12,276 skills found · Page 260 of 410
uphiago / s3-minio-content-type-xssExploit public bucket Content-Type override for stored XSS on target origin.
uphiago / scada-hikvision-isapiEnumerate Hikvision ISAPI endpoints on SCADA and IoT web interfaces.
uphiago / stealth-browser-launchLaunch stealth Chromium with C++ fingerprint patches for anti-bot bypass.
uphiago / tls-fingerprint-impersonationSpoof TLS ClientHello and JA4 fingerprints for browser impersonation.
uphiago / unauth-api-flow-hijackExploit unauthenticated multi-step API flows without credentials.
uphiago / visual-reconScreenshot all live hosts for rapid visual triage and technology fingerprinting.
uphiago / web-enumerationSensitive file scanning, path traversal bypass, vHost enum, .env extract, log mining, Varnish detect
uphiago / cloud-iam-deepGCP/AWS/Azure cloud exploitation -- Cloud Functions, Firestore, Cloud Run, S3, MinIO, Blob Storage, SA keys
uphiago / hunt-broken-function-level-authHunt broken function-level authorization via verb drift, route shadowing, and transport gaps.
uphiago / hunt-fastapiHunt FastAPI-specific vulnerabilities: dependency injection gaps, Pydantic coercion, and OpenAPI mining.
uphiago / hunt-information-disclosureHunt error leakage, DVCS exposure, source maps, config files, and differential oracles.
uphiago / hunt-mass-assignmentHunt mass assignment via sensitive field injection and ORM framework exploitation.
uphiago / hunt-mcp-securityHunt Model Context Protocol (MCP) vulnerabilities in AI-tool integration systems.
uphiago / hunt-nestjsHunt NestJS-specific vulnerabilities: guard bypass, decorator gaps, and microservice auth drift.
uphiago / hunt-prototype-pollutionHunt client-side and server-side prototype pollution for XSS, auth bypass, and RCE.
uphiago / hunt-schema-enumerationEnumerate hidden tables, fields, and endpoints via API error hints. Agnostic across PostgREST, Zod, FastAPI, GraphQL, and REST.
uphiago / pentest-playbook7-phase pentest pipeline from passive recon to exploitation.
uphiago / google-dorks-catalogHigh-precision Google dorks for exposed configs, secrets, and credentials -- real-world validated
uphiago / subdomain-takeover-huntDetect and verify subdomain takeover via dangling CNAME to unclaimed services.
uphiago / vhost-enumerationDiscover hidden virtual hosts via Host header fuzzing and SSL certificate parsing.
uphiago / hunt-djangoHunt Django-specific vulnerabilities: DRF permission gaps, ORM injection, and admin exploitation.
uphiago / cross-attack-chainsUse when two or more verified findings may combine into a higher-impact authorized attack path.
uphiago / cross-wave-delta-analysisCompare recon waves to find NEW, REGRESSED, PERSISTENT findings.
uphiago / email-securityDMARC/SPF/DKIM check, email spoofing, SMTP test, and security header analysis
uphiago / bb-local-toolkitComplete bug bounty workflow — recon (subdomain enumeration, asset discovery, fingerprinting, HackerOne scope, source code audit), pre-hunt learning, vuln hunting (30+ classes), A-to-B chaining, AI/LLM testing, bypass tables, language-specific grep, reporting. Use for ANY bug bounty task.
uphiago / bug-bountyMaster bug bounty orchestrator — full pipeline: recon, pre-hunt learning, vulnerability hunting (30+ classes), A-to-B chaining, AI/LLM testing (ASI01-ASI10), language-specific grep, bypass tables, and reporting (7-question gate, CVSS 3.1, human-tone templates).
uphiago / hunt-metrics-exposureHunt public /metrics, /health, and actuator endpoints leaking AI usage, DB pools, and operational intelligence.
uphiago / wordpress-full-compromiseUse when verified WordPress findings may combine into an authorized path to administrative or server control.
AI-Builder-Club / crabbox-setupScaffold an isolated CLOUD dev box per agent (via crabbox + Daytona) for any codebase — the parallel-safe counterpart to dev-local-setup. Each agent gets its own full stack (own DB + dev server) and an in-box browser for e2e, so concurrent loops never collide on ports/state.
AI-Builder-Club / karaoke-captionsGenerate TikTok/Shorts-style karaoke captions using MLX Whisper, ASS subtitles, and FFmpeg libass
