attack-cors
CORS misconfiguration testing — origin reflection, wildcard bypass, null origin, credential leakage
☆1.21k repo stars⑂201 repo forks
DevOps & Security
DevOps & Security skills
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
attack-graphql
GraphQL vulnerability testing — introspection exposure, complexity DoS, batch abuse, mutation auth bypass
☆1.21k repo stars⑂201 repo forks
DevOps & Security
attack-host-header
Host header injection — password reset poisoning, cache poisoning, routing bypass, SSRF via Host
☆1.21k repo stars⑂201 repo forks
DevOps & Security
attack-idor-automation
IDOR automated testing — cross-account access, horizontal/vertical privilege escalation, mass data exposure
☆1.21k repo stars⑂201 repo forks
DevOps & Security
attack-jwt
JWT token attacks — alg:none bypass, key confusion, claim tampering, signature stripping
☆1.21k repo stars⑂201 repo forks
DevOps & Security
attack-open-redirect
Open redirect exploitation — URL parameter manipulation, OAuth token theft, phishing chains
☆1.21k repo stars⑂201 repo forks
DevOps & Security
attack-prototype-pollution
JavaScript prototype pollution — __proto__ injection, constructor.prototype, gadget chain exploitation
☆1.21k repo stars⑂201 repo forks
DevOps & Security
attack-request-smuggling
HTTP request smuggling — CL.TE, TE.CL, TE.TE desync attacks for cache poisoning and auth bypass
☆1.21k repo stars⑂201 repo forks
DevOps & Security
attack-ssrf
Server-Side Request Forgery — internal network access, cloud metadata theft, filter bypass techniques
☆1.21k repo stars⑂201 repo forks
DevOps & Security
attack-ssti
Server-Side Template Injection — detection, engine fingerprinting, and exploitation across 7 template engines
☆1.21k repo stars⑂201 repo forks
DevOps & Security