yaklang/hack-skills

103 skills197.2K total installs Github

Github

Github

Skill

Installs

hack

sqli-sql-injection

android-pentesting-tricks

code-obfuscation-deobfuscation

api-sec

xss-cross-site-scripting

recon-and-methodology

ssrf-server-side-request-forgery

api-recon-and-docs

api-auth-and-jwt-abuse

business-logic-vulnerabilities

jwt-oauth-token-attacks

authbypass-authentication-flaws

websocket-security

waf-bypass-techniques

401-403-bypass-techniques

auth-sec

idor-broken-object-authorization

injection-checking

api-authorization-and-bola

kubernetes-pentesting

recon-for-sec

heap-exploitation

oauth-oidc-misconfiguration

traffic-analysis-pcap

csrf-cross-site-request-forgery

business-logic-vuln

cors-cross-origin-misconfiguration

path-traversal-lfi

cmdi-command-injection

file-access-vuln

format-string-exploitation

graphql-and-hidden-parameters

ssti-server-side-template-injection

ios-pentesting-tricks

xxe-xml-external-entity

http-parameter-pollution

deserialization-insecure

open-redirect

kernel-exploitation

llm-prompt-injection

binary-protection-bypass

crlf-injection

race-condition

insecure-source-code-management

request-smuggling

browser-exploitation-v8

web-cache-deception

dependency-confusion

expression-language-injection

anti-debugging-techniques

csv-formula-injection

saml-sso-assertion-attacks

clickjacking

vm-and-bytecode-reverse

jndi-injection

csp-bypass-advanced

subdomain-takeover

http-host-header-attacks

active-directory-acl-abuse

symbolic-execution-tools

mobile-ssl-pinning-bypass

prototype-pollution

active-directory-kerberos-attacks

xslt-injection

active-directory-certificate-services

defi-attack-patterns

type-juggling

arbitrary-write-to-rce

dangling-markup-injection

windows-av-evasion

http2-specific-attacks

hash-attack-techniques

network-protocol-attacks

linux-lateral-movement

ai-ml-security

memory-forensics-volatility

dns-rebinding-attacks

email-header-injection

linux-privilege-escalation

classical-cipher-analysis

stack-overflow-and-rop

windows-privilege-escalation

tunneling-and-pivoting

linux-security-bypass

steganography-techniques

container-escape-techniques

prototype-pollution-advanced

symmetric-cipher-attacks

smart-contract-vulnerabilities

sandbox-escape-techniques

windows-lateral-movement

rsa-attack-techniques

lattice-crypto-attacks

macos-security-bypass

ntlm-relay-coercion

macos-process-injection

nosql-injection

upload-insecure-files

unauthorized-access-common-services

reverse-shell-techniques

ghost-bits-cast-attack

hackskills-bugbounty-hunter