Download

Skill UI

Browse and discover 19382+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search security , found 1864 results

Default Newest Most Downloaded

Race Condition Vulnerability Hunting

hunt-race-condition

sickn33/agentic-awesome-skills

A specialized security skill for identifying and exploiting race condition vulnerabilities in web applications. Focuses on synchronized request attacks, double-spending, and bypassing access controls. Requires explicit authorization and defensive guidance protocols before execution.

Vector Store Attack Hunt

hunt-rag-vector

sickn33/agentic-awesome-skills

Identify and exploit vector-store and embedding-layer weaknesses in RAG pipelines, including persistent corpus poisoning and cross-tenant IDOR, for authorized security assessments.

SAML SSO Attack Hunter

sickn33/agentic-awesome-skills

Hunt SAML/SSO attacks including XML Signature Wrapping, comment injection, signature stripping, XXE, and NameID manipulation. Provides attack surface discovery, manual exploitation workflows, and triage guidance for authorized security assessments.

Session Management Vulnerability Hunting

sickn33/agentic-awesome-skills

This skill identifies session management vulnerabilities like session fixation, failure to invalidate sessions after logout or password changes, and weak session ID generation. It is designed for authorized security assessments to prevent Account Takeover (ATO) and unauthorized access. Users must obtain explicit written permission before testing targets.

Hunt Shadow API Surface

hunt-shadow-api

sickn33/agentic-awesome-skills

Identify shadow, zombie, and undocumented API endpoints by enumerating versioned paths, diffing specs, and comparing old vs current security behavior. For authorized OWASP API9 assessments.

Source Code Leak Hunting

hunt-source-leak

sickn33/agentic-awesome-skills

Authorized security testing skill for hunting exposed source maps, .env files, .git directories, and Swagger/OpenAPI specs to uncover leaked credentials, internal endpoints, and auth logic gaps in web targets.

Discover SPA Hidden API Routes

sickn33/agentic-awesome-skills

Extract backend API routes from SPA JavaScript bundles to identify missing authentication or broken access control vulnerabilities. Test endpoints without credentials to find unauthenticated data exposure and security gaps in web applications.

Spring Boot Vulnerability Hunter

hunt-springboot

sickn33/agentic-awesome-skills

A security assessment tool designed to identify specific vulnerabilities in Spring Boot applications, such as exposed Actuator endpoints, H2 Console access, SpEL injection, and memory dumps containing secrets. Requires explicit written authorization for authorized security assessments.

SQL Injection Hunting Skill

sickn33/agentic-awesome-skills

Offensive security skill for hunting SQL injection flaws under written authorization. Covers injection confirmation, UNION column enumeration, reflected-column discovery, and data dumping, plus high-value targets like search, filter, and report endpoints.

SSRF Vulnerability Hunting

sickn33/agentic-awesome-skills

A security skill for hunting server-side request forgery (SSRF) vulnerabilities, covering cloud metadata, internal services, OOB confirmation, and authorized testing workflows.

Subdomain Takeover Vulnerability Hunting

sickn33/agentic-awesome-skills

This skill enables security professionals to identify subdomain takeover vulnerabilities by enumerating subdomains, analyzing DNS records, and verifying unclaimed third-party resources. It is used in authorized security assessments to find high-value targets like GitHub Pages, GitLab Pages, or S3 buckets that can be exploited to serve malicious content under a trusted domain.

TLS SSL DNS Security Audit

hunt-tls-network

sickn33/agentic-awesome-skills

Hunt TLS/SSL and DNS misconfigurations for authorized security assessments. Covers testssl.sh, sslyze, OpenSSL checks, and guidance on reporting realistic findings.

Prev 1 2 3...138 139 140141142 143 144...154 155 156 Next

Language