Browse Skills

AFL++ Fuzzing performs coverage-guided fuzzing of compiled binaries to find crashes and hangs. Use it when instrumenting a target, preparing seed corpora, and triaging unique findings during security testing.

API Authentication Testing checks REST API auth for bypasses, weak JWT validation, exposed endpoints, and token lifecycle issues. Use it when validating login, session, refresh, or API key protections before release.

Tests API rate limiting for bypass vulnerabilities using header manipulation, IP rotation, endpoint variation, and race conditions. Use when assessing brute force protection, credential stuffing, or denial-of-service controls.

Guides the creation of repeatable API security test collections in Postman for OWASP Top 10 coverage, with multi-role authentication testing and CI/CD integration via Newman.

Arbitrary Write to Execution outlines how to turn a write-what-where primitive into control flow in authorized binary exploitation. It covers target selection, mitigations, and trigger paths such as GOT, hooks, exit handlers, and function pointers.

Tests APIs for Broken Function Level Authorization (BFLA) vulnerabilities where regular users can invoke administrative functions. Use when auditing API access controls to ensure only authorized roles can perform privileged actions.

BOLA API Tester checks REST and GraphQL endpoints for broken object level authorization issues. Use it when validating that authenticated users cannot access other users' objects across paths, query parameters, bodies, or GraphQL IDs.

Bypassing Binary Exploitation Mitigations outlines how to identify and defeat protections like ASLR, PIE, canaries, NX, and RELRO during authorized exploitation. Use it when a memory-corruption bug is blocked by common binary hardening measures.

Detects excessive data exposure and mass assignment vulnerabilities in APIs, following the OWASP API3:2023 testing methodology. Use when auditing API security or building detection rules.

Ethereum Smart Contract Vulnerability Analysis performs static and symbolic analysis of Solidity contracts with Slither and Mythril. Use it to find reentrancy, access-control, and arithmetic issues before deployment or during incident investigation.

Tests APIs for excessive data exposure by identifying when endpoints return sensitive data (PII, secrets, internal fields) beyond what the client actually uses. Useful in penetration testing and API security assessments to find data leaks.

Craft malicious model files to test for remote code execution vulnerabilities in AI model-loading pipelines. Covers pickle, Hydra, Keras, archive traversal, and other deserialization attack vectors.