value issues.

Node.js Vulnerability Hunting

sickn33/agentic-awesome-skills

This skill helps identify and exploit specific vulnerabilities in Node.js applications. It covers techniques like prototype pollution, Express trust proxy abuse, and template engine SSTI. Users must have explicit authorization before testing. It includes fingerprinting, detection, and exploitation chains for critical security issues.

Prev 1 2 3...137 138 139140141 142 143...154 155 156 Next

Language