978 skills found · Page 23 of 33
uphiago / cors-chain-automationUse when a bounded list of authorized API endpoints needs consistent CORS triage before browser validation.
uphiago / flask-werkzeug-attackExploit Flask/Werkzeug debugger exposure for traceback and SECRET leaks.
uphiago / port-service-discoveryNmap scan for MySQL, Redis, FTP, SSH, internal API services.
uphiago / s3-minio-content-type-xssExploit public bucket Content-Type override for stored XSS on target origin.
uphiago / scada-hikvision-isapiEnumerate Hikvision ISAPI endpoints on SCADA and IoT web interfaces.
uphiago / unauth-api-flow-hijackExploit unauthenticated multi-step API flows without credentials.
uphiago / cloud-iam-deepGCP/AWS/Azure cloud exploitation -- Cloud Functions, Firestore, Cloud Run, S3, MinIO, Blob Storage, SA keys
uphiago / hunt-fastapiHunt FastAPI-specific vulnerabilities: dependency injection gaps, Pydantic coercion, and OpenAPI mining.
uphiago / pentest-playbook7-phase pentest pipeline from passive recon to exploitation.
uphiago / hunt-djangoHunt Django-specific vulnerabilities: DRF permission gaps, ORM injection, and admin exploitation.
uphiago / cross-attack-chainsUse when two or more verified findings may combine into a higher-impact authorized attack path.
uphiago / cross-wave-delta-analysisCompare recon waves to find NEW, REGRESSED, PERSISTENT findings.
uphiago / email-securityDMARC/SPF/DKIM check, email spoofing, SMTP test, and security header analysis
uphiago / bug-bountyMaster bug bounty orchestrator — full pipeline: recon, pre-hunt learning, vulnerability hunting (30+ classes), A-to-B chaining, AI/LLM testing (ASI01-ASI10), language-specific grep, bypass tables, and reporting (7-question gate, CVSS 3.1, human-tone templates).
uphiago / wordpress-full-compromiseUse when verified WordPress findings may combine into an authorized path to administrative or server control.
gooseworks-ai / competitor-ad-intelligenceScrape competitor ads from Meta, TikTok, Google, and LinkedIn ad libraries, analyze creative patterns (hooks, formats, CTAs), reverse-engineer landing page funnels, and produce a strategic teardown with vulnerability analysis and counter-play recommendations
BankrBot / wake-token-spotter-analysisGet the WAKE engine's analysis of any Base token by contract address. Returns a transparent 0-100 score across five criteria (deployer quality, liquidity health, contract safety, market signals, social signals), launch protocol classification (Bankr/Clanker/direct), security flags from GoPlus, contr…
BankrBot / trustlayer-sybil-scannerFeedback forensics for ERC-8004 agents. Detects Sybil rings, fake reviews, rating manipulation, and reputation laundering across 20 chains. No API key needed.
BankrBot / berry-juicerSingle-sided token-supply yield on Base, paid as AI inference
BankrBot / blueagent-x402Security OS for autonomous agents and builders on Base. 31 pay-per-use tools across Quantum Security, Agent Safety, Research, Data, and Earn. Built for AI agents, Zero-Human Companies (ZHC), and Base ecosystem builders. Pay USDC per call via x402 protocol — no subscription, no API key needed.
BankrBot / aeon-vuln-scannerAudit trending repos for real exploitable vulnerabilities and disclose responsibly — Private Vulnerability Reporting for code flaws and verified secrets, public PRs only for already-disclosed dependency CVEs. Semgrep + TruffleHog + osv-scanner + Slither with reachability triage.
BankrBot / token-scam-analysisDeep on-chain scam / rug / soft-rug analysis for EVM tokens (especially Clanker, Doppler, Bankr-style single-admin ERC-20s)
pashov / solidity-auditorSecurity audit of Solidity code while you develop. Trigger on "audit", "check this contract", "review for security", "loop mode", "run the auditor in loop mode", "run 3 passes". Modes - default (full repo) or a specific filename.
itsmostafa / ec2AWS EC2 virtual machine management — instances, security groups, key pairs, AMIs, EBS volumes, Auto Scaling Groups, Spot Instances, Session Manager, placement groups, and instance lifecycle automation.
itsmostafa / iamAWS Identity and Access Management for users, roles, policies, and permissions
brycewang-stanford / aejmac-referee-strategyUse when anticipating the objections referees and coeditors will raise on an American Economic Journal: Macroeconomics (AEJ: Macro) manuscript, and calibrating desk-reject and revision odds, before submission.
brycewang-stanford / ccs-artifact-evaluationUse when packaging ACM CCS artifacts for the artifact-evaluation committee and the ACM badges — Artifacts Available, Artifacts Evaluated Functional, Artifacts Evaluated Reusable, and Results Reproduced — covering what security evaluators inspect, how to make attacks and defenses turnkey, and how to…
brycewang-stanford / ccs-experimentsUse when designing or auditing ACM CCS experiments, attack demonstrations, adaptive-attack defense evaluations, security measurements, baselines, overhead and cost reporting, ablations, and claim-to-evidence fit, with emphasis on evidence that survives an adversarial program committee rather than le…
brycewang-stanford / ccs-related-workUse when positioning an ACM CCS submission against the security big-four and specialist literature, including arXiv preprints, prior CCS/S&P/USENIX/NDSS papers, concurrent disclosures, CVE and advisory records, and the attack-and-defense lineage that a SIGSAC program committee expects to see credite…
brycewang-stanford / ccs-supplementaryUse when preparing ACM CCS appendices and supplementary material, including the ethics considerations appendix, protocol transcripts, formal proofs, measurement tables, and anonymized supporting material under the 12-page body limit, anonymity, and reviewer-discretion constraints for a security pape…
