Universal Skills

Linux kernel exploitation playbook

yaklang / linux-privilege-escalation

Linux privilege escalation playbook

skilldocker

yaklang / linux-security-bypass

Linux security mechanism bypass playbook

skillsecurityrest

yaklang / memory-forensics-volatility

Memory forensics playbook using Volatility 2/3

yaklang / network-protocol-attacks

Network protocol attack playbook

yaklang / ntlm-relay-coercion

NTLM relay and authentication coercion playbook

skillsql

yaklang / prototype-pollution

Prototype pollution testing for JavaScript stacks

skilltestingrust

yaklang / reverse-shell-techniques

Reverse shell techniques playbook

yaklang / smart-contract-vulnerabilities

Smart contract vulnerability playbook

yaklang / stack-overflow-and-rop

Stack overflow and ROP playbook

yaklang / steganography-techniques

Steganography detection and extraction playbook

skillimage

yaklang / subdomain-takeover

Subdomain takeover detection and exploitation playbook

yaklang / traffic-analysis-pcap

Traffic analysis and PCAP forensics playbook

yaklang / tunneling-and-pivoting

Tunneling and pivoting playbook

yaklang / type-juggling

PHP type juggling and weak comparison (`==`) bypass

yaklang / waf-bypass-techniques

WAF bypass methodology and generic evasion techniques

skillsqlsecurity+1

yaklang / web-cache-deception

Web cache deception and poisoning playbook

yaklang / windows-av-evasion

AV/EDR evasion playbook for Windows

skillapi

yaklang / windows-lateral-movement

Windows lateral movement playbook

yaklang / windows-privilege-escalation

Windows local privilege escalation playbook

yaklang / ai-ml-security

AI/ML security playbook

skillsecurity

yaklang / cmdi-command-injection

Command injection playbook

yaklang / csrf-cross-site-request-forgery

CSRF testing playbook

skilltestingreview+1

yaklang / llm-prompt-injection

LLM prompt injection playbook

skilltestingmcp+1

yaklang / upload-insecure-files

Insecure file upload playbook

skilltestingreview

yaklang / 401-403-bypass-techniques

401/403 bypass playbook

skillapirest

yaklang / container-escape-techniques

Container escape playbook

skilldockerkubernetes

yaklang / dns-rebinding-attacks

DNS rebinding attack playbook

skilltestingrust+1

yaklang / heap-exploitation

Heap exploitation playbook

yaklang / jndi-injection

JNDI injection playbook