Catalogued skills

These skills were checked individually. This repository has no public whole-repository scan, so there is no repository grade.

By scanning, you confirm authorization and agree to the Terms and Privacy Policy.

Catalogued skills 103
F 10 ai-ml-security F 33 business-logic-vulnerabilities F 122 cmdi-command-injection F 61 container-escape-techniques F 15 deserialization-insecure F 23 ghost-bits-cast-attack F 36 injection-checking F 42 linux-lateral-movement F 130 linux-privilege-escalation F 15 linux-security-bypass F 10 llm-prompt-injection F 22 macos-process-injection F 14 macos-security-bypass F 1 open-redirect F 97 path-traversal-lfi F 36 reverse-shell-techniques F 26 sandbox-escape-techniques F 25 sqli-sql-injection F 43 ssrf-server-side-request-forgery F 41 ssti-server-side-template-injection F 7 tunneling-and-pivoting F 51 unauthorized-access-common-services F 18 upload-insecure-files F 7 websocket-security F 40 windows-privilege-escalation F 7 xslt-injection F 10 xss-cross-site-scripting F 59 xxe-xml-external-entity D 12 401-403-bypass-techniques D 7 active-directory-acl-abuse D 4 active-directory-certificate-services D 4 active-directory-kerberos-attacks D 3 android-pentesting-tricks D 6 anti-debugging-techniques D 5 api-auth-and-jwt-abuse D 3 api-authorization-and-bola D 5 api-recon-and-docs D 12 api-sec D 16 arbitrary-write-to-rce D 12 attack-surface-mapping D 9 auth-sec D 2 authbypass-authentication-flaws D 5 binary-protection-bypass D 4 browser-exploitation-v8 D 4 business-logic-vuln D 5 classical-cipher-analysis D 3 code-obfuscation-deobfuscation D 15 cors-cross-origin-misconfiguration D 1 crlf-injection D 6 csp-bypass-advanced D 15 csrf-cross-site-request-forgery D 1 csv-formula-injection D 5 dangling-markup-injection D 3 defi-attack-patterns D 8 dependency-confusion D 9 dns-rebinding-attacks D 4 email-header-injection D 2 expression-language-injection D 4 file-access-vuln D 4 format-string-exploitation
Showing 60 of 103 View all in scanned skills