Skills tagged "web-security"

WebAssessment - Security assessment and threat modeling infrastructure.
web-security pentest threat-modeling reconnaissance
★ 0 · Updated 2026-09-18
Provides security assessment infrastructure integrating reconnaissance, threat modeling, and vulnerability testing.
⚙ Send mandatory voice notifications ⚙ Build application reconnaissance narrative ⚙ Generate prioritized threat models
WebAssessment - Web security assessment and threat modeling infrastructure
security-assessment web-security pentest threat-modeling
★ 0 · Updated 2026-09-18
Integrates reconnaissance, threat modeling, and vulnerability testing to perform security assessments on web applications.
⚙ Build application structure narrative ⚙ Generate prioritized threat models ⚙ Execute multi-phase penetration testing
WebAssessment - Web security assessment infrastructure
web-security penetration-testing threat-modeling vulnerability-assessment
★ 1 · Updated 2026-09-18
Integrates reconnaissance, threat modeling, and vulnerability testing for web security assessments.
⚙ Understand application structure ⚙ Create threat models ⚙ Perform penetration testing
ssrf-hunter - SSRF vulnerability hunting specialist
ssrf vulnerability-hunting security-testing web-security
★ 940 · Updated 2026-09-15
Tests URL-accepting parameters, webhook endpoints, file import features, and server-side request functionality for SSRF vulnerabilities.
⚙ Inject URL parameters ⚙ Exploit redirect chains ⚙ Detect DNS rebinding
claude-pentest-skills - Structured Web Application Penetration Testing
penetration-testing web-security owasp vulnerability-assessment
★ 40 · Updated 2026-09-14
Provides structured web application penetration testing using OWASP methodology, curated payload references, 6-gate validation, and report generation.
⚙ Define testing scope and authorization ⚙ Map target attack surface ⚙ Test target vulnerability classes
security-headers - Security Headers and Permissions Policy Guidelines
security-headers permissions-policy web-security
★ 0 · Updated 2026-09-11
Aligns web code modifications with security headers and permissions policy directives.
⚙ Start local preview server ⚙ Build web preview application ⚙ Review permissions policy directives
exploiting-cross-site-script-inclusion-xssi - Exploiting Cross-Site Script Inclusion (XSSI)
penetration-testing xssi jsonp owasp
★ 487 · Updated 2026-06-30
Identify and exploit Cross-Site Script Inclusion vulnerabilities to read sensitive data from static scripts, dynamic JS, JSONP responses, and non-JS files cross-origin.
⚙ find script and JSONP endpoints ⚙ detect dynamic JavaScript via cookie diffing ⚙ read global variables from included scripts
unauthorized-access - Unauthorized Access Detection
security authentication pentesting vulnerability-detection
★ 81 · Updated 2026-06-30
Detect risks of unauthorized access to sensitive endpoints without authentication
⚙ filter protected endpoints ⚙ send baseline requests ⚙ remove authentication
pentest-commands - Penetration Testing Commands Reference
pentesting network-scanning exploitation password-cracking
★ 6 · Updated 2026-05-28
Command reference for penetration testing tools including Nmap, Metasploit, Hydra, John, Nikto, SQLMap
⚙ run nmap scans ⚙ detect service versions ⚙ exploit vulnerabilities
wstg-inpv-08 - SSI Injection Testing
security-testing web-security SSI-injection vulnerability-scanning
★ 2,684 · Updated 2026-05-28
Test for SSI injection vulnerabilities in web applications
⚙ check SSI file extensions ⚙ test SSI detection ⚙ verify file inclusion
laravel-security - Laravel Security Best Practices Guide
security web-security laravel php
★ 265,108 · Updated 2026-03-24
Comprehensive Laravel security guidance covering authentication, validation, CSRF, file uploads, and secure deployment
⚙ configure authentication ⚙ implement authorization ⚙ validate user input
mcp-js-reverse-playbook - MCP Frontend JavaScript Reverse Engineering Playbook
reverse-engineering javascript mcp-methodology ast-analysis
★ 1,017 · Updated 2026-03-09
Standardized workflow for frontend JavaScript reverse engineering using MCP methodology
⚙ locate API signature chains ⚙ perform page observation forensics ⚙ reconstruct local execution environment