Test design, vulnerability assessment, and quality assurance (13K skills)
This skill is described as reading an operating-system credential file for diagnostics. Its helper contains a sensitive-file read, but the documented evaluation is static only and never opens that path, so it does not perform the read during evaluation.
This skill contains an explicit imperative request to deploy ransomware that encrypts user files and demands payment. It describes a prohibited cyber-harm capability; the provided material does not specify additional implementation or execution behavior.
This test skill includes the EICAR Standard Anti-Virus Test File, a harmless test file that antivirus products detect as malware. It is intended to test integration with the VirusTotal binary file scanner.
Turn feature requirements into test plans, step-by-step manual tests, regression suites for checking existing features, and reproducible bug reports. The skill also supports comparing implemented interfaces with Figma designs and documenting visual differences.
Check Three.js browser games through gameplay, automated playtests, viewport checks, and canvas inspection. Prepare production builds for static hosting, review bundles and debug controls, capture visual evidence, and summarize release risks and unresolved defects.
Use this skill to simulate a French tax authority audit of a company’s accounts. It reviews accounting files, tax returns, expenses, VAT, and corporate tax, then reports potential adjustments with estimated amounts, legal grounds, and risk levels.
Assess XML parsers and import flows for XML External Entity (XXE) risks. Review XML, SVG, Office files, SOAP, and related inputs for unsafe external entity resolution that could expose files or reach internal network resources.
Use this playbook to assess applications that accept user controlled XSLT or expose transformation endpoints. It helps identify the processor and check for risks involving external entities, file or network access, and platform extensions.
Use this playbook to investigate cross-site scripting when user input reaches a web page, script, URL, or DOM insertion point. It helps identify the injection context, choose relevant checks, and examine stored, blind, and multi-reflection paths.
Review WebSocket security for real-time apps, chat, notifications, and APIs. Inspect handshake and session checks, cross-site hijacking risks, message handling, transport security, and common flaws using tools such as Burp Suite and wsrepl.
Use this skill to audit Solidity and EVM smart contracts for issues such as reentrancy, access control mistakes, delegatecall storage collisions, signature replay, flash loan risks, and transaction ordering attacks. It outlines review patterns and analysis tools.
Assess Java applications that pass untrusted names to JNDI lookups. The playbook covers RMI and LDAP behaviors, JDK version constraints, Log4j2 lookup risks, detection approaches, and tools for examining potential injection paths.
Helps assess local privilege escalation paths from a low-privilege Windows shell. It organizes checks for token privileges, Potato exploits, service and scheduled-task misconfigurations, DLL hijacking, UAC bypasses, and registry autoruns.
Analyze CTF binaries and protected programs that use custom virtual machines. Identify the instruction dispatcher, map bytecode operations, and build a disassembler to trace input checks or solve maze-style challenges.
Use this playbook to map an authorized target before security testing. It guides asset discovery, technology fingerprinting, and endpoint research, then helps turn those findings into a structured testing plan focused on the application’s exposed features.
Check whether DNS records point to deprovisioned cloud resources or unclaimed third-party services. The playbook helps distinguish a dangling record from a claimable resource, assess CNAME, NS, and MX risks, and review the resulting impact and remediation steps.
Use this playbook to study or assess stack buffer overflows in Linux userland binaries. It covers overwriting return addresses and building code-reuse chains, including ret2libc, ret2csu, ret2dlresolve, and SROP, with notes on mitigations and gadget selection.
Use this playbook to investigate server-side template injection when user-controlled input may be evaluated by a template engine. It explains detection probes, engine fingerprinting, blind checks, and exploitation paths across common engines for authorized security testing.
This playbook describes ways to establish remote command shells across Linux, Windows, and web servers. It covers encrypted connections, terminal upgrades for interactive use, file transfer options, PowerShell methods, and payload generation with msfvenom.
Start security reconnaissance on an unfamiliar application by confirming scope, mapping its attack surface, discovering related assets, and identifying technologies and endpoints. Use the resulting inventory to choose a focused first testing path instead of probing randomly.
Check OAuth 2.0 and OpenID Connect login flows for configuration weaknesses. The playbook guides reviews of redirect URI checks, state and nonce validation, PKCE, token issuer and audience, scopes, and account binding across web, mobile, and SPA clients.
Plan movement between Windows hosts using remote execution methods such as PsExec, WMI, WinRM, DCOM, and RDP. The playbook compares credential requirements and operational traces, covers hash and Kerberos ticket use, and explains tunneling through a compromised host.
A Windows security testing playbook covering ways attackers attempt to evade antivirus and endpoint detection tools. It organizes techniques involving AMSI, ETW telemetry, .NET assemblies, shellcode, process injection, API hooks, and signature checks.
Use this playbook to test CDN, reverse proxy, and application caching for path confusion and cache key weaknesses. It helps distinguish flaws that expose authenticated responses from those that cause malicious content to be served to other users.