yaklang/hack-skills
102 skills235k installs158k starsGitHub
Install
npx skills add https://github.com/yaklang/hack-skillsSkills in this repo
1HackThis is a top level routing skill for bug bounty web security API security and authorized penetration testing Its core role is not to replace all specialized techniques but to help the agent 1 First determine the testing phase Recon Validation Privilege Escalation Chain building 2 Then select the correct vulnerability category 3 Avoid relying only on baseline model memory prefer structured methodology 4 Prioritize boundary conditions AI often misses but that matter in real engagements This knowledge base emphasizes content safety and auditability Use this only within authorized targets legitimate research defensive validation and bug bounty approved rules Do not use these techniques for unauthorized attacks Use this skill first in the following scenarios The hack agent skill provides documented workflows prerequisites triggers and safety guidance from its SKILL md source Agents load it when user requests match the description and follow step by step instructions without inventing capabilities It integrates with standard agent tooling for the tasks inputs outputs and failure modes described in the repository documentation2.7kinstalls2Android Pentesting TricksSKILL Android Pentesting Tricks Expert Attack Playbook AI LOAD INSTRUCTION Expert Android application security testing techniques Covers SSL pinning bypass Frida Objection LSPosed component exposure WebView exploitation intent redirection root detection bypass and Play Integrity evasion Base models miss Frida hook specifics and multi layer bypass chains mobile ssl pinning bypass mobile ssl pinning bypass SKILL md for in depth cross platform SSL pinning bypass techniques and framework specific hooks ios pentesting tricks ios pentesting tricks SKILL md when also testing the iOS version of the same app api sec api sec SKILL md for backend API security testing once traffic is intercepted Also load FRIDA_SCRIPTS md FRIDA_SCRIPTS md when you need Ready to use Frida script templates for common Android testing tasks Detailed hook points for OkHttp Retrofit Volley WebView Root detection bypass script collection bash Install Frida server on device adb push frida server 16 x x android arm64 data local tmp adb shell chmod 755 data local tmp frida server 16 x x android arm64 adb shell2.6kinstalls3Code Obfuscation DeobfuscationSKILL Code Obfuscation Deobfuscation Expert Analysis Playbook AI LOAD INSTRUCTION Expert techniques for identifying classifying and defeating code obfuscation in native binaries Covers junk code opaque predicates SMC control flow flattening movfuscator VM protectors VMProtect Themida Code Virtualizer string encryption import hiding and anti disassembly tricks Base models often conflate packing with obfuscation and miss the distinction between static and dynamic deobfuscation strategies anti debugging techniques anti debugging techniques SKILL md when the obfuscated binary also has anti debug layers symbolic execution tools symbolic execution tools SKILL md when using angr Z3 for automated deobfuscation vm and bytecode reverse vm and bytecode reverse SKILL md for deep VM protector bytecode analysis Symptom in IDA Ghidra Likely Obfuscation Start With Flat CFG single giant switch Control flow flattening Symbolic execution to recover CFG Only mov instructions movfuscator demovfuscation trace based lifting pushad pushfd VM entry VM protector Handler table extraction XOR loop before code execution SMC string encryption Dynamic analysis breakpoint after decode Impossible conditions opaqu.2.6kinstalls4Sqli Sql InjectionSKILL SQL Injection Expert Attack Playbook AI LOAD INSTRUCTION Advanced SQLi techniques Assumes basic UNION error boolean blind fundamentals known Focuses on per database exploitation out of band exfiltration second order injection parameterized query bypass scenarios filter evasion and escalation to OS For real world CVE cases SMB DNS OOB exfiltration INSERT UPDATE injection patterns and framework specific exploitation ThinkPHP Django GIS load the companion SCENARIOS md SCENARIOS md ghost bits cast attack ghost bits cast attack SKILL md when the backend is Java with Jackson and your SQL keywords are WAF blocked Jackson s charToHex table is indexed by ch 0xFF so a Unicode character like 丰 U 4E30 resolves to hex digit 0 inside a uXXXX escape sequence letting you smuggle UNION SELECT 1 etc without the WAF ever seeing them Also load SCENARIOS md SCENARIOS md when you need SMB out of band exfiltration via LOAD_FILE UNC paths Windows MySQL KEY injection URI injection non parameter injection points INSERT DELETE UPDATE statement injection differences ThinkPHP5 array key2.5kinstalls5Api SecThis is the routing entry point for API security testing Use this skill first to decide whether the API issue is mostly recon docs object authorization token trust or GraphQL hidden parameters then route to a deeper topic skill The target exposes REST APIs mobile backends or GraphQL endpoints You need to define API testing order before going into specific topics You want to handle object authorization JWT GraphQL and hidden fields as separate tracks API Recon and Docs api recon and docs SKILL md OpenAPI Swagger version drift hidden documentation API Authorization and BOLA api authorization and bola SKILL md BOLA BFLA method abuse hidden writable fields API Auth and JWT Abuse api auth and jwt abuse SKILL md bearer token header trust claim abuse rate limit bypass GraphQL and Hidden Parameters graphql and hidden parameters SKILL md introspection batching undocumented fields hidden parameters Observation Route Swagger or OpenAPI is present api recon and docs api recon and docs SKILL md IDs appear in URL JSON headers or GraphQL2.5kinstalls6Xss Cross Site ScriptingSKILL Cross Site Scripting XSS Expert Attack Playbook AI LOAD INSTRUCTION This skill covers non obvious XSS techniques context specific payload selection WAF bypass CSP bypass and post exploitation Assume the reader already knows script alert 1 script this file only covers what base models typically miss For real world CVE cases HttpOnly bypass strategies XS Leaks side channels and session fixation attacks load the companion SCENARIOS md SCENARIOS md Also load SCENARIOS md SCENARIOS md when you need Django debug page XSS CVE 2017 12794 duplicate key error unescaped exception XSS UTF 7 XSS for legacy IE environments ADw script AD4 HttpOnly bypass methodology proxy the browser session riding CSRF via XSS XS Leaks side channel attacks timing oracle cache probing performance now measurement Session fixation via XSS pre set session ID before victim login DOM clobbering techniques for CSP restricted environments Also load ADVANCED_XSS_TRICKS md ADVANCED_XSS_TRICKS md when you need mXSS DOMPurify bypass namespace confusion noscript parsing differential form table restructuring DOM Clobbering property override via id name2.5kinstalls7Recon And MethodologySKILL Recon and Methodology Expert Bug Bounty Playbook AI LOAD INSTRUCTION Systematic recon and bug finding methodology from top bug hunters Covers subdomain enumeration endpoint discovery tech fingerprinting and the hunter s mental model for finding bugs that others miss Key insight most high severity bugs are found through systematic coverage not just clever payloads Target Selection Scope Definition in scope assets Asset Discovery subdomains IPs domains Tech Fingerprinting what s running Endpoint Discovery attack surface Vulnerability Testing per vulnerability type 2 SUBDOMAIN ENUMERATION CRITICAL FIRST STEP Passive no DNS queries to target bash Subfinder aggregates multiple sources subfinder d target com o subdomains txt The recon and methodology agent skill provides documented workflows prerequisites triggers and safety guidance from its SKILL md source Agents load it when user requests match the description and follow step by step instructions without inventing capabilities It integrates with standard agent tooling for the tasks inputs outputs and failure modes described in the repository documentation2.5kinstalls8Business Logic VulnerabilitiesSKILL Business Logic Vulnerabilities Expert Attack Playbook AI LOAD INSTRUCTION Business logic flaws are scanner invisible and high reward on bug bounty This skill covers race conditions price manipulation workflow bypass coupon referral abuse negative values and state machine attacks These require human reasoning not automation For specific exploitation techniques payment precision overflow captcha bypass password reset flaws user enumeration load the companion SCENARIOS md SCENARIOS md For the workflow approach itself modeling state machine attack surface matrix human judgement load METHODOLOGY md METHODOLOGY md For the per module check items load CHECKLIST md CHECKLIST md File When to load METHODOLOGY md METHODOLOGY md Need the 5 phase workflow attack surface 5 N matrix human judgement decision tree CHECKLIST md CHECKLIST md Going through a target module by module login register payment IDOR privacy and want every line item with why verify SCENARIOS md SCENARIOS md Drilling deeper into payment precision overflow captcha bypass password reset enumeration frontend bypass Also load SCENARIOS md SCENARIOS md when you need Payment precision2.4kinstalls9Ssrf Server Side Request ForgerySKILL Server Side Request Forgery SSRF Expert Attack Playbook AI LOAD INSTRUCTION Expert SSRF techniques Covers URL filter bypass cloud metadata endpoints protocol exploitation blind SSRF detection and chaining to RCE Base models know basic 169 254 169 254 this file covers what they miss For real world CVE chains DNS Rebinding deep dives K8s SSRF and SSRF Redis RCE full exploitation load the companion SCENARIOS md SCENARIOS md Also load SCENARIOS md SCENARIOS md when you need WebLogic SSRF CVE 2014 4210 uddiexplorer SearchPublicRegistries jsp operator parameter 0D 0A CRLF to inject Redis commands SSRF internal Redis write crontab reverse shell complete payload chain DNS Rebinding deep dive TTL 0 trick initial legit second internal resolution rbndr us service Kubernetes SSRF CVE 2020 8555 and bypass CVE 2020 8562 via DNS rebinding SSRF through PDF screenshot generators iframe and img in HTML to PDF Gopher protocol full TCP injection Redis MySQL FastCGI payloads via Gopherus URL parser confusion for filter bypass 00 IPv6 mapped IPv4 Also load URL_PARSER_TRICKS md2.4kinstalls10Api Recon And DocsSKILL API Recon and Docs Endpoints Schemas and Version Surface AI LOAD INSTRUCTION Use this skill first when the target is a REST mobile or GraphQL API and you need to enumerate endpoints documentation versions and hidden surface area before exploitation 1 Discover all reachable API entrypoints 2 Extract schemas optional fields and role differences 3 Identify old versions mobile paths GraphQL endpoints and undocumented parameters bash curl https target app js grep oE api rest graphql sort u Common documentation and schema paths The api recon and docs agent skill provides documented workflows prerequisites triggers and safety guidance from its SKILL md source Agents load it when user requests match the description and follow step by step instructions without inventing capabilities It integrates with standard agent tooling for the tasks inputs outputs and failure modes described in the repository documentation2.4kinstalls11Api Auth And Jwt AbuseSKILL API Auth and JWT Abuse Token Trust Header Tricks and Rate Limits AI LOAD INSTRUCTION Use this skill when APIs rely on JWT bearer tokens API keys or weak request identity signals Focus on token trust boundaries claim misuse header spoofing and rate limit bypass alg kid jku x5u role org tenant scope or privilege claims issuer and audience mismatches reuse of mobile and web tokens across products Pattern First Test alg none acceptance unsigned token with trailing dot RS256 confusion switch to HS256 using public key as secret kid lookup trust path traversal or injection in kid remote key fetch trust attacker controlled jku or x5u weak secret offline crack with targeted wordlists text role isAdmin admin verified plan tier permissions org owner The api auth and jwt abuse agent skill provides documented workflows prerequisites triggers and safety guidance from its SKILL md source Agents load it when user requests match the description and follow step by step instructions without inventing capabilities It integrates with standard agent tooling2.4kinstalls12Jwt Oauth Token AttacksSKILL JWT and OAuth 2 0 Token Attacks Expert Attack Playbook AI LOAD INSTRUCTION Expert authentication token attacks Covers JWT cryptographic attacks alg none RS256 HS256 secret crack kid jku injection OAuth flow attacks CSRF open redirect token theft implicit flow abuse PKCE bypass and token leakage via Referer logs This is critical for modern web applications Use this file for token centric attacks and flow abuse Also load oauth oidc misconfiguration oauth oidc misconfiguration SKILL md for redirect URI state nonce PKCE and account binding validation cors cross origin misconfiguration cors cross origin misconfiguration SKILL md when browser readable APIs or token leakage may exist cross origin saml sso assertion attacks saml sso assertion attacks SKILL md when the target uses enterprise SSO outside OAuth OIDC eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9 eyJ1c2VySWQiOjEyMzQsInJvbGUiOiJ1c2VyIn0 SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c HEADER PAYLOAD SIGNATURE2.4kinstalls13Authbypass Authentication FlawsSKILL Authentication Bypass Expert Attack Playbook AI LOAD INSTRUCTION Expert authentication bypass techniques Covers SQL injection based login bypass password reset flaws token predictability account enumeration brute force bypass and multi factor auth bypass Distinct from JWT OAuth covered in jwt oauth token attacks SKILL md Focus on the login mechanism itself 0 AUTHORIZED CREDENTIAL TEST PLANNING After reducing routing entries default credentials username variants port focus and wordlist sizing are handled here in one place Service Type First Usernames First Passwords phpMyAdmin root admin empty root phpmyadmin admin FTP ftp admin test empty ftp admin 123456 SSH root admin service account names root admin seasonal variants MySQL root mysql empty root mysql Tomcat Java admin tomcat admin manager tomcat admin s3cret WebLogic weblogic admin weblogic welcome1 admin The authbypass authentication flaws agent skill provides documented workflows prerequisites triggers and safety guidance from its SKILL md source Agents load it when user requests match the description and follow step by step instructions without inventing capabilities It integrates with standard agent2.4kinstalls14Websocket SecurityAI LOAD INSTRUCTION This skill covers WebSocket protocol basics cross site WebSocket hijacking CSWSH practical tooling bridges and common vulnerability classes Apply only in authorized tests treat tokens and message content as sensitive For REST GraphQL companion testing cross load api sec api sec SKILL md when present in the workspace During proxy or raw traffic review watch for http Upgrade websocket Connection Upgrade Sec WebSocket Key dGhlIHNhbXBsZSBub25jZQ Sec WebSocket Version 13 Sec WebSocket Protocol optional subprotocol http HTTP 1 1 101 Switching Protocols Upgrade websocket Connection Upgrade Sec WebSocket Accept s3pPLMBiTxaQ9kYGzzhZRbK xOo Routing note in Burp browser DevTools filter for 101 and Upgrade websocket for deeper API testing align authn authz models through api sec The websocket security agent skill provides documented workflows prerequisites triggers and safety guidance from its SKILL md source Agents load it when user requests match the description and follow step by step instructions without inventing capabilities It integrates with standard agent tooling for the tasks inputs outputs and failure modes described in the repository2.4kinstalls15Idor Broken Object AuthorizationSKILL IDOR Broken Object Level Authorization Expert Attack Playbook AI LOAD INSTRUCTION IDOR is the 1 bug bounty finding This skill covers non obvious IDOR surfaces all attack vectors not just URL params A B testing methodology BOLA vs BFLA distinction chaining IDOR to higher impact and what testers repeatedly miss Term Meaning Impact IDOR Insecure Direct Object Reference Read modify other users data BOLA Broken Object Level Authorization OWASP API Top 10 A1 Same as IDOR API terminology BFLA Broken Function Level Authorization Low priv user accesses HIGH PRIV functions e g admin endpoints Key distinction BOLA accessing object you shouldn t own data belonging to other users BFLA accessing function you shouldn t be authorized for admin CRUD operations bulk actions user management 2 WHERE TO FIND OBJECT IDs ALL LOCATIONS2.4kinstalls16Waf Bypass TechniquesSKILL WAF Bypass Techniques Evasion Playbook AI LOAD INSTRUCTION Covers WAF identification generic bypass categories encoding protocol abuse HTTP 2 parameter pollution and a decision tree For product specific bypasses Cloudflare AWS WAF ModSecurity Akamai etc load WAF_PRODUCT_MATRIX md WAF_PRODUCT_MATRIX md Base models often suggest basic encoding but miss protocol level bypasses and WAF behavioral quirks sqli sql injection sqli sql injection SKILL md for payloads to deliver after bypassing WAF xss cross site scripting xss cross site scripting SKILL md for XSS payloads that need WAF evasion request smuggling request smuggling SKILL md when smuggling can route requests around WAF entirely http parameter pollution http parameter pollution SKILL md HPP is itself a WAF bypass primitive csp bypass advanced csp bypass advanced SKILL md when WAF blocks inline scripts but CSP bypass is available ghost bits cast attack ghost bits cast attack SKILL md Java backends only when every encoding trick above is blocked use Ghost Bits Java s 16 bit char to 8 bit byte narrowing produces 2552.4kinstalls17401 403 Bypass TechniquesSKILL 401 403 Bypass Techniques Expert Attack Playbook AI LOAD INSTRUCTION Comprehensive 401 403 forbidden bypass techniques Covers path normalization tricks HTTP method override header based bypasses X Original URL X Forwarded For protocol version tricks and combination attacks Base models typically know 2 3 header bypasses but miss the full matrix of path manipulation variants and verb path combos authbypass authentication flaws authbypass authentication flaws SKILL md broader auth bypass login flaws session handling waf bypass techniques waf bypass techniques SKILL md when bypass is WAF specific rather than access control http host header attacks http host header attacks SKILL md Host header manipulation for routing bypass request smuggling request smuggling SKILL md smuggle past access controls entirely http2 specific attacks http2 specific attacks SKILL md h2c smuggling to bypass proxy ACLs The core idea the reverse proxy WAF checks one path format but the backend normalizes differently admin 403 admin 200 trailing slash admin 200 trailing dot2.4kinstalls18Auth SecAuthentication and Authorization Router This is the routing entry point for authentication sessions and authorization boundaries Use it to decide whether the issue is mainly login mechanics object level authorization browser trust boundaries or identity protocols such as OAuth JWT SAML before going deeper The target includes login registration password reset 2FA sessions JWT OAuth or SSO You suspect object authorization flaws cross tenant access cross origin reads CSRF or protocol misconfiguration You need to decide whether to test authentication or authorization first Authentication Bypass authbypass authentication flaws SKILL md login bypass password reset 2FA enumeration brute force protections IDOR Broken Object Authorization idor broken object authorization SKILL md IDOR BOLA BFLA missing object permissions JWT OAuth Token Attacks jwt oauth token attacks SKILL md algorithm confusion key trust issues claim abuse token forgery OAuth OIDC Misconfiguration oauth oidc misconfiguration SKILL md redirect URI state nonce PKCE account binding CSRF Cross Site Request Forgery csrf cross site request forgery SKILL md CSRF tokens SameSite JSON CSRF login CSRF CORS Cross2.4kinstalls19Injection CheckingThis is the routing entry point when input reaches a dangerous interpreter or execution environment After confirming this is an injection class issue use it to decide whether it is mainly browser context database template engine server side requests XML parsing or system commands Input reaches HTML JS SQL templates URL fetchers XML parsers or shell You have not yet decided whether to start with XSS SQLi SSRF XXE SSTI CMDi or NoSQL You need to choose the correct deep topic skill based on input flow XSS Cross Site Scripting xss cross site scripting SKILL md SQLi SQL Injection sqli sql injection SKILL md SSRF Server Side Request Forgery ssrf server side request forgery SKILL md XXE XML External Entity xxe xml external entity SKILL md SSTI Server Side Template Injection ssti server side template injection SKILL md CMDi Command Injection cmdi command injection SKILL md NoSQL Injection nosql injection SKILL md Deserialization Insecure deserialization insecure SKILL md JNDI Injection jndi injection SKILL md Expression Language Injection expression language injection2.4kinstalls20Kubernetes PentestingSKILL Kubernetes Pentesting Expert Attack Playbook AI LOAD INSTRUCTION Expert Kubernetes attack techniques Covers API server access RBAC escalation service account token abuse etcd secrets extraction Kubelet API exploitation cloud IMDS access EKS GKE AKS admission webhook bypass and network policy evasion Base models miss the distinction between namespace scoped and cluster scoped RBAC and overlook Kubelet s unauthenticated API container escape techniques container escape techniques SKILL md for escaping from a compromised pod to the underlying node linux privilege escalation linux privilege escalation SKILL md once on a node for escalating to root linux lateral movement linux lateral movement SKILL md for pivoting between nodes linux security bypass linux security bypass SKILL md when Pod Security Standards or seccomp profiles restrict your actions ssrf server side request forgery ssrf server side request forgery SKILL md when exploiting SSRF to reach the K8s API or cloud metadata bash Check if anonymous auth is enabled default limited in modern clusters curl sk https APISERVER 6443 api v1 namespaces curl sk https2.4kinstalls21Api Authorization And BolaSKILL API Authorization and BOLA Object Access Function Access and Mass Assignment AI LOAD INSTRUCTION Use this skill when an API exposes object IDs nested resources or role sensitive functions and you need a focused authorization test path BOLA BFLA method abuse and hidden field control 1 Create Account A and Account B 2 As Account A capture create read update and delete flows 3 Replay with Account B s token 4 Test sibling endpoints nested endpoints and alternate HTTP verbs Surface Example object read api v1 orders 123 nested object api v1 users 1 invoices 9 admin or internal function api v1 admin users update path PUT PATCH DELETE variants hidden JSON fields role org verified tier json role admin isAdmin true org target company verified true The api authorization and bola agent skill provides documented workflows prerequisites triggers and safety guidance from its SKILL md source Agents load it when user requests match the description and follow step by step instructions without inventing capabilities It integrates with standard2.4kinstalls22Recon For SecThis is the starting router for new targets and unknown attack surfaces You just received a new target and do not yet know what to test first You need to begin with asset discovery tech fingerprinting endpoint inventory and test route planning You want to build follow up testing on structured methodology instead of random payload enumeration Recon and Methodology recon and methodology SKILL md Insecure Source Code Management insecure source code management SKILL md git svn hg exposure detection Dependency Confusion dependency confusion SKILL md Supply chain reconnaissance for internal package names 1 First confirm in scope assets and target type 2 Then perform asset discovery port service identification technology fingerprinting and endpoint collection 3 Route based on collected findings to api sec api sec SKILL md auth sec auth sec SKILL md injection checking injection checking SKILL md or business logic vuln business logic vuln SKILL md2.4kinstalls23Heap ExploitationSKILL Heap Exploitation Expert Attack Playbook AI LOAD INSTRUCTION Expert glibc heap exploitation techniques Covers ptmalloc2 internals bin structures tcache mechanics libc heap leak methods and attack selection by glibc version Distilled from ctf wiki heap sections how2heap and real world exploitation Base models often confuse glibc version constraints and miss safe linking PROTECT_PTR introduced in 2 32 stack overflow and rop stack overflow and rop SKILL md when the overflow is on the stack rather than the heap format string exploitation format string exploitation SKILL md leak heap libc addresses via format string arbitrary write to rce arbitrary write to rce SKILL md convert heap arbitrary write into code execution binary protection bypass binary protection bypass SKILL md bypass ASLR RELRO to use heap write effectively HOUSE_OF_TECHNIQUES md HOUSE_OF_TECHNIQUES md House of Force Spirit Orange Einherjar Roman Pig Banana Cat Apple and tcache attacks IO_FILE_EXPLOITATION md IO_FILE_EXPLOITATION md _IO_FILE vtable hijack FSOP stdout stdin abuse exit flow exploitation 1 PTMALLOC2 STRUCTURE QUICK REFERENCE2.4kinstalls24Oauth Oidc MisconfigurationSKILL OAuth and OIDC Misconfiguration Redirects PKCE Scopes and Token Binding AI LOAD INSTRUCTION Use this skill when the target uses OAuth 2 0 or OpenID Connect and you need a focused misconfiguration checklist redirect URI validation state and nonce handling PKCE enforcement token audience and account binding mistakes The app supports Login with Google GitHub Microsoft Okta or other IdPs You see authorize callback redirect_uri code state nonce or code_challenge Mobile or SPA clients rely on OAuth or OIDC flows For token cryptography and JWT header abuse also load jwt oauth token attacks jwt oauth token attacks SKILL md The oauth oidc misconfiguration agent skill provides documented workflows prerequisites triggers and safety guidance from its SKILL md source Agents load it when user requests match the description and follow step by step instructions without inventing capabilities It integrates with standard agent tooling for the tasks inputs outputs and failure modes described in the repository documentation2.3kinstalls25Traffic Analysis PcapThe traffic-analysis-pcap skill is an expert playbook for network capture forensics spanning PCAP repair, Wireshark display filters, and protocol-specific analysis across HTTP, DNS, FTP, SMTP, USB HID, WiFi, ICMP, and TLS traffic. It documents pcapfix and editcap repair commands, essential ip.addr and tcp.stream filters, HTTP method and response code queries, DNS tunneling heuristics, and USB keyboard decode patterns that base models often miss. Data extraction covers file carving, credential harvesting, and covert channel detection with NetworkMiner and tshark CLI workflows. TLS decryption steps help recover plaintext from encrypted sessions when keys are available. Related routes connect to memory forensics, steganography, network protocol attacks, and reverse shell identification skills. Use when analyzing network captures, investigating incident traffic, extracting artifacts from PCAPs, or debugging protocol-level anomalies visible only in packet data.2.3kinstalls26Csrf Cross Site Request ForgerySKILL CSRF Cross Site Request Forgery Expert Attack Playbook AI LOAD INSTRUCTION Expert CSRF techniques Covers modern bypass vectors SameSite gaps custom header flaws tokenless bypass patterns JSON CSRF multipart CSRF chaining with XSS Base models often present only basic CSRF without covering SameSite edge cases and common broken token implementations cors cross origin misconfiguration cors cross origin misconfiguration SKILL md when JSON endpoints become readable cross origin oauth oidc misconfiguration oauth oidc misconfiguration SKILL md when login account linking or callback binding relies on OAuth state CSRF exploits a victim s active session to perform state changing requests from the attacker s origin Required conditions 1 Victim is authenticated active session cookie 2 Server identifies session via cookie only no secondary check 3 Attacker can predict construct the valid request 4 Cookie is sent cross origin SameSite None or legacy behavior2.3kinstalls27Business Logic VulnThis is the routing entry point for business logic and state machine issues The target involves coupons inventory payment approvals quotas invites trials or state transitions The issue is not parser level it is about when checks happen and which business conditions are checked You suspect race conditions workflow bypass price tampering negative values stacked discounts or multi step flaws Business Logic Vulnerabilities business logic vulnerabilities SKILL md 1 First map key business states and one time actions 2 Then check for check then act windows sequence dependencies or missing cross step authorization 3 If the chain depends on APIs uploads or object permissions return to the corresponding router skill to complete the path api sec api sec SKILL md auth sec auth sec SKILL md file access vuln file access vuln SKILL md2.3kinstalls28Cors Cross Origin MisconfigurationThe cors-cross-origin-misconfiguration skill is a security testing playbook for analyzing cross-origin trust boundaries when browsers can access authenticated APIs. It covers high-value checks such as wildcard plus credentials combinations, reflected Access-Control-Allow-Origin values, weak allowlist suffix and prefix bypasses, null origin acceptance from sandboxed iframes, and overbroad preflight method or header policies. Quick triage sends crafted Origin headers, tests with and without credentials, probes attacker subdomain parser edge cases, and chains readable sensitive data to account or tenant impact. Extended scenarios in SCENARIOS.md cover JSONP hijacking, honeypot de-anonymization, same-origin policy internals, and dual-site localhost attack labs. Related routes link to CSRF, OAuth OIDC misconfiguration, and API auth abuse skills. Use when responses contain CORS headers, JSON endpoints appear CSRF-protected but cross-origin readable, or browser-based attacks might exfiltrate authenticated API responses.2.3kinstalls29Ios Pentesting TricksThe ios-pentesting-tricks skill. iOS pentesting playbook. Use when testing iOS applications for keychain extraction, URL scheme hijacking, Universal Links exploitation, runtime manipulation, binary protection analysis, data storage issues, and transport security bypass during authorized mobile security assessments. Covers jailbreak vs non-jailbreak methodology, keychain extraction, URL scheme/Universal Links abuse, Frida/Objection runtime hooks, binary protection checks, and data storage analysis. Base models miss protection class nuances and AASA misconfiguration patterns. RUNTIME MANIPULATION ### 5.1 Frida on iOS ### 5.2 Objection iOS Commands ### 5.3 Cycript (Legacy but Useful) --- ## 6. The workflow follows the source SKILL.md contract with progressive reference loading, clear trigger phrases, and practical steps developers can apply directly in agent sessions. The workflow follows the source SKILL.md contract with progressive reference loading, clear trigger phrases, and practical steps developers can apply directly in agent sessions.2.3kinstalls30Llm Prompt InjectionThe llm-prompt-injection skill. LLM prompt injection playbook. Use when testing AI/LLM applications for direct injection, indirect injection via RAG/browsing, tool abuse, data exfiltration, MCP security risks, and defense bypass techniques. Covers direct injection (instruction override, role play, context manipulation), indirect injection (RAG poisoning, web browsing, email), tool/function abuse, data exfiltration, MCP security risks, and defense bypass (encoding, splitting, few-shot). Base models miss the distinction between direct and indirect injection and underestimate tool-calling attack chains. DIRECT PROMPT INJECTION User input directly manipulates the LLM's behavior by overriding or subverting system instructions embedded in the prompt. See [JAILBREAK_PATTERNS.md](./JAILBREAK_PATTERNS.md) for comprehensive catalog. INDIRECT PROMPT INJECTION Malicious instructions embedded in external data that the LLM processes. The user does not directly type the injection; it arrives through a data channel.2.3kinstalls31Path Traversal LfiThe path-traversal-lfi skill is an expert security playbook for path traversal reads and PHP local file inclusion with execution escalation. It covers encoding bypass sequences including URL, double URL, overlong UTF-8, mixed encodings, filter strip tricks, and legacy null byte injection. Target files span Linux passwd, shadow, proc environ, web configs, Windows hosts and web.config, plus high-value escalation paths through log poisoning, session file poisoning, and php filter base64 reads. Extended sections document Java Spring WEB-INF reads, Tomcat path normalization, Nginx alias misconfiguration, Node.js path.join quirks, IIS short filename enumeration, and impact escalation from read to RCE. Related routes link upload insecure files and ghost-bits-cast-attack for WAF-blocked Java backends. Parameter locations and high-frequency endpoints guide discovery across file, page, include, and download parameters. Use when file paths, download endpoints, include operations, or archive extraction may expose filesystem control or PHP execution chains.2.3kinstalls32Format String ExploitationThe format-string-exploitation skill is an expert playbook for printf-family vulnerabilities when user input controls format strings enabling stack reads and arbitrary memory writes. Identification covers vulnerable printf, fprintf, sprintf, and snprintf patterns versus safe fixed-format usage. Quick test sends AAAA percent p repeats looking for 0x41414141 offset in output. Reading memory uses percent p, positional percent N dollar p, and percent s dereference techniques with automated offset finding loops. Writing memory documents percent n, percent hn, and percent hhn for GOT and hook overwrites with pwntools automation. Targets include canary, saved RBP, return address, and libc leaks for PIE and ASLR bypass chaining to stack-overflow-and-rop and binary-protection-bypass skills. Related routes cover arbitrary-write-to-rce and heap-exploitation address leaks. Use when printf-family functions receive user-controlled format strings for reads, writes, GOT overwrites, and blind format string exploitation.2.3kinstalls33Binary Protection BypassThe binary-protection-bypass skill. Binary protection bypass playbook. Use when identifying and bypassing ASLR, PIE, NX/DEP, stack canary, RELRO, FORTIFY_SOURCE, CET, and MTE protections in ELF binaries to enable exploitation. Covers ASLR, PIE, NX, RELRO, canary, FORTIFY_SOURCE, stack clash, CET shadow stack, and ARM MTE. Each protection is paired with its bypass methods and required primitives. Distilled from ctf-wiki mitigation sections and real-world exploitation. Base models often confuse which protections block which attacks and miss the combinatorial effect of multiple protections. ASLR BYPASS ASLR randomizes base addresses of stack, heap, libc, and mmap regions at each execution. PIE BYPASS PIE (Position Independent Executable) randomizes the binary's own code/data base address. The workflow follows the source SKILL.md contract with progressive reference loading, clear trigger phrases, and practical steps developers can apply directly in agent sessions.2.3kinstalls34Xxe Xml External EntityThe xxe-xml-external-entity skill is an expert XXE playbook for XML, SVG, OOXML, SOAP, and parser-driven imports that may resolve external entities, files, or internal network resources. Classic payload uses DOCTYPE entity SYSTEM file read with root data reflection. Attack surface spans SOAP REST XML uploads, Office docx xlsx pptx, SVG, RSS parsers, and Content-Type switch from JSON to XML on dual-format backends. OOB section covers blind detection via collaborator DNS, attacker-hosted DTD exfiltration, and error-based blind reads. SCENARIOS.md extends Solr XXE RCE, Office docx injection steps, PHP expect protocol, and SOAP envelope entity injection. Related upload insecure files route when XXE is reachable through SVG or OOXML preview pipelines. Base models often miss OOB and non-XML context XXE. Use when XML SVG OOXML SOAP or imports may resolve external entities or internal network resources during security testing.2.3kinstalls35Cmdi Command InjectionThe cmdi-command-injection skill is an expert OS command injection playbook covering shell metacharacters, blind injection, time-based detection, OOB exfiltration, and polyglot payloads across PHP, Python, Node, and Java code patterns. First-pass families start with semicolon id, quoted argument breaks, sleep timing, command substitution, and nslookup OOB DNS with IFS and brace expansion bypass samples. Metacharacter table documents semicolon, pipe, logical AND OR, background ampersand, command substitution, redirects, and percent zero a newline injection. Vulnerable patterns include PHP shell_exec and exec concatenation, Python os.system and subprocess shell True, Node child_process exec, and Java Runtime.getRuntime.exec arrays. Extended sections cover filter bypass, allowlist evasion, Windows versus Linux payloads, and chained upload workflow routing. Use when user input may reach shell commands, process execution, converters, import pipelines, or blind out-of-band command sinks during security testing.2.3kinstalls36Graphql And Hidden ParametersThe graphql-and-hidden-parameters skill focuses on schema discovery, hidden parameter abuse, and batching as a force multiplier when GraphQL exists or REST docs hint at optional deprecated fields. First pass runs __typename and __schema types queries, then error-based discovery, __type probes, and JS or mobile bundle route extraction when introspection is restricted. High-value tests cover IDOR user queries, login batching arrays, admin-only fields in type definitions, and nested authz gaps on related objects. Hidden parameter discovery hunts admin-only docs fields, additionalProperties schemas, richer frontend request bodies, and mobile role org or feature-flag filters. Next routing links api-authorization-and-bola for privilege fields, api-auth-and-jwt-abuse for batching auth changes, and api-recon-and-docs for incomplete endpoint discovery. Use when exploring GraphQL introspection, batching, undocumented fields, schema abuse, or GraphQL authorization gaps. The workflow follows the source SKILL.md contract with progressive reference loading, clear trigger phrases, and practical steps developers can apply directly in agent sessions.2.3kinstalls37Kernel ExploitationThe kernel-exploitation skill. Linux kernel exploitation playbook. Use when exploiting kernel vulnerabilities (UAF, OOB, race condition, type confusion) for privilege escalation via commit_creds, modprobe_path overwrite, or kernel ROP chains in CTF and real-world scenarios. Covers environment setup (QEMU), vulnerability classes, privilege escalation targets, kernel ROP, ret2usr, stack pivoting, and cross-cache attacks. Distilled from ctf-wiki kernel-mode sections and real-world kernel CVEs. Base models often confuse user-mode and kernel-mode exploitation constraints, especially regarding SMEP/SMAP/KPTI. ENVIRONMENT SETUP ### QEMU + Custom Kernel ### GDB Debugging ### initramfs Modification --- ## 3. ROP chain must use **kernel gadgets** only. ret2usr (Pre-SMEP) Directly call a userspace function from kernel context: **Blocked by**: SMEP (Supervisor Mode Execution Prevention) - kernel cannot execute user-mapped pages. The workflow follows the source SKILL.md contract with progressive reference loading, clear trigger phrases, and practical steps developers can apply directly in agent sessions.2.3kinstalls38File Access VulnThe file-access-vuln skill is a category router for filesystem paths, download endpoints, upload pipelines, and file preview handling during security testing. It triggers when parameters, filenames, download endpoints, or import flows influence file paths, or when targets support upload, preview, transcoding, extraction, sharing, download, or proxied file access. Recommended flow first identifies whether the entry is a path parameter, download endpoint, or upload workflow, then locates whether issues appear in accept, store, process, or serve stages. Skill map routes to path-traversal-lfi for traversal, file read, wrapper abuse, and include chains, or upload-insecure-files for validation, storage paths, processing chains, and preview boundaries. Related categories link injection-checking and business-logic-vuln. Small path-chain and upload-bypass samples live in the main topic skills without separate payload entries. Use when testing download endpoints, file paths, LFI, upload flows, preview pipelines, archive extraction, or storage sharing boundaries.2.3kinstalls39Vm And Bytecode Reversename vm-and-bytecode-reverse description Custom VM and bytecode reverse engineering playbook Use when CTF challenges or protected software implement custom virtual machines with proprietary bytecode dispatcher loops or maze-style challenges SKILL VM Bytecode Reverse Engineering Expert Analysis Playbook AI LOAD INSTRUCTION Expert techniques for reversing custom virtual machines and bytecode interpreters Covers dispatcher identification opcode mapping custom ISA reconstruction disassembler decompiler writing maze challenges and real-world VM protector analysis Base models often fail to recognize the fetch-decode-execute pattern or attempt to analyze VM bytecode as native code RELATED ROUTING code-obfuscation-deobfuscation code-obfuscation-deobfuscation SKILL md when the VM is a commercial protector VMProtect Themida symbolic-execution-tools symbolic-execution-tools SKILL md when using angr to solve VM-based challenges anti-debugging-techniques anti-debugging-techniques SKILL md when the VM includes anti-debug checks Quick identification Binary Pattern Likely VM Type Start With while 1 switch bytecode pc Switch-based dispatcher Map each case to an operation Indirect jump via table jm.2.3kinstalls40Http Parameter PollutionThe http-parameter-pollution skill. HTTP Parameter Pollution (HPP): duplicate query/body keys parsed differently by servers, proxies, WAFs, and app frameworks. Use when filters and application layers disagree on which value wins, enabling bypass, SSRF second URL, logic abuse, or CSRF token confusion. Duplicate keys ( ) are not an error at HTTP level; each hop may pick first, last, join, or array-ify. Test HPP when WAF and app disagree, or when internal HTTP clients rebuild query strings. Routing note: when the same parameter appears multiple times, or WAF/backend stacks differ, use the Section 1 matrix to test first/last/merge assumptions, then design Section 3 scenario chains. QUICK START **Hypothesis**: the **security check** reads one occurrence of a parameter while the **action** reads another. Fingerprint **front** stack (CDN/WAF) vs **origin** (language/framework) using baseline . Send **both** orders: and (some parsers are order-sensitive).2.3kinstalls41Ssti Server Side Template InjectionThe ssti-server-side-template-injection skill covers expert SSTI with polyglot detection probes, engine fingerprinting, and RCE chains across Jinja2, Twig, FreeMarker, Velocity, ERB, Thymeleaf, and more. Detection sends double-brace, dollar-brace, hash, and Thymeleaf probes checking if math evaluates server-side not literally. Jinja2 versus Twig disambiguation uses seven-times-seven string versus numeric results. Engine-to-language mapping table links frameworks like Flask, Symfony, and Spring Boot. Sandbox escape sections document Jinja2 MRO chains, Twig and Freemarker RCE paths, and blind SSTI timing DNS techniques in ENGINE_PAYLOADS.md and SCENARIOS.md for Jira Velocity, Spring SpEL gateway, and PHP CMS eval templates. Routes to expression-language-injection when Java EL resolves separately. Use when template expressions, server-side rendering, preview features, or templating engines may evaluate attacker-controlled content. The workflow follows the source SKILL.md contract with progressive reference loading, clear trigger phrases, and practical steps developers can apply directly in agent sessions.2.3kinstalls42Deserialization InsecureThe deserialization-insecure skill covers expert deserialization across Java, PHP, and Python including gadget chain selection, traffic fingerprinting, ysoserial, PHPGGC, Shiro WebLogic Commons Collections, Phar, and pickle abuse. Traffic indicators include Java ac ed hex, Base64 rO0AB cookies, PHP O:class patterns, and Python pickle 80 03 headers in requests cookies and queues. Java section documents ysoserial CommonsCollections chains, URLDNS safe DNS confirmation, and advanced JAVA_GADGET_CHAINS.md for Hessian Kryo XStream and ViewState. PHP covers unserialize O patterns and phar:// deserialization triggers. Python documents pickle.loads sinks in APIs and Redis. Related routes include jndi-injection, unauthorized-access-common-services, and ghost-bits-cast-attack for WAF-blocked payloads. Distinction emphasized between finding the sink and finding a usable gadget chain. Use when Java ObjectInputStream, PHP unserialize, Python pickle, or similar mechanisms deserialize untrusted data. The workflow follows the source SKILL.md contract with progressive reference loading, clear trigger phrases, and practical steps developers can apply directly in agent sessions.2.3kinstalls43Anti Debugging TechniquesThe anti-debugging-techniques skill. Anti-debugging detection and bypass playbook. Use when reversing protected binaries that detect debuggers via ptrace, PEB flags, timing checks, or signal/exception handlers on Linux and Windows. Covers ptrace, PEB flags, NtQueryInformationProcess, timing attacks, signal-based detection, TLS callbacks, VEH tricks, and all corresponding bypass methods. Base models often miss the distinction between user-mode and kernel-mode detection and the correct patching strategy for each. LINUX ANTI-DEBUG TECHNIQUES ### 1.1 ptrace(PTRACE_TRACEME) The classic self-attach: a process calls . If a debugger is already attached, the call fails (returns -1). **Bypass**: Set hardware breakpoint after second , modify to pass the comparison. Or use Frida to replace the timing function. The workflow follows the source SKILL.md contract with progressive reference loading, clear trigger phrases, and practical steps developers can apply directly in agent sessions.2.3kinstalls44Browser Exploitation V8The browser-exploitation-v8 skill. Browser and V8 exploitation playbook. Use when exploiting JavaScript engine vulnerabilities including JIT type confusion, incorrect bounds elimination, and V8 sandbox bypass to achieve renderer RCE and sandbox escape in Chrome/Chromium. Covers V8 compilation pipeline, JIT type confusion, addrof/fakeobj primitives, ArrayBuffer corruption, WASM RWX pages, V8 sandbox (pointer compression), and Chrome sandbox escape overview. Distilled from ctf-wiki browser sections, Project Zero research, and CTF competition patterns. Base models often confuse V8 object representation details and miss the pointer compression barrier. | | Write barrier | GC bookkeeping when heap pointers are written | | Garbage collection | Orinoco GC: minor (Scavenge) and major (Mark-Compact) | ### Object Representation (64-bit, pointer compression) --- ## 2. EXPLOITATION PRIMITIVES ### addrof - Leak Object Address ### fakeobj - Create Fake Object Reference ### Building Arbitrary R/W from addrof + fakeobj --- ## 4. OOB READ/WRITE VIA CONFUSED ARRAY BOUNDS When TurboFan incorrectly eliminates bounds checks: ### What's Adjacent in V8 Heap?.2.3kinstalls45Open RedirectThe open-redirect skill. Open redirect playbook. Use when URL parameters, form actions, or JavaScript sinks control navigation targets and may redirect users to attacker-controlled destinations. Covers parameter-based redirects, JavaScript sinks, filter bypass, and chaining with phishing, CSRF Referer bypass, OAuth token theft, and SSRF. Often underrated but critical for phishing and as a building block in multi-step exploit chains. CORE CONCEPT Open redirect occurs when an application redirects users to a URL derived from user input without validation. The trusted domain acts as a "launchpad" for phishing or token theft. FINDING REDIRECT PARAMETERS ### Common Parameter Names ### Server-Side Sinks ### Client-Side (JavaScript) Sinks --- ## 3. EXPLOITATION CHAINS ### Phishing Amplification Attacker sends: Victim sees → clicks → enters credentials on clone site. The workflow follows the source SKILL.md contract with progressive reference loading, clear trigger phrases, and practical steps developers can apply directly in agent sessions.2.3kinstalls46Request SmugglingThe request-smuggling skill. HTTP request smuggling and desynchronization testing. Use when front proxies, CDNs, or load balancers disagree with the origin on message framing (Content-Length vs Transfer-Encoding), on HTTP/2→HTTP/1 translation, or when exploring client-side desync via browser fetch pipelines. Covers CL.TE, TE.CL, TE.TE obfuscation variants, HTTP/2 downgrade and pseudo-header confusion, client-side desync (browser pipelines), and tool-assisted fuzzing. Assumes familiarity with raw HTTP/1.1 framing and reverse-proxy topologies. This is not “header injection” - it is **message boundary disagreement** between hops. Routing note: load this skill when you suspect CDN/reverse-proxy and origin disagree on request-end boundaries, or when abnormal concatenation appears during H2-to-H1 downgrade. QUICK START ### CL.TE first probe (front-end trusts CL, back-end trusts chunked) Assumption: front end prioritizes , back end prioritizes . Use a very short CL so the front end accepts a fake end, while the back end continues chunk parsing and leaves remaining bytes for the next request.2.3kinstalls47Race ConditionThe race-condition skill. Race condition and TOCTOU testing for web apps. Use when testing one-time operations, concurrent HTTP abuse, rate-limit bypass, Turbo Intruder gates, HTTP/2 single-packet attacks, and CWE-362-style synchronization gaps. Prioritize **one-time** or **balance-like** operations. Combine **parallel transport** (HTTP/1.1 last-byte sync, HTTP/2 single-packet, Turbo Intruder gates) with **application evidence** (duplicate success responses, inconsistent balances, duplicate ledger rows). **Authorized testing only.** Routing note: for business workflows, coupons, inventory, or one-time rewards, start with this skill and cross-load . Capture the **state-changing** request in a proxy. Send **20 - 100** copies **as simultaneously as your tooling allows**. Classify outcome: **0/1 expected successes** vs **N successes** or **inconsistent final state**. The workflow follows the source SKILL.md contract with progressive reference loading, clear trigger phrases, and practical steps developers can apply directly in agent sessions.2.3kinstalls48Crlf InjectionThe crlf-injection skill. CRLF injection playbook. Use when user input reaches HTTP response headers, Location redirects, Set-Cookie values, or log files where carriage-return/line-feed characters can split or inject content. Covers header injection, response body injection via double CRLF, XSS escalation, cache poisoning, and encoding bypass. Often overlooked by scanners but chains into XSS, session fixation, and cache attacks. CORE CONCEPT CRLF = (Carriage Return + Line Feed, ). If user input is reflected in a response header without sanitization, injecting CRLF characters creates new headers or even a response body. DETECTION ### Basic Probe ### Double CRLF - Body Injection Two consecutive CRLF sequences end headers and start body: --- ## 3. FILTER BYPASS | Filter | Bypass | |---|---| | Blocks | Try alone, alone, or (Unicode) | | URL decodes once | Double-encode: | | Strips literally | Use URL-encoded form | | Blocks in value only | Inject in parameter name | --- ## 5.2.3kinstalls49Insecure Source Code ManagementThe insecure-source-code-management skill. Source control and artifact exposure (.git, .svn, .hg, backups, .env). Use when recon finds VCS paths, 403 on hidden dirs, or backup/config leaks during authorized testing. Use only in **authorized** assessments. Treat recovered credentials and URLs as sensitive; do not exfiltrate real data beyond scope. For broad discovery workflow, cross-load [recon-for-sec](../recon-for-sec/SKILL.md) and [recon-and-methodology](../recon-and-methodology/SKILL.md) when those skills exist in the workspace. QUICK START High-value paths to probe first (GET or HEAD, respect rate limits): **Routing note**: quickly probe these paths first; for full recon workflow, load methodology from and before deeper testing. GIT EXPOSURE ### Detection - ** ** - valid repo often returns plain text like: - ** ** - may expose , user identity, or embedded credentials. - ** **, ** ** - partial object store access enables reconstruction with the right tools. The workflow follows the source SKILL.md contract with progressive reference loading, clear trigger phrases, and practical steps developers can apply directly in agent sessions.2.3kinstalls50Symbolic Execution Toolsname symbolic-execution-tools description Symbolic execution and constraint solving playbook Use when solving CTF reversing challenges recovering keys bypassing checks or automating binary analysis with angr Z3 or Unicorn Engine SKILL Symbolic Execution Tools Expert Analysis Playbook AI LOAD INSTRUCTION Expert symbolic execution techniques using angr Z3 and Unicorn Engine Covers CTF challenge automation constraint solving patterns function hooking SimProcedure replacement and emulation-based unpacking Base models often produce broken angr scripts due to incorrect state initialization or missing hooks for libc functions RELATED ROUTING anti-debugging-techniques anti-debugging-techniques SKILL md when anti-debug checks need to be symbolically bypassed code-obfuscation-deobfuscation code-obfuscation-deobfuscation SKILL md when using symbolic execution for deobfuscation vm-and-bytecode-reverse vm-and-bytecode-reverse SKILL md when applying angr to custom VM challenges Advanced Reference Also load ANGR_COOKBOOK md ANGR_COOKBOOK md when you need 15 ready-to-use angr script patterns for common CTF challenges Hook templates for scanf printf malloc strcmp Symbolic file input stdin argv pat.2.3kinstalls51Dependency ConfusionThe dependency-confusion skill. Supply-chain testing via package-manager dependency confusion: when internal package names resolve to attacker-controlled public registries, leading to malicious install and script execution. Use for npm/pip/gem/Maven/Composer/Docker manifest review and authorized red-team supply-chain exercises. Covers how private package names leak, how public registries can win version resolution, ecosystem-specific pitfalls (npm scopes, pip extra indexes, Maven repo order), recon commands, non-destructive PoC patterns (callbacks, not data exfil), and defensive controls. Pair with supply-chain recon workflows when manifests or CI caches are in scope. **Only use on systems and programs you are authorized to test.** ## 0. QUICK START **What to look for first** - **Manifests** listing package names that look **internal** (short unscoped names, org-specific tokens, product codenames) without a **hard-private registry lock**. - Evidence the **same name** might exist - or be **squattable** - on a **public** registry with a **higher semver** than the private feed publishes.2.3kinstalls52Web Cache DeceptionThe web-cache-deception skill. Web cache deception and poisoning playbook. Use when CDN, reverse proxy, or application caching may serve sensitive authenticated content to other users due to path confusion or cache key manipulation. Covers path confusion attacks, CDN cache behavior exploitation, cache key manipulation, and the distinction between cache deception (steal data) and cache poisoning (serve malicious content). Presented by Omer Gil at Black Hat 2017 and significantly expanded since. CACHE POISONING - ATTACK METHODOLOGY ### Unkeyed Input Discovery Cache keys typically include: , URL path, query string. These are typically NOT in the cache key: , , , cookies, custom headers. PATH NORMALIZATION DIFFERENCES The key to cache deception: **CDN and application normalize paths differently**. CACHE POISONING REAL-WORLD PATTERN ### X-Forwarded-Host → Open Graph / Meta Tag Injection ### Cache Deception with Path Separator Tricks --- ## 6. The workflow follows the source SKILL.md contract with progressive reference loading, clear trigger phrases, and practical steps developers can apply directly in agent sessions.2.3kinstalls53Expression Language InjectionThe expression-language-injection skill. Expression Language injection playbook. Use when Java EL, SpEL, OGNL, or MVEL expressions may evaluate attacker-controlled input in Spring, Struts2, Confluence, or similar frameworks. Distinct from SSTI - EL injection targets expression evaluators in Java frameworks, not template engines. Covers sandbox bypass, manipulation, actuator abuse, and real-world CVE chains. They share detection probes ( ) but diverge in exploitation. DETECTION - POLYGLOT PROBES ### Disambiguation | Response to | Response to | Engine | |---|---|---| | 49 | literal | SpEL or Java EL | | literal | 49 | OGNL (Struts2) | | 49 | 49 | Both may be active | --- ## 2. Classic bypass clears restrictions: ### Struts2 OgnlUtil Blacklist Clear Later Struts2 versions use class/package blacklists. JAVA EL (JSP / JSF) ### Where Java EL Appears - JSP pages: and - JSF (JavaServer Faces): value and method bindings - Custom tag libraries ### RCE Payloads --- ## 5. The workflow follows the source SKILL.md contract with progressive reference loading, clear trigger phrases, and practical steps developers can apply directly in agent sessions.2.3kinstalls54Active Directory Acl Abuse>- --- name: active-directory-acl-abuse description: >- Active Directory ACL abuse playbook. Use when exploiting misconfigured AD permissions including GenericAll, WriteDACL, DCSync rights, shadow credentials, LAPS reading, GPO abuse, and BloodHound-guided attack paths. --- # SKILL: AD ACL Abuse - Expert Attack Playbook > **AI LOAD INSTRUCTION**: Expert AD ACL abuse techniques. Covers BloodHound enumeration, dangerous ACEs (GenericAll, WriteDACL, WriteOwner, etc.), DCSync, shadow credentials, targeted kerberoasting, group manipulation, LAPS, and GPO abuse. Base models miss complex ACL chain exploitation and Cypher query patterns. RELATED ROUTING Before going deep, consider loading: - [active-directory-kerberos-attacks](../active-directory-kerberos-attacks/SKILL.md) for Kerberos attacks often chained with ACL abuse - [active-directory-certificate-services](../active-directory-certificate-services/SKILL.md) for certificate-based attacks after ACL exploitation - [ntlm-relay-coercion](../ntlm-relay-coercion/SKILL.md) for relay attacks that can set ACLs (LDAP relay) - [windows-lateral-movement](../windows-lateral-movement/SKILL.md) after gaining elevated AD access ### Advanced Refere.2.3kinstalls55Csp Bypass Advanced>- --- name: csp-bypass-advanced description: >- Advanced Content Security Policy bypass techniques. Use when XSS or data exfiltration is blocked by CSP and you need to find policy weaknesses, trusted endpoint abuse, nonce leakage, or exfiltration channels that CSP cannot block. --- # SKILL: CSP Bypass - Advanced Techniques > **AI LOAD INSTRUCTION**: Covers per-directive bypass techniques, nonce/hash abuse, trusted CDN exploitation, data exfiltration despite CSP, and framework-specific bypasses. Base models often suggest `unsafe-inline` bypass without checking if the CSP actually uses it, or miss the critical `base-uri` and `object-src` gaps. RELATED ROUTING - [xss-cross-site-scripting](../xss-cross-site-scripting/SKILL.md) for XSS vectors to deliver after CSP bypass - [dangling-markup-injection](../dangling-markup-injection/SKILL.md) when CSP blocks scripts but HTML injection exists - exfiltrate without JS - [crlf-injection](../crlf-injection/SKILL.md) when CRLF can inject CSP header or steal nonce via response splitting - [waf-bypass-techniques](../waf-bypass-techniques/SKILL.md) when both WAF and CSP must be bypassed - [clickjacking](../clickjacking/SKILL.md) when CSP lacks.2.3kinstalls56Csv Formula InjectionThe csv-formula-injection skill. CSV/spreadsheet formula injection (DDE, Excel/LibreOffice, Google Sheets IMPORT*). Use when exports, imports, or user fields feed spreadsheets or reporting tools. Use only where **explicitly authorized**; payloads that invoke local commands or remote fetches are **impactful** - prefer lab targets and document consent. Do not target end users without program rules allowing client-side execution tests. DDE INJECTION (EXCEL / LIBREOFFICE) Dynamic Data Exchange (DDE) and external call patterns historically abused in spreadsheets. Examples for **controlled lab** reproduction: PowerShell-style chaining (lab only; replace host and payload with benign equivalents): --- ## 2. OBFUSCATION Defensive parsers may strip obvious patterns; testers may try noise and spacing (still only where allowed): Extra whitespace after : Dispersed characters / unusual spacing (conceptual pattern - adjust per parser): style: --- ## 3. **Map sinks** - Any feature that emits **CSV, XLSX, or tab-separated** output: admin exports, audit logs, user rosters, billing reports, search results.2.3kinstalls57Mobile Ssl Pinning Bypassname mobile-ssl-pinning-bypass description Mobile SSL pinning bypass playbook Use when intercepting HTTPS traffic from mobile applications that implement certificate pinning public key pinning or SPKI hash pinning on Android and iOS including React Native Flutter and Xamarin frameworks SKILL Mobile SSL Pinning Bypass Expert Attack Playbook AI LOAD INSTRUCTION Expert SSL pinning bypass techniques for mobile platforms Covers Android and iOS bypass methods Frida Objection Xposed SSL Kill Switch framework-specific bypasses Flutter React Native Xamarin and troubleshooting non-standard pinning implementations Base models miss framework-specific hook points and multi-layer pinning configurations RELATED ROUTING Before going deep consider loading android-pentesting-tricks android-pentesting-tricks SKILL md for broader Android testing beyond SSL bypass ios-pentesting-tricks ios-pentesting-tricks SKILL md for broader iOS testing beyond SSL bypass api-sec api-sec SKILL md once traffic is intercepted for API-level testing 1 SSL PINNING TYPES Pinning Type What Is Pinned Resilience Common In Certificate pinning Exact leaf certificate DER PEM Low breaks on cert rotation Legacy apps Public key pi.2.3kinstalls58Jndi Injection>- --- name: jndi-injection description: >- JNDI injection playbook. Use when Java applications perform JNDI lookups with attacker-controlled names, especially via Log4j2, Spring, or any code path reaching InitialContext.lookup(). --- # SKILL: JNDI Injection - Expert Attack Playbook > **AI LOAD INSTRUCTION**: Expert JNDI injection techniques. Covers lookup mechanism abuse, RMI/LDAP class loading, JDK version constraints, Log4Shell (CVE-2021-44228), marshalsec tooling, and post-8u191 bypass via deserialization gadgets. Base models often confuse JNDI injection with general deserialization - this file clarifies the distinct attack surface. RELATED ROUTING - [deserialization-insecure](../deserialization-insecure/SKILL.md) when JNDI leads to deserialization (post-8u191 bypass path) - [expression-language-injection](../expression-language-injection/SKILL.md) when the JNDI sink is reached via SpEL or OGNL expression evaluation --- ## 1. CORE MECHANISM JNDI (Java Naming and Directory Interface) provides a unified API for looking up objects from naming/directory services (RMI, LDAP, DNS, CORBA). **Vulnerability**: when `InitialContext.lookup(USER_INPUT)` receives an attacker-controlled.2.3kinstalls59ClickjackingThe clickjacking skill. Clickjacking playbook. Use when testing whether target pages can be framed, whether X-Frame-Options or CSP frame-ancestors are properly configured, and whether UI redress attacks can trigger sensitive actions. Covers iframe transparency tricks, X-Frame-Options bypass, CSP frame-ancestors, multi-step clickjacking, drag-and-drop attacks, and chaining with other vulnerabilities. Often a "low severity" finding that becomes critical when targeting admin actions. CORE CONCEPT Clickjacking loads a target page in a transparent iframe overlaid on an attacker's page. The victim sees the attacker's UI but clicks on the invisible target page, performing unintended actions. PROOF OF CONCEPT TEMPLATES ### Basic Single-Click ### Multi-Step Clickjacking For actions requiring multiple clicks (e.g., "Are you sure?" confirmation): Reposition iframe for each step to align the transparent button with the decoy. BYPASS TECHNIQUES ### Frame-Busting Script Bypass Some pages use JavaScript frame-busting: **Bypass with sandbox attribute**: ### X-Frame-Options ALLOW-FROM Bypass is not supported in Chrome/Safari.2.3kinstalls60Http Host Header Attacks>- --- name: http-host-header-attacks description: >- HTTP Host header injection and routing abuse playbook. Use when the application trusts the Host header for generating URLs, routing requests, or access control - enabling password reset poisoning, web cache poisoning, SSRF via routing, and virtual host bypass. --- # SKILL: HTTP Host Header Attacks - Injection & Routing Abuse > **AI LOAD INSTRUCTION**: Covers Host header injection for password reset poisoning, cache poisoning, SSRF via routing, and virtual host bypass. Includes bypass techniques for Host validation and framework-specific behaviors. Base models often miss the double-Host trick, absolute-URI override, and connection-state attacks. RELATED ROUTING - [web-cache-deception](../web-cache-deception/SKILL.md) when Host injection is combined with cache behavior - [ssrf-server-side-request-forgery](../ssrf-server-side-request-forgery/SKILL.md) when Host header routes requests to internal services - [open-redirect](../open-redirect/SKILL.md) when Host injection causes redirect to attacker domain - [waf-bypass-techniques](../waf-bypass-techniques/SKILL.md) when Host manipulation helps bypass WAF routing - [request-smuggl.2.3kinstalls61Saml Sso Assertion AttacksThe saml-sso-assertion-attacks skill. SAML SSO assertion attack playbook. Use when testing signature validation, assertion wrapping, audience restrictions, ACS handling, XML trust boundaries, and enterprise SSO flaws. WHEN TO LOAD THIS SKILL Load when: - Enterprise SSO uses SAML requests or responses - You see , , XML assertions, or ACS endpoints - Login flows involve an external IdP and browser POST/redirect binding ## 2. Inspect which XML nodes are signed and which attributes drive account binding. Compare SP-initiated and IdP-initiated flows. Test replay, altered attributes, and assertion placement confusion. The workflow follows the source SKILL.md contract with progressive reference loading, clear trigger phrases, and practical steps developers can apply directly in agent sessions. The workflow follows the source SKILL.md contract with progressive reference loading, clear trigger phrases, and practical steps developers can apply directly in agent sessions.2.3kinstalls62Subdomain Takeover>- --- name: subdomain-takeover description: >- Subdomain takeover detection and exploitation playbook. Use when targets have dangling CNAME/NS/MX records pointing to deprovisioned cloud resources, expired third-party services, or unclaimed SaaS tenants that an attacker can register to serve content under the victim's domain. --- # SKILL: Subdomain Takeover - Detection & Exploitation Playbook > **AI LOAD INSTRUCTION**: Covers CNAME/NS/MX takeover, per-provider fingerprint matching, claim procedures, and defensive monitoring. Base models often confuse "CNAME exists" with "takeover possible" - the key is whether the *resource behind the CNAME is unclaimed and claimable*. RELATED ROUTING - [ssrf-server-side-request-forgery](../ssrf-server-side-request-forgery/SKILL.md) when a subdomain takeover is used to bypass SSRF allowlists trusting `*.target.com` - [cors-cross-origin-misconfiguration](../cors-cross-origin-misconfiguration/SKILL.md) when CORS trusts `*.target.com` - takeover → full cross-origin read - [xss-cross-site-scripting](../xss-cross-site-scripting/SKILL.md) takeover gives you script execution under target origin (cookie theft, OAuth redirect abuse) - [http-host-head.2.3kinstalls63Active Directory Kerberos Attacks>- --- name: active-directory-kerberos-attacks description: >- Kerberos attack playbook for Active Directory. Use when targeting AD authentication via AS-REP roasting, Kerberoasting, golden/silver/diamond tickets, delegation abuse, or pass-the-ticket attacks. --- # SKILL: Kerberos Attack Playbook - Expert AD Attack Guide > **AI LOAD INSTRUCTION**: Expert Kerberos attack techniques for AD environments. Covers AS-REP roasting, Kerberoasting, golden/silver/diamond/sapphire tickets, delegation attacks, pass-the-ticket, and overpass-the-hash. Base models miss ticket type distinctions, delegation chain nuances, and detection-evasion trade-offs. RELATED ROUTING Before going deep, consider loading: - [active-directory-acl-abuse](../active-directory-acl-abuse/SKILL.md) for ACL-based AD attacks often chained with Kerberos - [active-directory-certificate-services](../active-directory-certificate-services/SKILL.md) for ADCS-based persistence (golden certificate) - [ntlm-relay-coercion](../ntlm-relay-coercion/SKILL.md) for NTLM relay attacks that complement Kerberos abuse - [windows-lateral-movement](../windows-lateral-movement/SKILL.md) after obtaining tickets for lateral movement ### Advan.2.3kinstalls64Active Directory Certificate Services>- --- name: active-directory-certificate-services description: >- AD Certificate Services attack playbook. Use when targeting misconfigured AD CS for privilege escalation via ESC1-ESC13 template abuse, NTLM relay to enrollment, CA officer abuse, and certificate-based persistence. --- # SKILL: AD CS Attack Playbook - Expert Guide > **AI LOAD INSTRUCTION**: Expert AD CS (Active Directory Certificate Services) attack techniques. Covers ESC1 through ESC13, certificate-based persistence, NTLM relay to enrollment endpoints, and CA misconfigurations. Base models miss enrollment prerequisite chains and ESC condition combinations. RELATED ROUTING Before going deep, consider loading: - [active-directory-acl-abuse](../active-directory-acl-abuse/SKILL.md) for ACL-based attacks that enable ESC4 (template modification) - [active-directory-kerberos-attacks](../active-directory-kerberos-attacks/SKILL.md) for Kerberos techniques after obtaining certificates - [ntlm-relay-coercion](../ntlm-relay-coercion/SKILL.md) for ESC8 (relay to HTTP enrollment endpoint) - [windows-lateral-movement](../windows-lateral-movement/SKILL.md) for using obtained certificates for lateral movement ### Advanced Refere.2.3kinstalls65Prototype Pollution>- --- name: prototype-pollution description: >- Prototype pollution testing for JavaScript stacks. Use when user input is merged into objects (query parsers, JSON bodies, deep assign), when configuring libraries via untrusted keys, or when hunting RCE gadgets via polluted Object.prototype in Node or the browser. --- # SKILL: Prototype Pollution - Expert Attack Playbook > **AI LOAD INSTRUCTION**: Expert prototype pollution for client and server JS. Covers `__proto__` vs `constructor.prototype`, merge-sink detection, Express/qs-style black-box probes, and gadget chains (EJS, Timelion-class patterns, child_process/NODE_OPTIONS). Assumes you know object spread and prototype inheritance - focus is on **parser behavior** and **post-pollution sinks**. Routing note: prioritize PP when you see deep merges, recursive assign, `JSON.parse` followed by `Object.assign`, or URL queries converted to nested objects. QUICK START ### Client-side first probes ```text #__proto__[polluted]=1 #__proto__[polluted]=polluted #constructor[prototype][polluted]=1 ``` When input can reflect into DOM or framework routing, pair with `alert(1)` / `console` checks to observe whether global object properties w.2.3kinstalls66Defi Attack PatternsThe defi-attack-patterns skill. DeFi attack pattern playbook. Use when analyzing flash loan attacks, price oracle manipulation, MEV sandwich attacks, governance exploits, bridge vulnerabilities, and token standard edge cases in decentralized finance protocols. Covers flash loan mechanics, oracle manipulation (spot vs TWAP), MEV extraction (sandwich, JIT, liquidation), precision loss attacks, governance exploits, bridge vulnerabilities, and token standard pitfalls. Base models often miss the single-transaction atomicity constraint of flash loans and the distinction between spot price and TWAP manipulation. FLASH LOAN ATTACKS ### 1.1 Mechanism Flash loans provide uncollateralized borrowing within a single transaction. The entire borrow → use → repay cycle must complete atomically; if repayment fails, the transaction reverts as if nothing happened. Must use TWAP or external oracle (Chainlink). Exploits the combination of flash loan capital with reentrancy in pool accounting logic.2.3kinstalls67Hash Attack TechniquesThe hash-attack-techniques skill. Hash attack playbook. Use when exploiting length extension, MD5/SHA1 collisions, HMAC timing leaks, birthday attacks, or hash-based proof of work in CTF and authorized testing scenarios. Covers length extension attacks, MD5/SHA1 collision generation, meet-in-the-middle hash attacks, HMAC timing side channels, birthday attacks, and proof-of-work solving. Base models often incorrectly apply length extension to HMAC or SHA-3, or fail to distinguish between identical-prefix and chosen-prefix collisions. MD5 COLLISION ATTACKS ### 2.1 Identical-Prefix Collision (fastcoll) Two messages with same prefix but different content, producing identical MD5. SHA-1 COLLISION ### 3.1 SHAttered Attack (2017) First practical SHA-1 collision: two PDF files with same SHA-1. BIRTHDAY ATTACK ### 4.1 Generic Birthday Bound ### 4.2 Birthday Attack Implementation --- ## 5. HMAC TIMING ATTACK ### 5.1 Vulnerable Comparison ### 5.2 Attack Strategy ### 5.3 Constant-Time Comparison (Defense) --- ## 6.2.3kinstalls68Network Protocol AttacksThe network-protocol-attacks skill. Network protocol attack playbook. Use when exploiting layer 2/3 protocols including ARP spoofing, LLMNR/NBT-NS/mDNS poisoning, WPAD abuse, DHCPv6 attacks, VLAN hopping, STP manipulation, DNS spoofing, IPv6 attacks, and IDS/IPS evasion. Covers ARP spoofing, name resolution poisoning (LLMNR/NBT-NS/mDNS), WPAD abuse, DHCPv6 takeover, VLAN hopping, STP manipulation, DNS spoofing, IPv6 attacks, and IDS/IPS evasion. Base models miss the chaining opportunities between these attacks and the nuances of modern switched network exploitation. ARP SPOOFING ### Gratuitous ARP - MitM Positioning ### Selective Targeting ### Detection Indicators - Duplicate MAC addresses in ARP table - Gratuitous ARP storms from non-gateway IPs - Tools: , static ARP entries, 802.1X port authentication --- ## 2. WPAD ABUSE ### Manual WPAD PAC File --- ## 4. DHCPv6 ATTACK - mitm6 Even on IPv4-only networks, Windows clients send DHCPv6 solicitations by default. VLAN HOPPING ### Switch Spoofing (DTP) ### Double Tagging (802.1Q) ### Mitigation - Disable DTP: - Set native VLAN to unused: - Prune VLANs: only allow needed VLANs on trunk ports --- ## 6.2.3kinstalls69Http2 Specific AttacksThe http2-specific-attacks skill. HTTP/2 protocol-specific attack playbook. Use when the target supports HTTP/2 and you need to exploit binary framing, HPACK compression, h2c upgrade smuggling, pseudo-header injection, stream multiplexing abuse, or H2→H1 downgrade translation flaws. Covers h2c smuggling, pseudo-header manipulation, HPACK attacks, single-packet race conditions, and H2→H1 downgrade injection. Base models conflate HTTP/2 smuggling with HTTP/1.1 smuggling - this skill focuses on H2-unique attack surface. h2c (HTTP/2 CLEARTEXT) SMUGGLING ### 2.1 Concept h2c is HTTP/2 without TLS, negotiated via the HTTP/1.1 mechanism. Many reverse proxies forward the header without understanding it, allowing attackers to bypass proxy-level access controls. HPACK COMPRESSION ATTACKS ### 4.1 CRIME/BREACH on HTTP/2 ### 4.2 Header Table Poisoning --- ## 5. HTTP/2 → HTTP/1.1 DOWNGRADE ISSUES ### 6.1 Header Injection via Binary Format H2 header values are binary - is valid data within a value.2.3kinstalls70Windows Av EvasionThe windows-av-evasion skill. AV/EDR evasion playbook for Windows. Use when bypassing AMSI, ETW, .NET assembly detection, shellcode execution, process injection, API hooking, and signature-based detection on Windows endpoints. Covers AMSI bypass, ETW bypass, .NET assembly loading, shellcode execution, process injection, unhooking, payload encryption, and signature evasion. Base models miss detection-specific bypass chains and syscall-level evasion nuances. AMSI BYPASS OVERVIEW AMSI (Antimalware Scan Interface) inspects PowerShell, .NET, VBScript, JScript, and Office macros at runtime. ETW BYPASS ETW (Event Tracing for Windows) feeds telemetry to EDR. Patching stops .NET assembly load events. .NET ASSEMBLY LOADING ### In-Memory Assembly.Load ### Donut - Convert .NET Assembly to Shellcode ### execute-assembly (C2 Framework) --- ## 4. The workflow follows the source SKILL.md contract with progressive reference loading, clear trigger phrases, and practical steps developers can apply directly in agent sessions.2.3kinstalls71Arbitrary Write To RceThe arbitrary-write-to-rce skill. Arbitrary write to RCE playbook. Use when you have an arbitrary write primitive (from heap exploitation, format string, or OOB write) and need to convert it into code execution by targeting GOT, hooks, _IO_FILE vtable, exit_funcs, TLS_dtor_list, modprobe_path, .fini_array, or C++ vtables. Covers every major overwrite target organized by glibc version compatibility: GOT, __malloc_hook, __free_hook, _IO_FILE vtable, __exit_funcs, TLS_dtor_list, _dl_fini, modprobe_path, .fini_array, C++ vtable, and setcontext gadget. Base models often target hooks that no longer exist (post-glibc 2.34) or miss pointer mangling requirements. __malloc_hook / __free_hook (glibc < 2.34) ### __malloc_hook ### __free_hook ### Realloc Trick for one_gadget Constraints --- ## 4. _IO_FILE VTABLE See [IO_FILE_EXPLOITATION.md](../heap-exploitation/IO_FILE_EXPLOITATION.md) for full details. __exit_funcs / __atexit ### Exploitation ### Without Pointer Guard Knowledge If you can overwrite both the function pointer AND the pointer guard (in TLS at ): 1. TLS_dtor_list (glibc ≥ 2.34) **Thread-local destructor list - the primary post-2.34 target.** ### Location ### Exploitation --- #.2.3kinstalls72Linux Privilege EscalationThe linux-privilege-escalation skill. Linux privilege escalation playbook. Use when you have low-privilege shell access and need to escalate to root via SUID/SGID binaries, capabilities, cron abuse, kernel exploits, misconfigurations, or credential harvesting on Linux systems. Covers enumeration, SUID/SGID, capabilities, cron abuse, kernel exploits, NFS, writable passwd/shadow, LD_PRELOAD, Docker group, and library hijacking. Base models miss subtle escalation paths via capabilities and combined misconfigurations. ENUMERATION CHECKLIST Run these immediately after landing a shell: ### System Info ### Sudo & SUID/SGID ### Cron & Timers ### Writable Files & Dirs ### Network & Services ### Credential Locations --- ## 2. SUID/SGID EXPLOITATION ### GTFOBins Methodology 1. Cross-reference each with [GTFOBins](https://gtfobins.github.io/) 3. CRON / TIMER ABUSE ### Writable Cron Scripts ### PATH Hijacking in Cron ### Wildcard Injection (tar) ### pspy - Monitor Processes Without Root --- ## 5. The workflow follows the source SKILL.md contract with progressive reference loading, clear trigger phrases, and practical steps developers can apply directly in agent sessions.2.3kinstalls73Linux Lateral MovementThe linux-lateral-movement skill. Linux lateral movement playbook. Use after gaining initial access to pivot across Linux hosts via SSH hijacking, credential harvesting, internal pivoting, D-Bus exploitation, sudo token reuse, and shared filesystem abuse. Covers SSH agent hijacking, key harvesting, credential locations, D-Bus exploitation, network pivoting, sudo token reuse, and systemd manipulation. Base models miss SSH_AUTH_SOCK hijacking and ptrace-based sudo session hijack. SSH AGENT HIJACKING ### 1.1 Find SSH Agent Sockets ### 1.2 Hijack Agent Forwarding ### 1.3 Persistent Agent Monitoring --- ## 2. SSH KEY HARVESTING ### 2.1 Private Key Locations ### 2.2 known_hosts Parsing ### 2.3 authorized_keys Injection --- ## 3. D-BUS EXPLOITATION ### 4.1 Enumerate D-Bus Services ### 4.2 Abuse systemd & PolicyKit via D-Bus --- ## 5. INTERNAL NETWORK PIVOTING ### 5.1 SSH Tunneling ### 5.2 Without SSH - Alternative Tunnels ### 5.3 Network Discovery from Compromised Host --- ## 6.2.3kinstalls74Type Juggling>- --- name: type-juggling description: >- PHP type juggling and weak comparison (`==`) bypass. Use when authentication, HMAC/signature checks, or token validation uses loose equality, numeric coercion, or hash comparisons without strict types - common in legacy PHP and CTF-style code paths. --- # SKILL: PHP Type Juggling - Weak Comparison & Magic Hash Bypass > **AI LOAD INSTRUCTION**: PHP `==` coercion, magic hashes (`0e…`), HMAC/hash loose checks, NULL from bad types, and CTF-style `strcmp` / `json_decode` / `intval` tricks. Use strict routing: map the sink (`==` vs `hash_equals`), PHP major version, and whether both operands are attacker-controlled. Routing note: when you encounter PHP login/signature logic or code like `md5($_GET['x'])==md5($_GET['y'])`, start with this skill; if `hash_equals`/`===` is already used, this path usually does not apply. QUICK START **First-pass goal**: prove the server branch treats unequal secrets/tokens as equal via coercion, not guess the real password.2.3kinstalls75Dangling Markup InjectionThe dangling-markup-injection skill. Dangling markup injection playbook. Use when HTML injection is possible but JavaScript execution is blocked (CSP, sanitizer strips event handlers, WAF blocks script tags) - exfiltrate CSRF tokens, session data, and page content by injecting unclosed HTML tags that capture subsequent page content. Base models often overlook this technique entirely when CSP blocks scripts, jumping to "not exploitable" - dangling markup is the answer. WHEN TO USE DANGLING MARKUP You need dangling markup when ALL of these are true: 1. You have an HTML injection point (reflected or stored) 2. JavaScript execution is blocked: - CSP blocks inline scripts and event handlers - Sanitizer strips , , , etc. CORE TECHNIQUE Inject an unclosed HTML tag with a , , , or similar attribute pointing to your server. The unclosed attribute quote "consumes" all subsequent page content until the browser finds a matching quote.2.3kinstalls76Xslt Injection>- --- name: xslt-injection description: >- XSLT injection testing: processor fingerprinting, XXE and document() SSRF, EXSLT write primitives, PHP/Java/.NET extension RCE surfaces. Use when user-controlled XSLT/stylesheet input or transform endpoints are in scope. --- # SKILL: XSLT Injection - Testing Playbook > **AI LOAD INSTRUCTION**: XSLT injection occurs when **attacker-influenced XSLT** is compiled/executed server-side. Map the **processor family** first (Java/.NET/PHP/libxslt). Then chain **document()**, **external entities**, **EXSLT**, or **embedded script/extension functions** per platform. **Authorized testing only**; many payloads are destructive. Routing note: if input is generic XML parsing and may not flow through XSLT, cross-load `xxe-xml-external-entity`; if you care about outbound `document(http:...)` requests, cross-load `ssrf-server-side-request-forgery`. **Find sinks**: parameters named `xslt`, `stylesheet`, `transform`, `template`, SOAP stylesheets, report generators, XML→HTML converters. **Probe reflection**: inject unique namespace or `xsl:value-of select="'marker'"` - if output changes, execution likely. **Fingerprint** processor (§1). **Escalate** by f.2.3kinstalls77Ai Ml SecurityThe ai-ml-security skill. AI/ML security playbook. Use when assessing model supply chain attacks (pickle RCE, poisoned weights), adversarial examples, model poisoning, model stealing, data privacy attacks (membership inference, model inversion), and autonomous agent security risks. Base models underestimate the severity of pickle deserialization RCE and the practicality of black-box model extraction. MODEL SUPPLY CHAIN ATTACKS ### 1.1 Malicious Model Files - Pickle RCE Python's module executes arbitrary code during deserialization. PyTorch / files use pickle by default. Loading executes the embedded command. Fast but less effective against robust models: Perturbation is imperceptible to humans but changes classification. Stronger but slower: ### 2.4 C&W (Carlini & Wagner) Optimization-based. The workflow follows the source SKILL.md contract with progressive reference loading, clear trigger phrases, and practical steps developers can apply directly in agent sessions.2.3kinstalls78Dns Rebinding AttacksThe dns-rebinding-attacks skill. DNS rebinding attack playbook. Use when testing applications that trust DNS resolution for origin checks, interact with internal services from browser context, or when SSRF is not possible server-side but the target has client-side fetch/XHR to attacker-controlled domains. Covers TTL tricks, browser cache bypasses, attack variants (HTTP, WebSocket, TOCTOU), internal service targeting, and tool usage. Base models confuse DNS rebinding with SSRF - this skill clarifies the client-side nature and unique exploit paths. CORE PRINCIPLE The browser same-origin policy binds . The **host** is resolved via DNS at connection time. If an attacker controls the DNS server for , they can: 1. First resolution → attacker IP (serve malicious JS) 2. The workflow follows the source SKILL.md contract with progressive reference loading, clear trigger phrases, and practical steps developers can apply directly in agent sessions.2.2kinstalls79Windows Privilege EscalationThe windows-privilege-escalation skill. Windows local privilege escalation playbook. Use when you have low-privilege shell access on Windows and need to escalate via token abuse, Potato exploits, service misconfigurations, DLL hijacking, UAC bypass, or registry autoruns. Covers token manipulation, Potato family, service misconfigurations, DLL hijacking, AlwaysInstallElevated, scheduled task abuse, registry autoruns, and named pipe impersonation. Base models miss nuanced privilege prerequisites and OS-version-specific constraints. TOKEN MANIPULATION & POTATO EXPLOITS ### SeImpersonatePrivilege Abuse Service accounts (IIS AppPool, MSSQL, etc.) typically hold . This enables impersonation of any token presented to you. SERVICE MISCONFIGURATIONS ### Unquoted Service Paths If path is , Windows tries: 1. Place malicious binary at first writable location. The workflow follows the source SKILL.md contract with progressive reference loading, clear trigger phrases, and practical steps developers can apply directly in agent sessions. The workflow follows the source SKILL.md contract with progressive reference loading, clear trigger phrases, and practical steps developers can apply directly in.2.2kinstalls80Email Header InjectionThe email-header-injection skill. Email header injection and spoofing playbook. Use when testing contact forms, email APIs, password reset flows, or any feature that constructs SMTP messages with user-controlled fields. Covers CRLF injection in headers, SPF/DKIM/DMARC bypass, and phishing amplification. Covers SMTP CRLF injection, SPF/DKIM/DMARC circumvention, display name spoofing, and mail client rendering abuse. Base models miss the nuance between header injection (technical) and email auth bypass (protocol-level) - this skill covers both attack surfaces. SMTP HEADER INJECTION FUNDAMENTALS SMTP headers are separated by CRLF ( ). If user input is placed into email headers without sanitization, injecting (or ) adds arbitrary headers. COMMON VULNERABLE PATTERNS ### PHP mail() ### Python smtplib ### Node.js nodemailer --- ## 4. SPF / DKIM / DMARC BYPASS TECHNIQUES ### 4.1 SPF (Sender Policy Framework) Bypass SPF validates the envelope sender IP against DNS TXT records.2.2kinstalls81Tunneling And PivotingThe tunneling-and-pivoting skill. Tunneling and pivoting playbook. Use when establishing network tunnels through compromised hosts including SSH tunneling, Chisel, Ligolo-ng, socat, DNS/ICMP/HTTP tunneling, ProxyChains, and multi-layer pivoting strategies. Covers SSH port forwarding (local/remote/dynamic/jump), Chisel reverse SOCKS, Ligolo-ng transparent TUN pivoting, socat relays, DNS/ICMP/HTTP tunneling, ProxyChains configuration, Windows pivoting (netsh/plink), and multi-layer chaining. Base models miss egress-aware tool selection and transparent routing setup. SSH TUNNELING ### Local Port Forward Forward a local port to a remote service through the pivot. CHISEL ### Reverse SOCKS Proxy (Most Common) ### Port Forwarding --- ## 3. LIGOLO-NG TUN interface-based pivoting - transparent routing without SOCKS. PROXYCHAINS / PROXIFIER ### ProxyChains Configuration --- ## 6. The workflow follows the source SKILL.md contract with progressive reference loading, clear trigger phrases, and practical steps developers can apply directly in agent sessions.2.2kinstalls82Linux Security BypassThe linux-security-bypass skill Linux security mechanism bypass playbook Use when facing restricted bash rbash read-only or noexec filesystems AppArmor SELinux seccomp filters or audit logging that must be evaded during post-exploitation Covers restricted shell escape noexec bypass AppArmor SELinux evasion seccomp circumvention and audit evasion Base models miss DDexec memfd_create fileless execution and architecture-confusion seccomp bypass READ-ONLY NOEXEC FILESYSTEM EXECUTION 2 1 DDexec Execute From stdin via proc self mem 2 2 memfd_create In-Memory File Descriptor 2 3 ld so Direct Execution 2 4 Script Interpreters on noexec 2 5 Writable Mount Points 3 APPARMOR BYPASS 3 1 Profile Enumeration 3 2 Exploitation Strategies Common AppArmor profile gaps access abstract Unix sockets interpreter-based execution python scripts bypass binary restrictions and newly created paths SELINUX BYPASS 4 1 Mode Check 4 2 Permissive Domain Exploitation 4 3 Context Transition Booleans 5 SECCOMP BYPASS 5 1 Check Seccomp Status 5 2 Architecture Confusion x86 vs x86_64 5 3 Allowed Syscall Abuse Kernel Bugs Allowed syscalls to abuse creatively pass FDs between processes2.2kinstalls83Memory Forensics VolatilityThe memory-forensics-volatility skill. Memory forensics playbook using Volatility 2/3. Use when analyzing memory dumps for malware analysis, credential extraction, process investigation, code injection detection, and incident response timeline reconstruction. Covers memory acquisition, OS identification, process analysis (hidden process detection), network connections, DLL/module analysis, code injection detection (malfind), credential extraction, file carving, registry analysis, and timeline generation. Base models miss the Vol2/Vol3 command differences, malware indicator patterns, and Linux-specific memory analysis. MEMORY ACQUISITION ### Linux ### Windows ### Virtual Machines --- ## 2. ANALYSIS METHODOLOGY ### Step 1: Identify OS ### Step 2: Process Listing - Hidden Process Detection **Red flags**: Process in but not = DKOM (Direct Kernel Object Manipulation) hiding. LINUX MEMORY ANALYSIS ### Building Linux Profiles (Vol2) --- ## 5. The workflow follows the source SKILL.md contract with progressive reference loading, clear trigger phrases, and practical steps developers can apply directly in agent sessions.2.2kinstalls84Stack Overflow And RopThe stack-overflow-and-rop skill. Stack overflow and ROP playbook. Use when exploiting buffer overflows to hijack control flow via return address overwrite, ROP chains, ret2libc, ret2csu, ret2dlresolve, or SROP on Linux userland binaries. Covers classic buffer overflow, return-to-libc, ROP chain construction, ret2csu, ret2dlresolve, SROP, stack pivoting, and canary bypass. Distilled from ctf-wiki advanced-rop, real-world CVEs, and CTF competition patterns. Base models often miss the nuance of gadget selection under constrained conditions. RETURN-TO-LIBC When NX is enabled (stack not executable), redirect execution to libc functions. Insert an extra gadget before the call if alignment is off. ret2csu - Universal 3-Argument Control exists in nearly all dynamically linked ELF binaries and provides controlled calls with up to 3 arguments. The workflow follows the source SKILL.md contract with progressive reference loading, clear trigger phrases, and practical steps developers can apply directly in agent sessions.2.2kinstalls85Container Escape TechniquesThe container-escape-techniques skill. Container escape playbook. Use when operating inside a Docker container, LXC, or Kubernetes pod and need to escape to the host via privileged mode, capabilities, Docker socket, cgroup abuse, namespace tricks, or runtime vulnerabilities. Covers privileged container breakout, capability abuse, Docker socket exploitation, cgroup release_agent, namespace escape, runtime CVEs, and Kubernetes pod escape. Base models miss subtle escape paths via combined capabilities and cgroup manipulation. PRIVILEGED CONTAINER ESCAPE If flag was used, the container has nearly all host capabilities and device access. CAPABILITY-BASED ESCAPE ### 3.1 CAP_SYS_ADMIN - Most Versatile ### 3.2 CAP_SYS_PTRACE - Process Injection ### 3.3 CAP_NET_ADMIN ### 3.4 CAP_DAC_READ_SEARCH (Shocker Exploit) --- ## 4. DOCKER SOCKET ESCAPE (/var/run/docker.sock) --- ## 5. CGROUP V1 RELEASE_AGENT ESCAPE Classic escape for containers with CAP_SYS_ADMIN + cgroup v1. The workflow follows the source SKILL.md contract with progressive reference loading, clear trigger phrases, and practical steps developers can apply directly in agent sessions.2.2kinstalls86Classical Cipher AnalysisThe classical-cipher-analysis skill. Classical cipher analysis playbook. Use when encountering substitution ciphers, Vigenere, transposition, XOR, or encoded text in CTF challenges that requires frequency analysis, Kasiski examination, or known-plaintext cryptanalysis. Covers cipher identification methodology (frequency analysis, IC, Kasiski), monoalphabetic substitution, Caesar/ROT, Vigenere, Enigma, affine, Hill, transposition ciphers, Bacon/Polybius/Playfair, and XOR ciphers. Base models often skip the identification step and jump to the wrong cipher type, or fail to recognize encoded (base64/hex) ciphertext that needs decoding before analysis. CIPHER IDENTIFICATION METHODOLOGY ### 1.1 Step 1: Character Set Analysis ### 1.2 Step 2: Frequency Analysis ### 1.3 Step 3: Index of Coincidence (IC) ### 1.4 Step 4: Kasiski Examination (for Polyalphabetic) --- ## 2. MONOALPHABETIC SUBSTITUTION ### 2.1 Frequency Analysis Attack ### 2.2 Known Plaintext (Crib Dragging) If part of the plaintext is known (e.g., "flag{" prefix): --- ## 3. CAESAR / ROT CIPHERS ### 3.1 Brute Force ### 3.2 ROT13 and ROT47 --- ## 4.2.2kinstalls87Prototype Pollution AdvancedThe prototype-pollution-advanced skill. Advanced prototype pollution playbook - server-side RCE, client-side gadgets, filter bypasses, and detection techniques. Companion to ../prototype-pollution/ for basics. Use when you've confirmed pollution and need to escalate to code execution or find framework-specific gadgets. Covers server-side RCE via template engines (EJS, Pug, Handlebars), Node.js child_process gadgets, client-side script gadgets, filter bypass patterns, and systematic detection. Load [../prototype-pollution/SKILL.md](../prototype-pollution/SKILL.md) first for fundamentals (merge sinks, vs , basic probes). SERVER-SIDE PP → RCE ### 1.1 Node.js child_process.spawn - Shell/ENV Injection When or is called without explicit / options, it inherits from : Alternative ENV pollution: ### 1.2 EJS (Embedded JavaScript Templates) EJS reads from object properties. Polluting injects code into the compiled template function: Detection: any EJS call after pollution triggers it. Polluted prototype properties appear as template variables: --- ## 2. CLIENT-SIDE PROTOTYPE POLLUTION ### 2.1 jQuery Gadgets performs deep merge - classic PP sink.2.2kinstalls88Steganography TechniquesThe steganography-techniques skill. Steganography detection and extraction playbook. Use when analyzing images (LSB, PNG chunks, JPEG DCT, EXIF), audio (spectrogram, DTMF), files (polyglots, appended data, ADS), and text (whitespace, zero-width, homoglyphs) for hidden data. Base models miss the systematic file-type-based analysis approach and tool-specific extraction workflows. IMAGE STEGANOGRAPHY ### LSB (Least Significant Bit) LSB embeds data in the least significant bits of pixel color channels. AUDIO STEGANOGRAPHY ### Spectrogram Analysis ### Audio LSB ### DTMF / Morse Code ### WAV Header Manipulation --- ## 3. FILE STEGANOGRAPHY ### Polyglot Files A single file that is valid in two or more formats simultaneously. TEXT STEGANOGRAPHY ### Whitespace Encoding ### Zero-Width Characters ### Homoglyph Substitution --- ## 5. The workflow follows the source SKILL.md contract with progressive reference loading, clear trigger phrases, and practical steps developers can apply directly in agent sessions. The workflow follows the source SKILL.md contract with progressive reference loading, clear trigger phrases, and practical steps developers can apply directly in agent sessions.2.2kinstalls89Smart Contract VulnerabilitiesThe smart-contract-vulnerabilities skill. Smart contract vulnerability playbook. Use when auditing Solidity/EVM contracts for reentrancy, integer overflow, access control, delegatecall, flash loan, signature replay, and MEV-related attack patterns. Covers reentrancy (single, cross-function, cross-contract, read-only), integer overflow, access control, delegatecall, randomness manipulation, flash loans, signature replay, front-running/MEV, and CREATE2 exploitation. Base models miss subtle cross-contract reentrancy and storage layout collisions in proxy patterns. REENTRANCY The most iconic smart contract vulnerability. External calls transfer execution control; if state is not updated before the call, the callee can re-enter. Especially dangerous in DeFi protocols where multiple contracts share state. No state modification in the victim, but the stale intermediate state misleads the reader. The workflow follows the source SKILL.md contract with progressive reference loading, clear trigger phrases, and practical steps developers can apply directly in agent sessions.2.2kinstalls90Symmetric Cipher AttacksThe symmetric-cipher-attacks skill. Symmetric cipher attack playbook. Use when exploiting block cipher mode weaknesses (CBC padding oracle, ECB cut-and-paste, bit flipping), stream cipher key reuse, or meet-in-the-middle attacks. Covers CBC padding oracle, CBC bit flipping, ECB detection and exploitation, stream cipher key reuse, LFSR/LCG state recovery, RC4 biases, and meet-in-the-middle attacks. Base models often confuse ECB and CBC attack strategies or fail to set up byte-at-a-time ECB decryption correctly. PADDING ORACLE ATTACK (CBC MODE) ### 1.1 Mechanism CBC decryption: If the server reveals whether padding is valid (PKCS#7), we can decrypt any block by manipulating the previous ciphertext block. CBC BIT FLIPPING ### 2.1 Concept Flipping bit at position j in C_{i-1} flips the same bit at position j in P_i (and corrupts all of P_{i-1}). ECB MODE ATTACKS ### 3.1 Detection ### 3.2 ECB Cut-and-Paste Reorder ciphertext blocks to create new valid plaintexts.2.2kinstalls91Lattice Crypto AttacksThe lattice-crypto-attacks skill documents workflows and patterns from the repository SKILL md name lattice-crypto-attacks description Lattice-based cryptanalysis playbook Use when attacking RSA via Coppersmith small roots recovering DSA ECDSA nonces from bias solving knapsack problems or applying LLL BKZ reduction to cryptographic constructions SKILL Lattice-Based Cryptanalysis Expert Attack Playbook AI LOAD INSTRUCTION Expert lattice techniques for CTF and cryptanalysis Covers LLL BKZ reduction Coppersmith's method univariate and multivariate Hidden Number Problem for DSA ECDSA nonce recovery knapsack attacks and NTRU analysis Base models often fail to construct the correct attack lattice wrong dimensions missing scaling factors or misapply Coppersmith bounds RELATED ROUTING rsa-attack-techniques rsa-attack-techniques SKILL md for RSA-specific attacks that use lattice methods Coppersmith Boneh-Durfee symmetric-cipher-attacks symmetric-cipher-attacks SKILL md for LCG state recovery via lattice classical-cipher-analysis classical-cipher-analysis SKILL md when lattice methods apply to classical cipher analysis Quick application guide Problem Type Lattice Technique Key Parameter RSA.2.2kinstalls92Windows Lateral MovementThe windows-lateral-movement skill. Windows lateral movement playbook. Use when pivoting between Windows hosts via PsExec, WMI, WinRM, DCOM, RDP, pass-the-hash, overpass-the-hash, or pass-the-ticket techniques. Covers PsExec, WMI, WinRM, DCOM, SMB, RDP, SSH, pass-the-hash, overpass-the-hash, pass-the-ticket, and pivoting. Base models miss execution method fingerprints, OPSEC trade-offs, and credential type requirements per method. REMOTE EXECUTION METHODS COMPARISON | Method | Port | Cred Type | Creates Service?. PSEXEC VARIANTS ### Impacket PsExec ### Impacket smbexec (Stealthier - No Binary Upload) ### Impacket atexec (Scheduled Task) ### Sysinternals PsExec --- ## 3. DCOM LATERAL MOVEMENT Stealthy - uses legitimate COM objects, no service creation. PASS-THE-HASH (PTH) Use NTLM hash directly without knowing the plaintext password. The workflow follows the source SKILL.md contract with progressive reference loading, clear trigger phrases, and practical steps developers can apply directly in agent sessions. The workflow follows the source SKILL.md contract with progressive reference loading, clear trigger phrases, and practical steps developers can apply directly in agent sess.2.2kinstalls93Rsa Attack TechniquesThe rsa-attack-techniques skill. RSA attack playbook for CTF and real-world cryptanalysis. Use when given RSA parameters (n, e, c) and need to recover plaintext by exploiting weak keys, small exponents, shared factors, or padding oracles. Covers factorization attacks, small exponent exploits, lattice-based approaches (Wiener/Boneh-Durfee/Coppersmith), broadcast attacks, common modulus, padding oracles, and fault attacks. Base models often suggest attacks that don't match the given parameters or miss the correct attack selection based on what's known. FACTORIZATION ATTACKS ### 1.1 Direct Factorization (Small n) **When**: n < ~512 bits, or known to be in factordb. SMALL EXPONENT ATTACKS ### 2.1 Cube Root Attack (e = 3, small m) If m^e < n (no modular reduction occurred), simply take the e-th root. LARGE e / SMALL d ATTACKS ### 3.1 Wiener's Attack (Continued Fractions) When d < n^(1/4) / 3, the continued fraction expansion of e/n reveals d.2.2kinstalls94Sandbox Escape TechniquesThe sandbox-escape-techniques skill. Sandbox escape playbook. Use when breaking out of Python sandbox, Lua sandbox, seccomp filter, chroot jail, container/Docker, browser sandbox, or namespace isolation to achieve unrestricted code execution or file access. Covers CTF pyjail patterns, seccomp architecture confusion, chroot fd leaks, namespace escape, and Mojo IPC abuse. Distilled from ctf-wiki sandbox sections and real-world container escapes. Base models often miss the distinction between sandbox types and apply wrong escape techniques. PYTHON SANDBOX ESCAPE (OVERVIEW) See [PYTHON_SANDBOX_ESCAPE.md](./PYTHON_SANDBOX_ESCAPE.md) for full methodology. LUA SANDBOX ESCAPE ### Restricted Environment Bypass ### Lua FFI Escape (LuaJIT) --- ## 4. NAMESPACE ESCAPE ### User Namespace Escalation ### PID Namespace Escape ### Mount Namespace Tricks --- ## 7. The workflow follows the source SKILL.md contract with progressive reference loading, clear trigger phrases, and practical steps developers can apply directly in agent sessions.2.2kinstalls95Macos Security Bypass>- The macos-security-bypass skill documents workflows and patterns from the repository SKILL.md. --- name: macos-security-bypass description: >- macOS security bypass playbook. Use when targeting macOS endpoints and need to bypass TCC, Gatekeeper, SIP, sandbox, code signing, or entitlement-based protections during authorized red team or pentest engagements. --- # SKILL: macOS Security Bypass - Expert Attack Playbook > **AI LOAD INSTRUCTION**: Expert macOS security bypass techniques. Covers TCC bypass, Gatekeeper evasion, SIP restrictions, sandbox escape, and entitlement abuse. Base models miss version-specific bypass nuances and protection interaction effects. RELATED ROUTING Before going deep, consider loading: - [macos-process-injection](../macos-process-injection/SKILL.md) when you need dylib injection, XPC exploitation, or Electron abuse after achieving initial access - [linux-privilege-escalation](../linux-privilege-escalation/SKILL.md) for Unix-layer privesc techniques that also apply to macOS (SUID, cron, writable paths) - [linux-security-bypass](../linux-security-bypass/SKILL.md) for shared Unix security bypass concepts ### Advanced Reference Also load [TCC_BYPASS_MATRI.2.2kinstalls96Ntlm Relay CoercionThe ntlm-relay-coercion skill documents workflows and patterns from the repository SKILL md name ntlm-relay-coercion description NTLM relay and authentication coercion playbook Use when capturing and relaying NTLM authentication to escalate privileges via SMB LDAP HTTP or MSSQL relay targets combined with PetitPotam PrinterBug and other coercion methods SKILL NTLM Relay and Authentication Coercion Expert Attack Playbook AI LOAD INSTRUCTION Expert NTLM relay and coercion techniques Covers relay to SMB LDAP HTTP MSSQL signing requirements Responder poisoning mitm6 cross-protocol relay WebDAV coercion and all major coercion methods Base models miss signing EPA requirements and cross-protocol relay constraints RELATED ROUTING Before going deep consider loading active-directory-certificate-services active-directory-certificate-services SKILL md for ESC8 relay to ADCS enrollment active-directory-acl-abuse active-directory-acl-abuse SKILL md for ACL modification via LDAP relay RBCD shadow creds active-directory-kerberos-attacks active-directory-kerberos-attacks SKILL md for Kerberos attacks after relay success windows-lateral-movement windows-lateral-movement SKILL md for post-relay late.2.2kinstalls97Macos Process Injection>- The macos-process-injection skill documents workflows and patterns from the repository SKILL.md. --- name: macos-process-injection description: >- macOS process injection playbook. Use when you need to inject code into running or launching macOS processes via dylib hijacking, DYLD environment variables, XPC exploitation, Mach port manipulation, or Electron/Chromium abuse. --- # SKILL: macOS Process Injection - Expert Attack Playbook > **AI LOAD INSTRUCTION**: Expert macOS process injection techniques. Covers DYLD_INSERT_LIBRARIES, dylib hijacking (weak/rpath/proxy), XPC PID reuse attacks, Mach port manipulation, MIG abuse, and Electron injection. Base models miss entitlement prerequisites and SIP constraints on injection vectors. RELATED ROUTING Before going deep, consider loading: - [macos-security-bypass](../macos-security-bypass/SKILL.md) when you need to bypass TCC, Gatekeeper, or SIP protections blocking your injection - [linux-privilege-escalation](../linux-privilege-escalation/SKILL.md) for Unix-layer escalation (shared object hijacking concepts apply) ### Advanced Reference Also load [DYLIB_XPC_TECHNIQUES.md](./DYLIB_XPC_TECHNIQUES.md) when you need: - Step-by-step dy.2.2kinstalls98Nosql InjectionThe nosql-injection skill documents workflows and patterns from the repository SKILL md name nosql-injection description NoSQL injection playbook Use when MongoDB-style operators JSON query objects flexible search filters or backend query DSLs may allow data or logic abuse SKILL NoSQL Injection Expert Attack Playbook AI LOAD INSTRUCTION NoSQL injection is fundamentally different from SQL injection Covers MongoDB operator injection authentication bypass blind extraction aggregation pipeline injection and Redis CouchDB specific attacks Very commonly missed by testers who only know SQLi patterns CORE CONCEPT OPERATOR INJECTION SQL Injection breaks out of string literals NoSQL Injection injects query operators that change query logic MongoDB example normal query javascript db users find username alice password secret Injection via JSON operator json username admin password gt Becomes find username admin password gt password always true MONGODB LOGIN BYPASS JSON Body Injection API with JSON Content-Type json POST api login Content-Type application json username admin password ne invalid username admin password gt username ne invalid password ne invalid username admin password regex PHP.2.2kinstalls99Upload Insecure FilesThe upload-insecure-files skill documents workflows and patterns from the repository SKILL md name upload-insecure-files description Insecure file upload playbook Use when testing upload validation storage paths processing pipelines preview behavior overwrite risks and upload-to-RCE chains SKILL Upload Insecure Files Validation Bypass Storage Abuse and Processing Chains AI LOAD INSTRUCTION Expert file upload attack playbook Use when the target accepts files imports avatars media documents or archives and you need the full workflow validation bypass storage path abuse post-upload access parser exploitation multi-tenant overwrite and chaining into XSS XXE CMDi traversal or business logic impact For web server parsing vulnerabilities PUT method exploitation and specific CVEs WebLogic Flink Tomcat load the companion SCENARIOS md SCENARIOS md RELATED ROUTING Extended Scenarios Also load SCENARIOS md SCENARIOS md when you need IIS parsing vulnerabilities x asp directory parsing semicolon truncation shell asp jpg Nginx parsing misconfiguration avatar jpg php with cgi fix_pathinfo 1 Apache parsing multiple extensions AddHandler CVE-2017-15715 n 0x0A bypass PUT method exploitation IIS WebD.2.2kinstalls100Unauthorized Access Common ServicesThe unauthorized-access-common-services skill documents workflows and patterns from the repository SKILL md name unauthorized-access-common-services description Unauthorized access playbook for common exposed services Use when Redis Rsync PHP-FPM AJP Ghostcat Hadoop YARN H2 Console or similar management interfaces are exposed without authentication SKILL Unauthorized Access to Common Services Expert Attack Playbook AI LOAD INSTRUCTION Expert techniques for exploiting unauthenticated or weakly authenticated management services Covers Redis write-to-RCE Rsync data theft PHP-FPM code execution Ghostcat AJP file read Hadoop YARN job submission and H2 Console JNDI These are infrastructure-level findings distinct from web application vulnerabilities RELATED ROUTING ssrf-server-side-request-forgery ssrf-server-side-request-forgery SKILL md when these services are reachable via SSRF e g SSRF Redis jndi-injection jndi-injection SKILL md when H2 Console or similar accepts JNDI connection strings deserialization-insecure deserialization-insecure SKILL md when RMI Registry or T3 protocol is exposed network-protocol-attacks network-protocol-attacks SKILL md for layer 2 3 attacks during service.2.2kinstalls101Reverse Shell TechniquesThe reverse-shell-techniques skill - It covers tunneling-and-pivoting ../tunneling-and-pivoting/SKILL.md after shell access for network pivoting. Key workflows include linux-privilege-escalation ../linux-privilege-escalation/SKILL.md or windows-privilege-escalation ../windows-privilege-escalation/SKILL.md after landing shell. Developers invoke reverse-shell-techniques when the task matches the triggers and reference files in SKILL.md for grounded, stepwise execution. Reference files and progressive disclosure keep context focused while preserving concrete commands, configuration fields, and validation checks copied from the upstream documentation. Reference files and progressive disclosure keep context focused while preserving concrete commands, configuration fields, and validation checks copied from the upstream documentation. Reference files and progressive disclosure keep context focused while preserving concrete commands, configuration fields, and validation checks copied from the upstream documentation. Reference files and progressive disclosure keep context focused while preserving concrete commands, configuration fields, and validation checks copied from the upstream docume.2.2kinstalls102Ghost Bits Cast AttackThe ghost bits cast attack skill >-. Documentation covers workflows, commands, and guardrails agents should follow when users invoke this capability. Key documented areas include [waf-bypass-techniques](../waf-bypass-techniques/SKILL.md) - when a Java; [deserialization-insecure](../deserialization-insecure/SKILL.md) - for; [path-traversal-lfi](../path-traversal-lfi/SKILL.md) - Spring, Jetty,; [upload-insecure-files](../upload-insecure-files/SKILL.md) - Tomcat. Reference commands include // Correct: explicit UTF-8, multi-byte chars become multi-byte sequences; byte[] bytes = str.getBytes(StandardCharsets.UTF_8);. Use when developers or agents need structured guidance for ghost bits cast attack tasks with evidence grounded in the bundled SKILL.md rather than generic advice. [waf-bypass-techniques](../waf-bypass-techniques/SKILL.md) - when a Java [deserialization-insecure](../deserialization-insecure/SKILL.md) - for [path-traversal-lfi](../path-traversal-lfi/SKILL.md) - Spring, Jetty, [upload-insecure-files](../upload-insecure-files/SKILL.md) - Tomcat [request-smuggling](../request-smuggling/SKILL.md) - Apache HttpClient [crlf-injection](../crlf-injection/SKILL.md).2kinstalls