Source

yaklang/hack-skills

103 skills · 303.3K combined installs

Skills from this source

#

Skill

Source

8W Activity

Installs

hack >- Entry P0 primary router for HackSkills. Use when the task involves web application testing, API security assessmen…

yaklang/hack-skills

android-pentesting-tricks >- Android pentesting playbook. Use when testing Android applications for SSL pinning bypass, exported component abus…

yaklang/hack-skills

code-obfuscation-deobfuscation >- Code obfuscation analysis and deobfuscation playbook. Use when reversing binaries protected by junk code, opaque p…

yaklang/hack-skills

sqli-sql-injection >- SQL injection playbook. Use when input reaches SQL queries, authentication logic, sorting, filtering, reporting, o…

yaklang/hack-skills

api-sec >- Entry P1 category router for API security. Use when choosing between API recon, authorization, token abuse, and hi…

yaklang/hack-skills

xss-cross-site-scripting >- XSS playbook. Use when user-controlled content reaches HTML, attributes, JavaScript, DOM sinks, uploads, or multi-…

yaklang/hack-skills

recon-and-methodology >- Reconnaissance and methodology playbook. Use when mapping assets, discovering endpoints, fingerprinting technology…

yaklang/hack-skills

business-logic-vulnerabilities >- Business logic vulnerability playbook. Use when reasoning about workflows, race conditions, price manipulation, co…

yaklang/hack-skills

ssrf-server-side-request-forgery >- SSRF playbook. Use when the server fetches URLs, resolves hostnames, imports remote content, or can be driven towa…

yaklang/hack-skills

401-403-bypass-techniques >- 401/403 bypass playbook. Use when encountering access-denied responses on admin panels, API endpoints, or restrict…

yaklang/hack-skills

api-auth-and-jwt-abuse >- API authentication and JWT abuse playbook. Use when testing bearer tokens, API keys, claim trust, header spoofing,…

yaklang/hack-skills

api-recon-and-docs >- API reconnaissance and documentation review playbook. Use when discovering endpoints, schemas, versions, OpenAPI s…

yaklang/hack-skills

authbypass-authentication-flaws >- Authentication bypass testing playbook. Use when assessing login flows, password reset logic, account recovery, MF…

yaklang/hack-skills

idor-broken-object-authorization >- IDOR and broken object authorization testing playbook. Use when requests expose object identifiers, tenant boundar…

yaklang/hack-skills

jwt-oauth-token-attacks >- JWT and OAuth token attack playbook. Use when validating token trust, signing algorithms, key handling, claim abus…

yaklang/hack-skills

waf-bypass-techniques >- WAF bypass methodology and generic evasion techniques. Use when a web application firewall blocks injection payloa…

yaklang/hack-skills

websocket-security >- WebSocket handshake, CSWSH, tooling (wsrepl, ws-harness, Burp), and common flaws. Use when apps use real-time chan…

yaklang/hack-skills

auth-sec >- Entry P1 category router for authentication and authorization. Use when testing login flows, sessions, object auth…

yaklang/hack-skills

api-authorization-and-bola >- API authorization and BOLA testing playbook. Use when APIs expose object identifiers, nested resources, hidden wri…

yaklang/hack-skills

injection-checking >- Entry P1 category router for injection testing. Use when routing between XSS, SQLi, SSRF, XXE, SSTI, command injec…

yaklang/hack-skills

cors-cross-origin-misconfiguration >- CORS misconfiguration testing playbook. Use when analyzing cross-origin trust, credentialed browser reads, origin …

yaklang/hack-skills

kubernetes-pentesting >- Kubernetes penetration testing playbook. Use when targeting Kubernetes clusters via API server, RBAC enumeration, …

yaklang/hack-skills

recon-for-sec >- Entry P1 category router for reconnaissance and methodology. Use when mapping scope, discovering assets, fingerpri…

yaklang/hack-skills

heap-exploitation >- Heap exploitation playbook. Use when targeting ptmalloc2/glibc heap vulnerabilities including UAF, double free, ov…

yaklang/hack-skills

business-logic-vuln >- Entry P1 category router for business logic testing. Use when workflow abuse, race conditions, pricing flaws, or m…

yaklang/hack-skills

ios-pentesting-tricks >- iOS pentesting playbook. Use when testing iOS applications for keychain extraction, URL scheme hijacking, Universa…

yaklang/hack-skills

traffic-analysis-pcap >- Traffic analysis and PCAP forensics playbook. Use when analyzing network captures including Wireshark filters, pro…

yaklang/hack-skills

csrf-cross-site-request-forgery >- CSRF testing playbook. Use when reviewing state-changing web flows, anti-CSRF defenses, SameSite behavior, JSON CS…

yaklang/hack-skills

anti-debugging-techniques >- Anti-debugging detection and bypass playbook. Use when reversing protected binaries that detect debuggers via ptra…

yaklang/hack-skills

binary-protection-bypass >- Binary protection bypass playbook. Use when identifying and bypassing ASLR, PIE, NX/DEP, stack canary, RELRO, FORT…

yaklang/hack-skills

browser-exploitation-v8 >- Browser and V8 exploitation playbook. Use when exploiting JavaScript engine vulnerabilities including JIT type con…

yaklang/hack-skills

cmdi-command-injection >- Command injection playbook. Use when user input may reach shell commands, process execution, converters, import pi…

yaklang/hack-skills

deserialization-insecure >- Insecure deserialization playbook. Use when Java, PHP, or Python applications deserialize untrusted data via Objec…

yaklang/hack-skills

file-access-vuln >- Entry P1 category router for file access and upload workflows. Use when testing download endpoints, file paths, lo…

yaklang/hack-skills

format-string-exploitation >- Format string exploitation playbook. Use when printf-family functions receive user-controlled format strings, enab…

yaklang/hack-skills

graphql-and-hidden-parameters >- GraphQL and hidden parameter testing playbook. Use when exploring introspection, batching, undocumented fields, hi…

yaklang/hack-skills

http-parameter-pollution >- HTTP Parameter Pollution (HPP): duplicate query/body keys parsed differently by servers, proxies, WAFs, and app fr…

yaklang/hack-skills

kernel-exploitation >- Linux kernel exploitation playbook. Use when exploiting kernel vulnerabilities (UAF, OOB, race condition, type con…

yaklang/hack-skills

llm-prompt-injection >- LLM prompt injection playbook. Use when testing AI/LLM applications for direct injection, indirect injection via R…

yaklang/hack-skills

oauth-oidc-misconfiguration >- OAuth and OIDC misconfiguration testing playbook. Use when reviewing redirect URI handling, state and nonce valida…

yaklang/hack-skills

path-traversal-lfi >- Path traversal and LFI playbook. Use when file paths, download endpoints, include operations, archive extraction, …

yaklang/hack-skills

ssti-server-side-template-injection >- SSTI playbook. Use when template expressions, server-side rendering, preview features, or templating engines may e…

yaklang/hack-skills

vm-and-bytecode-reverse >- Custom VM and bytecode reverse engineering playbook. Use when CTF challenges or protected software implement custo…

yaklang/hack-skills

xxe-xml-external-entity >- XXE playbook. Use when XML, SVG, OOXML, SOAP, or parser-driven imports may resolve external entities, files, or in…

yaklang/hack-skills

race-condition >- Race condition and TOCTOU testing for web apps. Use when testing one-time operations, concurrent HTTP abuse, rate-…

yaklang/hack-skills

request-smuggling >- HTTP request smuggling and desynchronization testing. Use when front proxies, CDNs, or load balancers disagree wit…

yaklang/hack-skills

symbolic-execution-tools >- Symbolic execution and constraint solving playbook. Use when solving CTF reversing challenges, recovering keys, by…

yaklang/hack-skills

open-redirect >- Open redirect playbook. Use when URL parameters, form actions, or JavaScript sinks control navigation targets and …

yaklang/hack-skills

csp-bypass-advanced >- Advanced Content Security Policy bypass techniques. Use when XSS or data exfiltration is blocked by CSP and you ne…

yaklang/hack-skills

insecure-source-code-management >- Source control and artifact exposure (.git, .svn, .hg, backups, .env). Use when recon finds VCS paths, 403 on hidd…

yaklang/hack-skills