Skills tagged "penetration testing"

Network 101 - Configure and test network services for pentesting labs
networking penetration testing http https
★ 602 · Updated 2026-09-18
Configures and tests common network services including HTTP, HTTPS, SNMP, and SMB for penetration testing lab environments.
⚙ Configure HTTP servers ⚙ Configure HTTPS servers ⚙ Configure SNMP services
offensive-sqli - SQL Injection Offensive Testing & Exploitation Skill
SQL injection offensive security web application security WAF bypass
★ 54 · Updated 2026-06-30
Performs SQL injection testing across web apps, APIs, WebSockets, and multiple databases, covering detection, exploitation, WAF bypass, and cloud attack path assessment.
⚙ Detect SQL injection vulnerabilities ⚙ Enumerate database schema and version ⚙ Extract data via UNION injection
web-vulnerability-discovery - Authorized Web Vulnerability Discovery
web security vulnerability scanning penetration testing security audit
★ 4 · Updated 2026-06-30
Guide agents through authorized web vulnerability discovery and validation
⚙ inspect website pages ⚙ collect network requests ⚙ test input parameters
exploit-file-download - File Download and LFI Vulnerability Tester
security testing vulnerability scanner web security penetration testing
★ 234 · Updated 2026-06-30
Detect and exploit arbitrary file download and LFI vulnerabilities using curl, ffuf, and wget
⚙ detect LFI vulnerabilities ⚙ test path traversal ⚙ read sensitive files
xss-hunter - XSS Vulnerability Detection Specialist
XSS security testing web vulnerability bug bounty
★ 940 · Updated 2026-06-30
Detects reflected, stored, and DOM-based XSS vulnerabilities with advanced bypass techniques
⚙ read methodology document ⚙ search XSS techniques ⚙ search XSS payloads
active-directory-attacks - Active Directory Attack Techniques
active directory kerberos credential attack privilege escalation
★ 25 · Updated 2026-06-15
Provide techniques for attacking Microsoft Active Directory environments including reconnaissance, credential harvesting, Kerberos attacks, and privilege escalation
⚙ enumerate domain users ⚙ enumerate domain groups ⚙ enumerate domain controllers
active-directory-attacks - Active Directory Attack Techniques
active directory penetration testing red team windows security
★ 22,817 · Updated 2026-06-15
Techniques for attacking Microsoft Active Directory including reconnaissance, credential attacks, and privilege escalation
⚙ enumerate domain ⚙ enumerate users ⚙ enumerate groups
offensive-sqli - SQL Injection Security Testing
SQL injection security testing penetration testing vulnerability assessment
★ 2,303 · Updated 2026-06-15
SQL injection testing for security assessments and bug bounty hunting
⚙ map input vectors ⚙ insert probe payloads ⚙ identify database type
pentest-commands - Penetration Testing Commands Reference
network scanning vulnerability exploitation password cracking web application security
★ 602 · Updated 2026-06-15
Provide command reference for penetration testing tools including network scanning, exploitation, and web application testing
⚙ scan network ports ⚙ discover hosts ⚙ detect services
pentest-commands - Penetration Testing Commands Reference
network scanning penetration testing vulnerability assessment password cracking
★ 6 · Updated 2026-06-15
Provides command reference for penetration testing tools
⚙ scan network ports ⚙ detect services ⚙ enumerate hosts
pentest-commands - Penetration Testing Commands Reference
penetration testing network scanning vulnerability assessment password cracking
★ 63 · Updated 2026-05-28
Provides command references for penetration testing tools
⚙ scan networks with nmap ⚙ run metasploit exploits ⚙ crack passwords with hydra
pentest-commands - Penetration Testing Commands
penetration testing network scanning nmap metasploit
★ 422 · Updated 2026-05-28
Provide command reference for penetration testing tools including nmap, metasploit, hydra, nikto, and sqlmap
⚙ scan networks with nmap ⚙ discover hosts with nmap ⚙ scan ports with nmap
pentester - Authorized Penetration Testing
penetration testing vulnerability assessment ethical hacking web security
★ 4 · Updated 2026-05-28
Authorized penetration testing, vulnerability assessment, and security auditing within ethical boundaries
⚙ scan ports ⚙ enumerate services ⚙ assess network architecture
PromptInjection - LLM Prompt Injection Security Testing
security testing prompt injection LLM security jailbreak testing
★ 0 · Updated 2026-05-11
Test LLM applications for prompt injection vulnerabilities and security weaknesses
⚙ test for prompt injection ⚙ extract system prompt ⚙ bypass guardrails
PromptInjection - Test LLM Applications for Prompt Injection Vulnerabilities
security testing LLM AI security prompt injection
★ 57 · Updated 2026-05-11
Test LLM applications for prompt injection vulnerabilities including jailbreak attempts and guardrail bypass techniques
⚙ test LLM applications ⚙ extract system prompts ⚙ manipulate contexts
PromptInjection - LLM Prompt Injection Security Testing
security testing prompt injection LLM security vulnerability assessment
★ 19,069 · Updated 2026-05-11
Test LLM applications for prompt injection vulnerabilities including jailbreaks and guardrail bypasses
⚙ test prompt injection ⚙ detect jailbreaks ⚙ extract system prompts
Strix•不安全文件上传 - File Upload Security Testing
security testing file upload vulnerability assessment penetration testing
★ 190 · Updated 2026-05-11
Security testing manual for file upload vulnerabilities including extension bypass, Content-Type manipulation, and path traversal
⚙ identify upload endpoints ⚙ probe file type validation ⚙ test extension bypass
privilege-escalation-methods - Privilege Escalation for Linux and Windows
privilege escalation penetration testing post-exploitation Linux security
★ 422 · Updated 2026-05-09
Provides techniques for escalating privileges from low-privileged user to root/administrator access on Linux and Windows systems
⚙ check sudo permissions ⚙ exploit sudo binaries ⚙ abuse scheduled tasks
file-upload-attacker - Audit file upload endpoints for vulnerabilities
file upload security web security penetration testing vulnerability assessment
★ 1 · Updated 2026-05-09
Tests file upload endpoints for MIME bypass, path traversal, ZIP Slip, SVG XSS vulnerabilities
⚙ audit file upload endpoints ⚙ detect MIME type bypass ⚙ identify path traversal
workflow-orchestrator - Multi-Phase Pentest Workflow Orchestrator
penetration testing workflow orchestration dependency management state management
★ 458 · Updated 2026-05-09
Orchestrates multi-phase penetration testing workflows with dependency chaining and state management
⚙ coordinate tool execution ⚙ manage dependencies ⚙ implement fallback strategies