Download

Skill UI

Browse and discover 18950+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search testing , found 1335 results

Default Newest Most Downloaded

Hugging Face Local Model Evaluation

huggingface-community-evals

sickn33/agentic-awesome-skills

This skill guides users on running evaluations against models on the Hugging Face Hub using local hardware. It covers using inspect-ai and lighteval frameworks with local inference backends like vllm, Transformers, or accelerate. It includes task selection, smoke testing, and hardware guidance for different model sizes. It does not cover remote orchestration or publishing results to the community workflow.

Account Takeover Taxonomy

sickn33/agentic-awesome-skills

A security testing skill that maps nine account takeover paths, including password reset poisoning, token leakage, JWT manipulation, and email change flaws, with proof and false-positive guidance for authorized assessments.

Business Logic Vulnerability Hunting

hunt-business-logic

sickn33/agentic-awesome-skills

A skill for identifying and exploiting business logic vulnerabilities in web applications, focusing on payment flows, verification bypasses, rate-limiting issues, and unprotected internal surfaces. Requires explicit authorization for testing.

Cache Poisoning Hunter

hunt-cache-poison

sickn33/agentic-awesome-skills

Authorized security testing skill for hunting web cache poisoning and password reset host-header injection. Maps CDN caching layers, probes unkeyed headers such as X-Forwarded-Host, and verifies cache HIT signals to confirm exploitable poisoned responses.

Hunt CAPTCHA Bypass

hunt-captcha-bypass

sickn33/agentic-awesome-skills

This skill helps identify CAPTCHA bypass vulnerabilities in web applications by testing various patterns such as omitting the CAPTCHA field, sending empty values, replaying tokens, and testing alternate endpoints. It is intended for authorized security assessments only.

Hunt Clickjacking Web Vulnerabilities

hunt-clickjacking

sickn33/agentic-awesome-skills

This skill focuses on identifying clickjacking vulnerabilities where malicious sites overlay transparent iframes over legitimate pages to trick users into unintended actions. It involves checking security headers like X-Frame-Options and CSP, verifying if sensitive actions can be triggered via framing, and ensuring proper authorization before testing. It is strictly for authorized security assessments and bug bounty programs.

Cloud Infrastructure Misconfiguration Hunter

hunt-cloud-misconfig

sickn33/agentic-awesome-skills

A security skill for identifying cloud and infrastructure misconfigurations such as exposed storage buckets, metadata endpoints, and admin panels. Includes techniques for S3, EC2, Jenkins, and CloudWatch RUM exploitation, requiring explicit authorization for offensive testing.

CSRF Vulnerability Hunting

sickn33/agentic-awesome-skills

A skill for hunting CSRF vulnerabilities in web applications. Covers raw HTTP client techniques, token bypass methods, and high-value target identification, with an emphasis on authorized testing.

Hunt Client-Side DOM Vulnerabilities

sickn33/agentic-awesome-skills

This skill enables the identification and exploitation of client-side DOM vulnerabilities, including DOM Clobbering, PostMessage bypasses, Service Worker abuse, and CSS exfiltration. It is designed for authorized security assessments to discover high-value attack chains that bypass server-side filters. Users must obtain explicit written permission before testing any target.

Verbose Error Disclosure Hunting

hunt-exceptional-conditions

sickn33/agentic-awesome-skills

Technique for authorized bug-bounty and penetration-testing engagements that hunts mishandled exceptional conditions in web apps, inducing unhandled exceptions with wrong-type, malformed, or boundary inputs to detect verbose stack traces, ORM internals, server paths, and framework version leaks.

Fintech GraphQL Vulnerability Hunting

hunt-fintech-graphql

sickn33/agentic-awesome-skills

A security-testing methodology for hunting fintech-specific GraphQL flaws such as ledger desync, decimal rounding abuse, idempotency replay, source-account IDOR and KYC field authorization gaps. For authorized assessments only.

gRPC Vulnerability Hunter

sickn33/agentic-awesome-skills

This skill helps identify gRPC security vulnerabilities during penetration testing. It includes fingerprinting gRPC servers, enumerating services via reflection, testing authentication bypasses, and checking for DoS risks like HTTP/2 Rapid Reset. Requires explicit authorization for offensive use.

Prev 1 2 3...99 100 101102103 104 105...110 111 112 Next

Language