All authors
Claude Skills by MustafaKemal0146
github.com/MustafaKemal0146961 skills11 installs1,632 views
- Prioritizing Vulnerabilities With Cvss ScoringThe Common Vulnerability Scoring System (CVSS) is the industry standard framework maintained by FIRST (Forum of Incident Response and Security Teams) for assessing vulnerability severity. CVSSVotes: 0GitHub stars: 4
- Scanning Infrastructure With NessusTenable Nessus is the industry-leading vulnerability scanner used to identify security weaknesses across network infrastructure including servers, workstations, network devices, and operatingVotes: 0GitHub stars: 4
- Triaging Vulnerabilities With Ssvc FrameworkTriage and prioritize vulnerabilities using CISA's Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree framework to produce actionable remediation priorities.Votes: 0GitHub stars: 4
- Bug Bounty HunterBug bounty hunting advisor for responsible vulnerability disclosure. Program scope analysis, testing strategies, vulnerability discovery methods.Votes: 0GitHub stars: 4
- Bypassing Authentication With Forced BrowsingDiscovering and accessing unprotected pages, APIs, and administrative interfaces by enumerating URLs and bypassing authentication controls during authorized security assessments.Votes: 0GitHub stars: 4
- Exploiting Broken Link HijackingDiscover and exploit broken link hijacking vulnerabilities by identifying references to expired domains, decommissioned cloud resources, and dead external services that can be claimed by anVotes: 0GitHub stars: 4
- Exploiting Http Request SmugglingTespit etme and exploiting HTTP request smuggling vulnerabilities caused by Content-Length and Transfer-Encoding parsing discrepancies between front-end and back-end servers.Votes: 0GitHub stars: 4
- Exploiting Idor VulnerabilitiesIdentifying and exploiting Insecure Direct Object Reference vulnerabilities to access unauthorized resources by manipulating object identifiers in API requests and URLs.Votes: 0GitHub stars: 4
- Exploiting Insecure DeserializationIdentifying and exploiting insecure deserialization vulnerabilities in Java, PHP, Python, and .NET applications to achieve remote code execution during authorized penetration tests.Votes: 0GitHub stars: 4
- Exploiting Mass Assignment In Rest ApisDiscover and exploit mass assignment vulnerabilities in REST APIs to escalate privileges, modify restricted fields, and bypass authorization controls by injecting unexpected parameters in APIVotes: 0GitHub stars: 4
- Exploiting Nosql Injection Vulnerabilitiestespit etmeand exploit NoSQL injection vulnerabilities in MongoDB, CouchDB, and other NoSQL databases to demonstrate authentication bypass, data extraction, and unauthorized access risks.Votes: 0GitHub stars: 4
- Exploiting Oauth MisconfigurationIdentifying and exploiting OAuth 2.0 and OpenID Connect misconfigurations including redirect URI manipulation, token leakage, and authorization code theft during security assessments.Votes: 0GitHub stars: 4
- Exploiting Prototype Pollution In Javascripttespit etmeand exploit JavaScript prototype pollution vulnerabilities on both client-side and server-side applications to achieve XSS, RCE, and authentication bypass through property injection.Votes: 0GitHub stars: 4
- Exploiting Race Condition Vulnerabilitiestespit etmeand exploit race condition vulnerabilities in web applications using Turbo Intruder's single-packet attack technique to bypass rate limits, duplicate transactions, and exploit time-of-check-to-time-of-useVotes: 0GitHub stars: 4
- Exploiting Server Side Request ForgeryIdentifying and exploiting SSRF vulnerabilities to access internal services, cloud metadata, and restricted network resources during authorized penetration tests.Votes: 0GitHub stars: 4
- Exploiting Sql Injection With SqlmapTespit etme and exploiting SQL injection vulnerabilities using sqlmap to extract database contents during authorized penetration tests.Votes: 0GitHub stars: 4
- Exploiting Template Injection VulnerabilitiesTespit etme and exploiting Server-Side Template Injection (SSTI) vulnerabilities across Jinja2, Twig, Freemarker, and other template engines to achieve remote code execution.Votes: 0GitHub stars: 4
- Exploiting Type Juggling VulnerabilitiesExploit PHP type juggling vulnerabilities caused by loose comparison operators to bypass authentication, circumvent hash verification, and manipulate application logic through type coercionVotes: 0GitHub stars: 4
- Exploiting Websocket VulnerabilitiesTesting WebSocket implementations for authentication bypass, cross-site hijacking, injection attacks, and insecure message handling during authorized security assessments.Votes: 0GitHub stars: 4
- Implementing Devsecops Security ScanningIntegrates Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA) into CI/CD pipelines using open-source tools. CoversVotes: 0GitHub stars: 4
- Implementing Runtime Application Self ProtectionDağıt: Runtime Application Self-Protection (RASP) agents to tespit etmeand block attacks from within application runtime, covering OpenRASP integration, attack pattern Tespit, and security policyVotes: 0GitHub stars: 4
- Implementing Web Application Logging With ModsecurityConfigure ModSecurity WAF with OWASP Core Rule Set (CRS) for web application logging, tune rules to reduce false positives, analyze audit logs for attack Tespit, and implement custom SecRulesVotes: 0GitHub stars: 4
- Performing Blind Ssrf Exploitationtespit etmeand exploit blind Server-Side Request Forgery vulnerabilities using out-of-band techniques, DNS interactions, and timing analysis to access internal services and cloud metadata endpoints.Votes: 0GitHub stars: 4
- Performing Clickjacking Attack TestTesting web applications for clickjacking vulnerabilities by assessing frame embedding controls and crafting proof-of-concept overlay attacks during authorized security assessments.Votes: 0GitHub stars: 4
- Performing Content Security Policy BypassAnalyze and bypass Content Security Policy implementations to achieve cross-site scripting by exploiting misconfigurations, JSONP endpoints, unsafe directives, and policy injection techniques.Votes: 0GitHub stars: 4
- Performing Csrf Attack SimulationTesting web applications for Cross-Site Request Forgery vulnerabilities by crafting forged requests that exploit authenticated user sessions during authorized security assessments.Votes: 0GitHub stars: 4
- Performing Directory Traversal TestingTesting web applications for path traversal vulnerabilities that allow reading or writing arbitrary files on the server by manipulating file path parameters.Votes: 0GitHub stars: 4
- Performing Fuzzing With AflplusplusPerform coverage-guided fuzzing of compiled binaries using AFL++ (American Fuzzy Lop Plus Plus) to discover memory corruption, crashes, and security vulnerabilities. The tester instrumentsVotes: 0GitHub stars: 4
- Performing Graphql Security AssessmentAssessing GraphQL API endpoints for introspection leaks, injection attacks, authorization flaws, and denial-of-service vulnerabilities during authorized security tests.Votes: 0GitHub stars: 4
- Performing Http Parameter Pollution AttackExecute HTTP Parameter Pollution attacks to bypass input validation, WAF rules, and security controls by injecting duplicate parameters that are processed differently by front-end and back-endVotes: 0GitHub stars: 4
- Performing Second Order Sql Injectiontespit etmeand exploit second-order SQL injection vulnerabilities where malicious input is stored in a database and later executed in an unsafe SQL query during a different application operation.Votes: 0GitHub stars: 4
- Performing Security Headers AuditAuditing HTTP security headers including CSP, HSTS, X-Frame-Options, and cookie attributes to identify missing or misconfigured browser-level protections.Votes: 0GitHub stars: 4
- Performing Subdomain Enumeration With SubfinderEnumerate subdomains of target domains using ProjectDiscovery's SubBul:er passive reconnaissance tool to map the attack surface during security assessments.Votes: 0GitHub stars: 4
- Performing Supply Chain Attack SimulationSimulate and tespit etmesoftware supply chain attacks including typosquatting Tespit via Levenshtein distance, dependency confusion testing against private registries, package hash verificationVotes: 0GitHub stars: 4
- Performing Web Application Firewall BypassBypass Web Application Firewall protections using encoding techniques, HTTP method manipulation, parameter pollution, and payload obfuscation to deliver SQL injection, XSS, and other attackVotes: 0GitHub stars: 4
- Performing Web Cache Deception AttackExecute web cache deception attacks by exploiting path normalization discrepancies between CDN caching layers and origin servers to cache and retrieve sensitive authenticated content.Votes: 0GitHub stars: 4
- Performing Web Cache Poisoning AttackExploiting web cache mechanisms to serve malicious content to other users by poisoning cached responses through unkeyed headers and parameters during authorized security tests.Votes: 0GitHub stars: 4
- Seclists FuzzingSecLists-based security testing skillVotes: 0GitHub stars: 4
- Sqli Test GeneratorGenerate SQL injection test payloads for authorized security testing. Database-specific payloads for MySQL, PostgreSQL, MSSQL, Oracle.Votes: 0GitHub stars: 4
- Testing Api Security With Owasp Top 10Systematically assessing REST and GraphQL API endpoints against the OWASP API Security Top 10 risks using automated and manual testing techniques.Votes: 0GitHub stars: 4
- Testing Cors MisconfigurationIdentifying and exploiting Cross-Origin Resource Sharing misconfigurations that allow unauthorized cross-domain data access and credential theft during security assessments.Votes: 0GitHub stars: 4
- Testing For Broken Access ControlSystematically testing web applications for broken access control vulnerabilities including privilege escalation, missing function-level checks, and insecure direct object references.Votes: 0GitHub stars: 4
- Testing For Business Logic VulnerabilitiesIdentifying flaws in application business logic that allow price manipulation, workflow bypass, and privilege escalation beyond what technical vulnerability scanners can Detect.Votes: 0GitHub stars: 4
- Testing For Email Header InjectionTest web application email functionality for SMTP header injection vulnerabilities that allow attackers to inject additional email headers, modify recipients, and abuse contact forms for spamVotes: 0GitHub stars: 4
- Testing For Host Header InjectionTest web applications for HTTP Host header injection vulnerabilities to identify password reset poisoning, web cache poisoning, SSRF, and virtual host routing manipulation risks.Votes: 0GitHub stars: 4
- Testing For Json Web Token VulnerabilitiesTest JWT implementations for critical vulnerabilities including algorithm confusion, none algorithm bypass, kid parameter injection, and weak secret exploitation to achieve authentication bypassVotes: 0GitHub stars: 4
- Testing For Open Redirect VulnerabilitiesIdentify and test open redirect vulnerabilities in web applications by analyzing URL redirection parameters, bypass techniques, and exploitation chains for phishing and token theft.Votes: 0GitHub stars: 4
- Testing For Sensitive Data ExposureIdentifying sensitive data exposure vulnerabilities including API key leakage, PII in responses, insecure storage, and unprotected data transmission during security assessments.Votes: 0GitHub stars: 4
- Testing For Xml Injection VulnerabilitiesTest web applications for XML injection vulnerabilities including XXE, XPath injection, and XML entity attacks to identify data exposure and server-side request forgery risks.Votes: 0GitHub stars: 4
- Testing For Xss Vulnerabilities With BurpsuiteIdentifying and validating cross-site scripting vulnerabilities using Burp Suite's scanner, intruder, and repeater tools during authorized security assessments.Votes: 0GitHub stars: 4