HomePricingHow it worksSkills
Log in
GitHub repository

yaklang/hack-skills

Helping AI Agent become an awesome practical hacker!

View repository
Skills
104
Installs
336.6K
Stars
2,340
License
—

Skills in this repository

01
hack
3,936
02
android-pentesting-tricks
3,685
03
code-obfuscation-deobfuscation
3,651
04
sqli-sql-injection
3,645
05
recon-and-methodology
3,589
06
xss-cross-site-scripting
3,574
07
api-sec
3,570
08
business-logic-vulnerabilities
3,525
09
ssrf-server-side-request-forgery
3,501
10
authbypass-authentication-flaws
3,447
11
jwt-oauth-token-attacks
3,441
12
api-recon-and-docs
3,438
13
idor-broken-object-authorization
3,431
14
api-auth-and-jwt-abuse
3,427
15
401-403-bypass-techniques
3,422
16
waf-bypass-techniques
3,415
17
websocket-security
3,412
18
auth-sec
3,386
19
api-authorization-and-bola
3,385
20
injection-checking
3,377
21
kubernetes-pentesting
3,375
22
cors-cross-origin-misconfiguration
3,367
23
recon-for-sec
3,359
24
ios-pentesting-tricks
3,357
25
llm-prompt-injection
3,351
26
business-logic-vuln
3,346
27
heap-exploitation
3,346
28
csrf-cross-site-request-forgery
3,345
29
oauth-oidc-misconfiguration
3,341
30
traffic-analysis-pcap
3,341
31
vm-and-bytecode-reverse
3,337
32
anti-debugging-techniques
3,317
33
binary-protection-bypass
3,311
34
path-traversal-lfi
3,311
35
cmdi-command-injection
3,306
36
graphql-and-hidden-parameters
3,300
37
ssti-server-side-template-injection
3,299
38
format-string-exploitation
3,298
39
xxe-xml-external-entity
3,298
40
kernel-exploitation
3,297
41
file-access-vuln
3,295
42
http-parameter-pollution
3,290
43
deserialization-insecure
3,287
44
request-smuggling
3,286
45
browser-exploitation-v8
3,284
46
race-condition
3,283
47
csp-bypass-advanced
3,280
48
mobile-ssl-pinning-bypass
3,276
49
open-redirect
3,276
50
symbolic-execution-tools
3,276
51
insecure-source-code-management
3,273
52
crlf-injection
3,272
53
http-host-header-attacks
3,271
54
web-cache-deception
3,271
55
dependency-confusion
3,268
56
expression-language-injection
3,264
57
subdomain-takeover
3,262
58
csv-formula-injection
3,258
59
jndi-injection
3,254
60
active-directory-acl-abuse
3,252
61
clickjacking
3,251
62
http2-specific-attacks
3,244
63
saml-sso-assertion-attacks
3,244
64
active-directory-kerberos-attacks
3,242
65
hash-attack-techniques
3,242
66
linux-privilege-escalation
3,237
67
active-directory-certificate-services
3,235
68
arbitrary-write-to-rce
3,233
69
dns-rebinding-attacks
3,233
70
prototype-pollution
3,233
71
ai-ml-security
3,232
72
dangling-markup-injection
3,229
73
defi-attack-patterns
3,229
74
network-protocol-attacks
3,227
75
windows-av-evasion
3,225
76
xslt-injection
3,224
77
email-header-injection
3,220
78
type-juggling
3,220
79
linux-lateral-movement
3,218
80
windows-privilege-escalation
3,218
81
memory-forensics-volatility
3,216
82
container-escape-techniques
3,214
83
classical-cipher-analysis
3,212
84
tunneling-and-pivoting
3,210
85
linux-security-bypass
3,208
86
prototype-pollution-advanced
3,203
87
smart-contract-vulnerabilities
3,201
88
stack-overflow-and-rop
3,201
89
lattice-crypto-attacks
3,188
90
sandbox-escape-techniques
3,188
91
rsa-attack-techniques
3,186
92
windows-lateral-movement
3,185
93
steganography-techniques
3,184
94
symmetric-cipher-attacks
3,184
95
macos-security-bypass
3,171
96
ntlm-relay-coercion
3,157
97
macos-process-injection
3,143
98
nosql-injection
3,136
99
upload-insecure-files
3,127
100
unauthorized-access-common-services
3,099