All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 29,761
- 1,241
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 9,337–9,360 of 29,761 skills
- Vmware Vcenter AttackVMware vSphere / vCenter Server external attack matrix — version fingerprinting, the high-impact CVE chain (CVE-2021-21972 vRealize unauth file upload, CVE-2021-21985 vSAN plugin RCE, CVE-2022-22954 Workspace ONE SSTI, CVE-2023-20887 Aria RCE, CVE-2024-37085 ESXi AD bypass, CVE-2023-34048 vCenter DCERPC OOB write APT-exploited), default credentials, SSO configuration disclosure, vmdir LDAP enumeration, ESXi Open SLP RCE history. ONLY for vCenter / Workspace ONE / Aria instances exposed to the...Votes: 0GitHub stars: 2
- Offensive K8s AttacksKubernetes cluster attack techniques covering the full attack lifecycle from initial foothold in a pod to cluster-wide compromise. Covers service account token theft and impersonation, RBAC misconfiguration exploitation including wildcard permissions and privilege escalation via role binding, direct etcd access for secret extraction, kubelet API abuse on port 10250 and read-only port 10255, pod escape via hostPID hostNetwork and hostPath volume mounts, Kubernetes secrets enumeration and decod...Votes: 0GitHub stars: 2
- Network Container EscapesYou are helping a penetration tester escape from a containerized environment orVotes: 0GitHub stars: 2
- Offensive Ai SecurityAI/LLM security offensive checklist: prompt injection, jailbreaking, model extraction, training data poisoning, adversarial inputs, LLM-assisted attack automation, and AI system reconnaissance. Use when assessing AI/ML systems, red-teaming LLMs, or researching AI attack vectors.Votes: 0GitHub stars: 2
- Ad Trust AttacksYou are helping a penetration tester enumerate and exploit Active DirectoryVotes: 0GitHub stars: 2
- Ad Sccm ExploitationYou are helping a penetration tester enumerate and exploit MicrosoftVotes: 0GitHub stars: 2
- Ad Pass The HashYou are helping a penetration tester use credential material (NTLM hashes,Votes: 0GitHub stars: 2
- Ad Kerberos Ticket ForgingYou are helping a penetration tester forge Kerberos tickets for domainVotes: 0GitHub stars: 2
- Ad Kerberos RoastingYou are helping a penetration tester perform Kerberoasting (extracting TGSVotes: 0GitHub stars: 2
- Ad Kerberos DelegationYou are helping a penetration tester exploit Kerberos delegation misconfigurationsVotes: 0GitHub stars: 2
- Ad Gpo AbuseYou are helping a penetration tester exploit writable Group Policy ObjectsVotes: 0GitHub stars: 2
- Ad Credential DumpingYou are helping a penetration tester extract credentials from ActiveVotes: 0GitHub stars: 2
- Ad Auth Coercion RelayYou are helping a penetration tester force remote systems to authenticateVotes: 0GitHub stars: 2
- Ad Adcs Template AbuseYou are helping a penetration tester exploit misconfigured AD CS certificateVotes: 0GitHub stars: 2
- Ad Adcs PersistenceYou are helping a penetration tester establish persistence through AD CSVotes: 0GitHub stars: 2
- Ad Adcs Access And RelayYou are helping a penetration tester exploit ADCS through template/CA accessVotes: 0GitHub stars: 2
- Ad Ad DiscoveryYou are helping a penetration tester enumerate an Active Directory domain andVotes: 0GitHub stars: 2
- Ad Acl AbuseYou are helping a penetration tester exploit misconfigured Active DirectoryVotes: 0GitHub stars: 2
- Flutter SecurityThreat-model, audit, or harden Flutter and Dart applications against concrete security and privacy risks involving authorization, secrets, sensitive storage, cryptography, WebViews, deep links, platform exposure, or dependencies. Use for security findings and control requirements; route sign-in and session implementation to flutter-authentication.Votes: 0GitHub stars: 7
- People Breach IntelBreach data lookup, HudsonRock infostealer intel, email-pattern inference, email harvest, Slack/Discord discovery, package registry leaks, and vulnerability prioritization endpoints.Votes: 0GitHub stars: 12
- Osint MethodologyComprehensive OSINT methodology for external red-team operations and authorized attack-surface assessments. Covers the staged recon pipeline, asset-graph discipline, severity rubric, confidence upgrade workflows, time budgeting, identity-fabric mapping, breach×identity correlation, detectability tagging, detection-aware probing, WAF/CDN bypass, vulnerability prioritization, phishing infrastructure planning, bug bounty submission, and client deliverable templates. Use when planning or executin...Votes: 0GitHub stars: 12
- Analysis And ReportingEndpoint interest scoring, mobile app ownership confidence, attack-path hint patterns, a severity decision matrix, sector severity overrides, and sidecar coordination.Votes: 0GitHub stars: 12
- No Tools缺工具准备章节。missing tools section.Votes: 0GitHub stars: 112
- Good Skill测试用合法技能。Trigger: test。Votes: 0GitHub stars: 112