Download

Skill UI

Browse and discover 15799+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Total 15799 skills

Default Newest Most Downloaded

Exploiting Prototype Pollution In JavaScript

exploiting-prototype-pollution-in-javascript

mukul975/Anthropic-Cybersecurity-Skills

This skill guides the detection and exploitation of JavaScript prototype pollution vulnerabilities. It covers both client-side (DOM XSS) and server-side (RCE, Auth Bypass) attacks by injecting properties into Object.prototype using keys like `__proto__`. Use this when assessing APIs that deep-merge or clone user-controlled JSON data, or for general web application security testing.

Exploiting Race Condition Vulnerabilities In Web Apps

exploiting-race-condition-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

This skill guides penetration testers on detecting and exploiting race condition (TOCTOU) flaws in web applications. It details advanced techniques, such as using Burp Suite's Turbo Intruder and single-packet attacks, to bypass rate limits, duplicate transactions (e.g., coupon redemption), or manipulate state-changing operations. Essential for comprehensive security assessments and bug bounty hunting.

Exploiting SSRF for Internal Network Access

exploiting-server-side-request-forgery

mukul975/Anthropic-Cybersecurity-Skills

A comprehensive guide detailing the methodology for identifying and exploiting Server-Side Request Forgery (SSRF). This technique is critical in authorized penetration testing, allowing attackers to pivot from public-facing applications to internal resources. Use cases include stealing cloud provider metadata (AWS, GCP), scanning private IP ranges, and accessing internal APIs and admin panels.

Exploiting SMB Vulnerabilities via Metasploit

exploiting-smb-vulnerabilities-with-metasploit

mukul975/Anthropic-Cybersecurity-Skills

A comprehensive guide for authorized penetration testing, demonstrating how to identify and exploit critical vulnerabilities in the SMB protocol (e.g., EternalBlue, PrintNightmare). This skill covers network enumeration, lateral movement techniques (Pass-the-Hash, SMB Relay), and post-exploitation activities using Metasploit and Impacket tools to assess enterprise network security posture.

Exploiting SQL Injection Vulnerabilities

exploiting-sql-injection-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

A comprehensive guide detailing the process of identifying and exploiting SQL injection vulnerabilities in web applications. The content covers manual and automated techniques, including error-based, boolean, and time-based blind injections. Users learn to fingerprint major database engines (MySQL, MSSQL, Oracle) and utilize tools like sqlmap to demonstrate data extraction and security risks during authorized penetration tests.

Sqlmap Guide for SQL Injection Exploitation

exploiting-sql-injection-with-sqlmap

mukul975/Anthropic-Cybersecurity-Skills

This comprehensive guide details the professional process of detecting and exploiting SQL injection vulnerabilities using the powerful sqlmap tool. It covers the entire workflow, from initial vulnerability identification and basic scanning to database enumeration, data dumping, advanced exploitation (like file reading and OS command execution), and WAF bypass techniques, ensuring thorough penetration testing reporting.

Exploiting Server-Side Template Injection Vulnerabilities

exploiting-template-injection-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

This guide details the comprehensive methodology for detecting and exploiting Server-Side Template Injection (SSTI) vulnerabilities across multiple popular template engines, including Jinja2, Twig, and Freemarker. It provides step-by-step workflows, covering payload detection using basic arithmetic expressions, engine identification, and executing advanced Remote Code Execution (RCE) payloads for penetration testing purposes.

Exploiting PHP Type Juggling Vulnerabilities

exploiting-type-juggling-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

This skill details techniques for exploiting PHP's type juggling vulnerabilities, primarily caused by loose (==) comparison operators. It demonstrates how attackers can bypass authentication mechanisms, defeat magic hash function verifications, and manipulate application logic through controlled type coercion when testing web applications. Ideal for authorized security penetration testing.

Exploiting Vulnerabilities with Metasploit Framework

exploiting-vulnerabilities-with-metasploit-framework

mukul975/Anthropic-Cybersecurity-Skills

A comprehensive guide to using the Metasploit Framework for advanced penetration testing and vulnerability validation. This skill details how to confirm exploitability of identified CVEs, gather post-exploitation evidence, and validate patch remediation effectiveness. It is essential for risk-based vulnerability management and red team exercises, providing proof of real-world impact beyond simple scanner scores.

Testing WebSocket Security Vulnerabilities

exploiting-websocket-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

This comprehensive guide outlines techniques for authorized penetration testing of real-time web applications using WebSocket connections. It covers discovering various WebSocket endpoints, testing for authentication bypass, identifying Cross-Site WebSocket Hijacking (CSWSH) vulnerabilities, and assessing message handling for injection flaws (SQLi, XSS). Essential for securing chat, trading, and live notification platforms.

Exploiting Zerologon for Domain Compromise

exploiting-zerologon-vulnerability-cve-2020-1472

mukul975/Anthropic-Cybersecurity-Skills

This guide details the exploitation of the critical Zerologon vulnerability (CVE-2020-1472) in Active Directory Domain Controllers. It demonstrates the methodology for resetting the DC machine account password to empty, achieving full domain compromise. Subsequent steps include dumping domain credentials using DCSync. Essential for authorized red-teaming and security validation.

Extracting Browser Forensic Artifacts

extracting-browser-history-artifacts

mukul975/Anthropic-Cybersecurity-Skills

A comprehensive guide for digital forensics and incident response, detailing methods to extract and analyze critical web activity data. This includes history, cookies, cache, downloads, and bookmarks from major browsers like Chrome, Firefox, and Edge. Techniques involve utilizing SQLite querying and specialized tools on forensic images or live systems to establish a user's digital timeline.

Prev 1 2 3...453 454 455456457 458 459...1315 1316 1317 Next

Language