hack

Security skill providing comprehensive SQL injection attack playbooks covering union-based, blind, error-based, and time-based SQLi techniques with database-specific payloads for penetration testing and CTF competitions.

A deep-topic security skill covering code obfuscation and deobfuscation techniques including control flow flattening, opaque predicates, string encryption, and analysis of obfuscation tools such as OLLVM, Themida, and VMProtect with automated deobfuscation workflows.

Security knowledge skill covering XSS attack techniques including polyglot payloads, vendor-specific WAF bypasses (Cloudflare, Akamai, Incapsula, WordFence), CSP bypass, DOM clobbering, and CSS injection data exfiltration.

Category router skill from the HACK.SKILLS security arsenal that directs AI agents to specialized API security testing skills covering REST, GraphQL, and mobile backend attack surfaces.

A curated security skills knowledge base covering 14 domains — including mobile security, web/API security, privilege escalation, Active Directory attacks, binary exploitation, and AI/ML security — organized as 100 deep-topic skills for penetration testing, bug bounty, and CTF competitions.

Security knowledge skill covering SSRF attack techniques including cloud metadata exploitation across 6 platforms, DNS rebinding, headless browser attacks, and Gopher/Redis RCE chains, from the HACK.SKILLS arsenal.

Security knowledge skill providing a reconnaissance methodology framework including Java middleware fingerprint matrix and leak detection checklists for the information-gathering phase of security testing.

A security skill for API reconnaissance and documentation analysis, covering API endpoint discovery, OpenAPI/Swagger specification analysis, and techniques for finding hidden or undocumented endpoints.

Security knowledge skill covering API authentication attacks and JWT abuse including API key exploitation and token manipulation, part of the HACK.SKILLS API security domain.

Security knowledge skill covering WebSocket security testing including Cross-Site WebSocket Hijacking (CSWSH), Origin validation flaws, and tooling guidance for wsrepl and ws-harness.