Download

Skill UI

Browse and discover 6556+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search security , found 614 results

Default Newest Most Downloaded

Phishing Simulation Campaign

executing-phishing-simulation-campaign

mukul975/Anthropic-Cybersecurity-Skills

Executes authorized phishing simulation campaigns to test employee susceptibility, validate email security controls, and capture metrics like opens, clicks, and credential submissions using GoPhish-style infrastructure for awareness programs.

Red Team Exercise Execution

executing-red-team-exercise

mukul975/Anthropic-Cybersecurity-Skills

Executes comprehensive adversary emulation exercises covering planning, infrastructure, initial access, and detection validation for organizations needing realistic offensive security assessments.

API Injection Testing

exploiting-api-injection-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Tests API endpoints for SQL, NoSQL, LDAP, and SSRF injection flaws by crafting tailored payloads against parameters, headers, and bodies, enabling security teams to validate input handling and backend resilience during authorized assessments.

Broken Link Hijacking

exploiting-broken-link-hijacking

mukul975/Anthropic-Cybersecurity-Skills

Guides security testers through discovering and exploiting broken link hijacking by finding expired domains, dead external resources, and claimable cloud assets referenced by web applications, then verifying takeover paths and documenting impact.

Kerberos Delegation Abuse

exploiting-constrained-delegation-abuse

mukul975/Anthropic-Cybersecurity-Skills

Exploit Kerberos Constrained Delegation misconfigurations using S4U2self/S4U2proxy to impersonate privileged accounts, request service tickets and achieve lateral movement or privilege escalation in Active Directory security assessments.

Kerberoasting With Impacket

exploiting-kerberoasting-with-impacket

mukul975/Anthropic-Cybersecurity-Skills

Use Impacket’s GetUserSPNs to conduct Kerberoasting against Active Directory service accounts, request TGS tickets, export hashcat-friendly blobs, and crack them offline to validate credentials during red team or controlled security testing.

Mass Assignment API Testing

exploiting-mass-assignment-in-rest-apis

mukul975/Anthropic-Cybersecurity-Skills

Guide for discovering and exploiting mass-assignment vulnerabilities in REST APIs to escalate privileges, manipulate restricted fields, and bypass authorization by injecting unexpected parameters during API security assessments.

NoSQL Injection Exploits

exploiting-nosql-injection-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Guides security professionals through identifying and exploiting NoSQL injection flaws in MongoDB, CouchDB and similar databases, covering authentication bypasses, blind data extraction, JavaScript injections, and tool-assisted testing during penetration tests or bug bounty work.

Prototype Pollution Exploits

exploiting-prototype-pollution-in-javascript

mukul975/Anthropic-Cybersecurity-Skills

Techniques and workflow to find and leverage prototype pollution bugs in JavaScript applications, covering client/server detection, gadget hunting, and payloads for XSS, RCE, and auth bypass during security testing.

Race Condition Exploitation Kit

exploiting-race-condition-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Guide to using Turbo Intruder’s single-packet attack, Python threading, and Burp Suite workflows to trigger race conditions, bypass rate limits, and manipulate state-changing web transactions under controlled security testing.

Template Injection Exploitation

exploiting-template-injection-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Guides security teams through detecting and abusing server-side template injection flaws in engines like Jinja2, Twig, and Freemarker during authorized assessments, enabling remote code execution and sensitive data exposure.

Exploiting WebSocket Flaws

exploiting-websocket-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Guides authenticated security assessments of WebSocket implementations by enumerating endpoints, verifying authentication, checking cross-site hijacking protections, and testing for message injection issues across real-time features.

Prev 1 2 3...31 32 333435 36 37...50 51 52 Next

Language