Loading...
Loading...
Found 4,061 Skills
CSS Injection is a vulnerability that occurs when an application allows untrusted CSS to be injected into a web page. This can be exploited to exfiltrate sensitive data, such as CSRF tokens or other secrets, by manipulating the page layout or triggering network requests based on element attributes. A tool to exfiltrate unknown web pages using Blind CSS. Collection of CSS based exfiltration...
802.11 supplicant and access point firmware vulnerability auditing for Key Reinstallation Attacks (KRACK) and Fragmentation/Aggregation vulnerabilities (FragAttacks), verifying CVE patch compliance across enterprise endpoints.
Windows binary and OS mitigation verification covering High-Entropy ASLR, DEP/NX, Control Flow Guard (CFG), eXtended Flow Guard (XFG), Intel CET Hardware Shadow Stacks, ACG, and Hypervisor-Protected Code Integrity (HVCI).
Race conditions may occur when a process is critically or unexpectedly dependent on the sequence or timings of other events. In a web application environment, where multiple requests can be processed at a given time, developers may leave concurrency to be handled by the framework, server, or programming language. - - - - a Burp Suite extension for sending large numbers of HTTP requests and...
Authorized reverse engineering for embedded firmware, IoT images, RTOS/bare-metal binaries (ARM/MIPS/RISC-V), Smart Contracts (EVM bytecode), and RF/signal recordings using REA MCP.
CI/CD secret hygiene and architecture audit covering replacement of long-lived cloud keys with OIDC workload identity federation, environment approval gates, log redaction, and pre-commit secret scanning.
Claude-BugHunter — a Claude Code skill bundle for bug hunting and external red-team work (82 skills, 15 slash commands, 681 disclosed-report patterns across 24 vulnerability classes). MIT + CC-BY-4.0; referenced externally only, no content copied.
HTTP request smuggling and desynchronization auditing covering CL.TE, TE.CL, TE.TE obfuscation, HTTP/2 to HTTP/1.1 downgrade desync (H2.CL, H2.TE), header newline injection, and reverse-proxy/origin parser normalization. Use when auditing multi-tier load balancers, CDNs, and reverse proxy deployments.
Linux local privilege boundary auditing covering SUID/SGID binaries, POSIX file capabilities (`getcap`), `sudoers` NOPASSWD/wildcard rules, writable systemd unit paths, cron job scripts, and kernel sysctl hardening.
Docker and OCI container isolation auditing covering `--privileged` risks, dangerous Linux capabilities (`CAP_SYS_ADMIN`, `CAP_DAC_READ_SEARCH`), hostPath/docker.sock mounts, seccomp/AppArmor profiles, and rootless user namespaces.
Practical coverage-guided fuzzing methodology using AFL++, libFuzzer, Honggfuzz, and Cargo-Fuzz, covering fuzz harness writing, seed corpus curation, custom structure-aware mutators, sanitizer integration, and coverage maximization.
Endpoint Detection and Response (EDR) sensor telemetry auditing covering Event Tracing for Windows (ETW), AMSI integration, kernel callback health, user-mode hook integrity, and anti-tamper protection verification.