Skills with input "Engagement state"

privesc-linux-file-path-abuse - Exploit Linux file and path privilege escalation vectors
Linux privilege escalation filesystem path abuse
★ 2 · Updated 2026-10-16
Helps authorized penetration testers assess and exploit writable files, filesystem misconfigurations, shared-library loading, and privileged group membership on Linux.
⚙ Assess file and group vectors ⚙ Exploit writable critical files ⚙ Abuse NFS no_root_squash
acl-abuse - Exploit Active Directory ACLs for privilege escalation
Active Directory ACL abuse privilege escalation Kerberos
★ 286 · Updated 2026-10-06
Exploits misconfigured Active Directory ACLs to identify and execute privilege-escalation paths using Kerberos-based techniques.
⚙ Enumerate exploitable ACLs ⚙ Analyze BloodHound attack paths ⚙ Manipulate Active Directory permissions
idor - Test IDOR and Broken Access Control
idor broken access control authorization testing privilege escalation
★ 286 · Updated 2026-10-01
Tests authorized applications for IDOR and broken access control by assessing object references, privilege boundaries, API patterns, and bypass techniques.
⚙ Assess identifier formats ⚙ Locate injection points ⚙ Test horizontal access
jwt-attacks - Test JWT authentication and authorization vulnerabilities
JWT web security authentication authorization
★ 0 · Updated 2026-09-29
Exploits JWT signature, algorithm, key-management, and claim-handling vulnerabilities during authorized penetration testing.
⚙ Locate JWT tokens ⚙ Decode JWT components ⚙ Identify signing algorithms
lfi - Test LFI and RFI vulnerabilities
LFI RFI path traversal file inclusion
★ 286 · Updated 2026-09-29
Guides authorized penetration testing for local and remote file inclusion vulnerabilities, including file reads and escalation to code execution.
⚙ Assess inclusion points ⚙ Test traversal variants ⚙ Extract PHP source
xss-dom - DOM-Based XSS Exploitation Guide
DOM XSS penetration testing burpsuite DOM Invader
★ 0 · Updated 2026-09-24
Guide DOM-based XSS exploitation during authorized penetration testing.
⚙ Assess target page ⚙ Identify sources ⚙ Identify sinks