hunt-ato
elementalsouls
Hunt account takeover taxonomy — 9 distinct paths to ATO, plus chains. Paths: (1) password reset flaws (host-header injection redirects token, predictable/numeric token,…
SecurityClaude Code
4.1KGitHub
OPENAGENTSKILL / DIRECTORY
AI Agent Skills
Find a skill for your next task. Explore tools for Codex, Claude Code, Cursor and more.
Results · “nosql-injection”
33–48 / 53
More filters
Results: 53
hunt-dom
elementalsouls
Hunt client-side DOM vulnerabilities — DOM Clobbering (overwrite JS globals via HTML injection), PostMessage hijacking (missing origin check), Service Worker abuse (inte…
SecurityClaude Code
4.3KGitHub
hunt-brute-force
elementalsouls
Hunt Missing/Weak Rate Limiting — login brute force, OTP/2FA brute force (10^6 keyspace), password-reset-token brute, credential stuffing, username/email enumeration via…
ResearchClaude Code
4.1KGitHub
hunt-cache-poison
elementalsouls
Hunting skill for cache poison vulnerabilities. Built from 10 public bug bounty reports including X-Forwarded-Host poisoning, X-HTTP-Method-Override / GCS cache, reflect…
SecurityClaude Code
4.1KGitHub
apk-redteam-pipeline
elementalsouls
End-to-end Android APK red-team pipeline — automated APK acquisition (Play Store + apkpure + apkmirror fallback), jadx decompilation, secret/URL/JWT/Firebase grep, pinne…
SecurityClaude Code
4.1KGitHub
hunt-api-misconfig
elementalsouls
Hunt API security misconfiguration — mass assignment, prototype pollution, HTTP verb tampering. Mass assignment: send {is_admin:true, role:admin, verified:true} on profi…
4.1KGitHub
hunt-auth-bypass
elementalsouls
Hunting skill for auth bypass vulnerabilities. Built from 12 public bug bounty reports across SAML XSW / parser-differential (GitHub Enterprise CVE-2025-25291/25292), SA…
SecurityClaude Code
4.1KGitHub
hunt-cicd
elementalsouls
Hunt CI/CD pipeline vulnerabilities — GitHub Actions workflow injection (pull_request_target Pwnrequest + ${{ }}-into-shell), self-hosted runner poisoning, OIDC trust-po…
4.1KGitHub
ctf-malware
ljagiello
Provides malware analysis and network traffic techniques for CTF challenges. Use when analyzing obfuscated scripts, malicious packages, custom crypto protocols, C2 traff…
CodingClaude Code
3.2KGitHub
golang-design-patterns
samber
Idiomatic Golang design patterns — functional options, constructors, error flow and cascading, resource management and lifecycle, graceful shutdown, resilience, architec…
ResearchClaude Code
3KGitHub
golang-google-wire
samber
Compile-time dependency injection in Golang using google/wire — wire.NewSet, wire.Build, wire.Bind (interface→concrete), wire.Struct, wire.Value, wire.InterfaceValue, wi…
DesignClaude Code
3KGitHub
blog-cluster
AgriciDaniel
Semantic topic cluster planning and automated execution engine for claude-blog. Performs SERP-based keyword research, groups keywords by search intent and SERP overlap,…
ResearchClaude Code
2KGitHub
codebase-mapping
a5c-ai
Automatic codebase indexing for invisible context injection. Catalogs project structure, file types, entry points, dependencies, and test layout.
CodingClaude Code
1.8KGitHub
API Relay Audit
toby-bridges
Local security audit for AI API relays and LLM proxies: detects prompt injection, model substitution, tool-call rewriting, SSE anomalies, error leakage, and Web3 wallet…
709GitHub
axiom-security
CharlesWiltgen
Use when storing credentials securely, encrypting data, implementing passkeys, securing AI/agentic features against prompt injection, code signing, or managing certifica…
SecurityClaude Code
1.1KGitHub
akka-net-testing-patterns
Aaronontheweb
Write unit and integration tests for Akka.NET actors using modern Akka.Hosting.TestKit patterns. Covers dependency injection, TestProbes, persistence testing, and actor…
DesignClaude Code
1.1KGitHub
External platform skills
Browse external directory →Owner-curated external sources. Not filtered by the scores or compatibility controls above; excluded from GitHub rankings and automatic installation.
No external entries match this query.