HomePricingHow it worksSkills
Log in
GitHub repository

yaklang/hack-skills

View repository
Skills
102
Installs
304.6K
Stars
~2,100
License
—

Skills in this repository

01
hack
3,568
02
android-pentesting-tricks
3,343
03
code-obfuscation-deobfuscation
3,321
04
sqli-sql-injection
3,297
05
api-sec
3,246
06
xss-cross-site-scripting
3,236
07
recon-and-methodology
3,232
08
business-logic-vulnerabilities
3,192
09
ssrf-server-side-request-forgery
3,172
10
authbypass-authentication-flaws
3,116
11
jwt-oauth-token-attacks
3,113
12
api-recon-and-docs
3,111
13
api-auth-and-jwt-abuse
3,106
14
idor-broken-object-authorization
3,103
15
websocket-security
3,095
16
401-403-bypass-techniques
3,092
17
waf-bypass-techniques
3,087
18
auth-sec
3,072
19
api-authorization-and-bola
3,059
20
injection-checking
3,057
21
cors-cross-origin-misconfiguration
3,052
22
kubernetes-pentesting
3,051
23
recon-for-sec
3,046
24
ios-pentesting-tricks
3,034
25
heap-exploitation
3,033
26
business-logic-vuln
3,032
27
traffic-analysis-pcap
3,031
28
csrf-cross-site-request-forgery
3,030
29
oauth-oidc-misconfiguration
3,027
30
llm-prompt-injection
3,022
31
vm-and-bytecode-reverse
3,008
32
binary-protection-bypass
3,000
33
anti-debugging-techniques
2,998
34
path-traversal-lfi
2,996
35
cmdi-command-injection
2,993
36
format-string-exploitation
2,992
37
xxe-xml-external-entity
2,987
38
graphql-and-hidden-parameters
2,986
39
file-access-vuln
2,985
40
ssti-server-side-template-injection
2,984
41
kernel-exploitation
2,983
42
deserialization-insecure
2,980
43
http-parameter-pollution
2,979
44
browser-exploitation-v8
2,978
45
race-condition
2,971
46
request-smuggling
2,970
47
open-redirect
2,968
48
symbolic-execution-tools
2,968
49
csp-bypass-advanced
2,967
50
insecure-source-code-management
2,965
51
crlf-injection
2,964
52
dependency-confusion
2,963
53
web-cache-deception
2,963
54
mobile-ssl-pinning-bypass
2,960
55
http-host-header-attacks
2,955
56
expression-language-injection
2,954
57
csv-formula-injection
2,947
58
subdomain-takeover
2,947
59
jndi-injection
2,946
60
clickjacking
2,945
61
active-directory-acl-abuse
2,944
62
saml-sso-assertion-attacks
2,937
63
active-directory-kerberos-attacks
2,936
64
hash-attack-techniques
2,932
65
active-directory-certificate-services
2,930
66
http2-specific-attacks
2,930
67
arbitrary-write-to-rce
2,927
68
linux-privilege-escalation
2,925
69
prototype-pollution
2,925
70
ai-ml-security
2,924
71
defi-attack-patterns
2,924
72
dangling-markup-injection
2,921
73
dns-rebinding-attacks
2,921
74
windows-av-evasion
2,921
75
network-protocol-attacks
2,919
76
xslt-injection
2,916
77
linux-lateral-movement
2,915
78
type-juggling
2,915
79
email-header-injection
2,913
80
container-escape-techniques
2,910
81
windows-privilege-escalation
2,910
82
memory-forensics-volatility
2,909
83
classical-cipher-analysis
2,907
84
tunneling-and-pivoting
2,906
85
linux-security-bypass
2,903
86
stack-overflow-and-rop
2,899
87
prototype-pollution-advanced
2,897
88
smart-contract-vulnerabilities
2,892
89
lattice-crypto-attacks
2,885
90
steganography-techniques
2,884
91
sandbox-escape-techniques
2,883
92
symmetric-cipher-attacks
2,882
93
rsa-attack-techniques
2,881
94
windows-lateral-movement
2,881
95
macos-security-bypass
2,866
96
ntlm-relay-coercion
2,853
97
macos-process-injection
2,840
98
nosql-injection
2,829
99
upload-insecure-files
2,826
100
unauthorized-access-common-services
2,801