HomePricingHow it worksSkills
Log in
GitHub repository

yaklang/hack-skills

Helping AI Agent become an awesome practical hacker!

View repository
Skills
104
Installs
371.9K
Stars
2,535
License
—

Skills in this repository

01
hack
4,331
02
android-pentesting-tricks
4,060
03
recon-and-methodology
4,009
04
sqli-sql-injection
4,009
05
code-obfuscation-deobfuscation
4,006
06
xss-cross-site-scripting
3,939
07
api-sec
3,919
08
business-logic-vulnerabilities
3,874
09
ssrf-server-side-request-forgery
3,856
10
authbypass-authentication-flaws
3,796
11
idor-broken-object-authorization
3,784
12
jwt-oauth-token-attacks
3,784
13
api-recon-and-docs
3,781
14
401-403-bypass-techniques
3,773
15
api-auth-and-jwt-abuse
3,772
16
waf-bypass-techniques
3,772
17
websocket-security
3,753
18
vm-and-bytecode-reverse
3,729
19
api-authorization-and-bola
3,725
20
auth-sec
3,723
21
kubernetes-pentesting
3,718
22
injection-checking
3,713
23
cors-cross-origin-misconfiguration
3,711
24
ios-pentesting-tricks
3,709
25
recon-for-sec
3,704
26
llm-prompt-injection
3,691
27
business-logic-vuln
3,684
28
csrf-cross-site-request-forgery
3,684
29
heap-exploitation
3,684
30
oauth-oidc-misconfiguration
3,679
31
traffic-analysis-pcap
3,678
32
anti-debugging-techniques
3,660
33
path-traversal-lfi
3,654
34
cmdi-command-injection
3,651
35
binary-protection-bypass
3,650
36
ssti-server-side-template-injection
3,645
37
graphql-and-hidden-parameters
3,639
38
xxe-xml-external-entity
3,638
39
kernel-exploitation
3,634
40
file-access-vuln
3,633
41
request-smuggling
3,632
42
deserialization-insecure
3,631
43
format-string-exploitation
3,630
44
http-parameter-pollution
3,628
45
race-condition
3,628
46
csp-bypass-advanced
3,622
47
browser-exploitation-v8
3,620
48
open-redirect
3,618
49
symbolic-execution-tools
3,616
50
crlf-injection
3,613
51
insecure-source-code-management
3,610
52
mobile-ssl-pinning-bypass
3,609
53
web-cache-deception
3,608
54
http-host-header-attacks
3,607
55
subdomain-takeover
3,604
56
dependency-confusion
3,601
57
expression-language-injection
3,598
58
csv-formula-injection
3,591
59
active-directory-acl-abuse
3,588
60
clickjacking
3,585
61
jndi-injection
3,585
62
http2-specific-attacks
3,581
63
active-directory-kerberos-attacks
3,580
64
saml-sso-assertion-attacks
3,578
65
linux-privilege-escalation
3,576
66
active-directory-certificate-services
3,574
67
arbitrary-write-to-rce
3,572
68
hash-attack-techniques
3,571
69
prototype-pollution
3,569
70
dns-rebinding-attacks
3,565
71
ai-ml-security
3,562
72
dangling-markup-injection
3,561
73
defi-attack-patterns
3,560
74
network-protocol-attacks
3,560
75
windows-av-evasion
3,557
76
type-juggling
3,556
77
xslt-injection
3,556
78
email-header-injection
3,555
79
memory-forensics-volatility
3,555
80
linux-lateral-movement
3,551
81
windows-privilege-escalation
3,551
82
container-escape-techniques
3,548
83
classical-cipher-analysis
3,545
84
linux-security-bypass
3,542
85
tunneling-and-pivoting
3,542
86
prototype-pollution-advanced
3,537
87
smart-contract-vulnerabilities
3,533
88
stack-overflow-and-rop
3,531
89
steganography-techniques
3,523
90
lattice-crypto-attacks
3,519
91
rsa-attack-techniques
3,518
92
windows-lateral-movement
3,517
93
sandbox-escape-techniques
3,516
94
symmetric-cipher-attacks
3,515
95
macos-security-bypass
3,496
96
ntlm-relay-coercion
3,488
97
nosql-injection
3,470
98
macos-process-injection
3,468
99
upload-insecure-files
3,458
100
unauthorized-access-common-services
3,421