Source

yaklang/hack-skills

104 skills · 355.7K combined installs

Skills from this source

#

Skill

Source

8W Activity

Installs

crlf-injection >- CRLF injection playbook. Use when user input reaches HTTP response headers, Location redirects, Set-Cookie values,…

yaklang/hack-skills

http-host-header-attacks >- HTTP Host header injection and routing abuse playbook. Use when the application trusts the Host header for generat…

yaklang/hack-skills

insecure-source-code-management >- Source control and artifact exposure (.git, .svn, .hg, backups, .env). Use when recon finds VCS paths, 403 on hidd…

yaklang/hack-skills

web-cache-deception >- Web cache deception and poisoning playbook. Use when CDN, reverse proxy, or application caching may serve sensitiv…

yaklang/hack-skills

subdomain-takeover >- Subdomain takeover detection and exploitation playbook. Use when targets have dangling CNAME/NS/MX records pointin…

yaklang/hack-skills

dependency-confusion >- Supply-chain testing via package-manager dependency confusion: when internal package names resolve to attacker-con…

yaklang/hack-skills

expression-language-injection >- Expression Language injection playbook. Use when Java EL, SpEL, OGNL, or MVEL expressions may evaluate attacker-co…

yaklang/hack-skills

csv-formula-injection >- CSV/spreadsheet formula injection (DDE, Excel/LibreOffice, Google Sheets IMPORT*). Use when exports, imports, or u…

yaklang/hack-skills

active-directory-acl-abuse >- Active Directory ACL abuse playbook. Use when exploiting misconfigured AD permissions including GenericAll, WriteD…

yaklang/hack-skills

jndi-injection >- JNDI injection playbook. Use when Java applications perform JNDI lookups with attacker-controlled names, especiall…

yaklang/hack-skills

clickjacking >- Clickjacking playbook. Use when testing whether target pages can be framed, whether X-Frame-Options or CSP frame-a…

yaklang/hack-skills

http2-specific-attacks >- HTTP/2 protocol-specific attack playbook. Use when the target supports HTTP/2 and you need to exploit binary frami…

yaklang/hack-skills

saml-sso-assertion-attacks >- SAML SSO assertion attack playbook. Use when testing signature validation, assertion wrapping, audience restrictio…

yaklang/hack-skills

active-directory-kerberos-attacks >- Kerberos attack playbook for Active Directory. Use when targeting AD authentication via AS-REP roasting, Kerberoas…

yaklang/hack-skills

hash-attack-techniques >- Hash attack playbook. Use when exploiting length extension, MD5/SHA1 collisions, HMAC timing leaks, birthday attac…

yaklang/hack-skills

arbitrary-write-to-rce >- Arbitrary write to RCE playbook. Use when you have an arbitrary write primitive (from heap exploitation, format st…

yaklang/hack-skills

linux-privilege-escalation >- Linux privilege escalation playbook. Use when you have low-privilege shell access and need to escalate to root via…

yaklang/hack-skills

active-directory-certificate-services >- AD Certificate Services attack playbook. Use when targeting misconfigured AD CS for privilege escalation via ESC1-…

yaklang/hack-skills

ai-ml-security >- AI/ML security playbook. Use when assessing model supply chain attacks (pickle RCE, poisoned weights), adversarial…

yaklang/hack-skills

prototype-pollution >- Prototype pollution testing for JavaScript stacks. Use when user input is merged into objects (query parsers, JSON…

yaklang/hack-skills

dns-rebinding-attacks >- DNS rebinding attack playbook. Use when testing applications that trust DNS resolution for origin checks, interact…

yaklang/hack-skills

dangling-markup-injection >- Dangling markup injection playbook. Use when HTML injection is possible but JavaScript execution is blocked (CSP, …

yaklang/hack-skills

defi-attack-patterns >- DeFi attack pattern playbook. Use when analyzing flash loan attacks, price oracle manipulation, MEV sandwich attac…

yaklang/hack-skills

network-protocol-attacks >- Network protocol attack playbook. Use when exploiting layer 2/3 protocols including ARP spoofing, LLMNR/NBT-NS/mDN…

yaklang/hack-skills

windows-av-evasion >- AV/EDR evasion playbook for Windows. Use when bypassing AMSI, ETW, .NET assembly detection, shellcode execution, p…

yaklang/hack-skills

xslt-injection >- XSLT injection testing: processor fingerprinting, XXE and document() SSRF, EXSLT write primitives, PHP/Java/.NET e…

yaklang/hack-skills

email-header-injection >- Email header injection and spoofing playbook. Use when testing contact forms, email APIs, password reset flows, or…

yaklang/hack-skills

memory-forensics-volatility >- Memory forensics playbook using Volatility 2/3. Use when analyzing memory dumps for malware analysis, credential e…

yaklang/hack-skills

type-juggling >- PHP type juggling and weak comparison (`==`) bypass. Use when authentication, HMAC/signature checks, or token vali…

yaklang/hack-skills

windows-privilege-escalation >- Windows local privilege escalation playbook. Use when you have low-privilege shell access on Windows and need to e…

yaklang/hack-skills

container-escape-techniques >- Container escape playbook. Use when operating inside a Docker container, LXC, or Kubernetes pod and need to escape…

yaklang/hack-skills

linux-lateral-movement >- Linux lateral movement playbook. Use after gaining initial access to pivot across Linux hosts via SSH hijacking, c…

yaklang/hack-skills

classical-cipher-analysis >- Classical cipher analysis playbook. Use when encountering substitution ciphers, Vigenere, transposition, XOR, or e…

yaklang/hack-skills

tunneling-and-pivoting >- Tunneling and pivoting playbook. Use when establishing network tunnels through compromised hosts including SSH tun…

yaklang/hack-skills

linux-security-bypass >- Linux security mechanism bypass playbook. Use when facing restricted bash/rbash, read-only or noexec filesystems, …

yaklang/hack-skills

prototype-pollution-advanced >- Advanced prototype pollution playbook — server-side RCE, client-side gadgets, filter bypasses, and detection techn…

yaklang/hack-skills

smart-contract-vulnerabilities >- Smart contract vulnerability playbook. Use when auditing Solidity/EVM contracts for reentrancy, integer overflow, …

yaklang/hack-skills

stack-overflow-and-rop >- Stack overflow and ROP playbook. Use when exploiting buffer overflows to hijack control flow via return address ov…

yaklang/hack-skills

lattice-crypto-attacks >- Lattice-based cryptanalysis playbook. Use when attacking RSA via Coppersmith small roots, recovering DSA/ECDSA non…

yaklang/hack-skills

sandbox-escape-techniques >- Sandbox escape playbook. Use when breaking out of Python sandbox, Lua sandbox, seccomp filter, chroot jail, contai…

yaklang/hack-skills

steganography-techniques >- Steganography detection and extraction playbook. Use when analyzing images (LSB, PNG chunks, JPEG DCT, EXIF), audi…

yaklang/hack-skills

windows-lateral-movement >- Windows lateral movement playbook. Use when pivoting between Windows hosts via PsExec, WMI, WinRM, DCOM, RDP, pass…

yaklang/hack-skills

rsa-attack-techniques >- RSA attack playbook for CTF and real-world cryptanalysis. Use when given RSA parameters (n, e, c) and need to reco…

yaklang/hack-skills

symmetric-cipher-attacks >- Symmetric cipher attack playbook. Use when exploiting block cipher mode weaknesses (CBC padding oracle, ECB cut-an…

yaklang/hack-skills

macos-security-bypass >- macOS security bypass playbook. Use when targeting macOS endpoints and need to bypass TCC, Gatekeeper, SIP, sandbo…

yaklang/hack-skills

ntlm-relay-coercion >- NTLM relay and authentication coercion playbook. Use when capturing and relaying NTLM authentication to escalate p…

yaklang/hack-skills

macos-process-injection >- macOS process injection playbook. Use when you need to inject code into running or launching macOS processes via d…

yaklang/hack-skills

nosql-injection NoSQL injection playbook. Use when MongoDB-style operators, JSON query objects, flexible search filters, or backend q…

yaklang/hack-skills

upload-insecure-files Insecure file upload playbook. Use when testing upload validation, storage paths, processing pipelines, preview behav…

yaklang/hack-skills

unauthorized-access-common-services Unauthorized access playbook for common exposed services. Use when Redis, Rsync, PHP-FPM, AJP/Ghostcat, Hadoop YARN, …

yaklang/hack-skills