Overview CLI FAQ

Agent Skills 排行榜 · 关键词 + 语义搜索

按 / 聚焦搜索框
正在使用 AI 进行语义搜索...
29,255
总 Skills
225.4M
总安装量
2,811
贡献者
# Skill 仓库 描述 安装量
5451 lfg everyinc/compound-engineering-plugin
CRITICAL: You MUST execute every step below IN ORDER. Do NOT skip any required step. Do NOT jump ahead to coding or implementation. The plan phase (step 2) MUST be completed and verified BEFORE any work begins. Violating this order produces bad output. Optional: If the ralph-loop skill is available, run /ralph-loop:ralph-loop "finish all slash commands" --completion-promise "DONE" . If not available or it fails, skip and continue to step 2 immediately. /ce:plan $ARGUMENTS GATE: STOP. If ce:plan ...
 3.4K
5452 understand-explain egonex-ai/understand-anything
/understand-explain Provide a thorough, in-depth explanation of a specific code component. Graph Structure Reference The knowledge graph JSON has this structure: project — {name, description, languages, frameworks, analyzedAt, gitCommitHash} nodes[] — each has {id, type, name, filePath?, summary, tags[], complexity, languageNotes?} Code node types: file, function, class, module, concept Non-code node types: config, document, service, table, endpoint, pipeline, schema, resource Domain/knowledge n...
 3.4K
5453 blueprint wordpress/agent-skills
Blueprint — Construction Plan Generator Turn a one-line objective into a step-by-step construction plan that any coding agent can execute cold. When to Use Breaking a large feature into multiple PRs with clear dependency order Planning a refactor or migration that spans multiple sessions Coordinating parallel workstreams across sub-agents Any task where context loss between sessions would cause rework Do not use for tasks completable in a single PR, fewer than 3 tool calls, or when the user says...
 3.4K
5454 macro-regime-detector tradermonty/claude-trading-skills
Macro Regime Detector Detect structural macro regime transitions using monthly-frequency cross-asset ratio analysis. This skill identifies 1-2 year regime shifts that inform strategic portfolio positioning. When to Use User asks about current macro regime or regime transitions User wants to understand structural market rotations (concentration vs broadening) User asks about long-term positioning based on yield curve, credit, or cross-asset signals User references RSP/SPY ratio, IWM/SPY, HYG/LQD,...
 3.4K
5455 shareplay-activities dpearson2699/swift-ios-skills
GroupActivities / SharePlay Build shared real-time experiences using the GroupActivities framework. SharePlay connects people over FaceTime or iMessage, synchronizing media playback, app state, or custom data. Targets Swift 6.2 / iOS 26+. Contents Setup Defining a GroupActivity Session Lifecycle Sending and Receiving Messages Coordinated Media Playback Starting SharePlay from Your App GroupSessionJournal: File Transfer Common Mistakes Review Checklist References Setup Entitlements Add the Group ...
 3.4K
5456 anti-debugging-techniques yaklang/hack-skills
SKILL: Anti-Debugging Techniques — Detection & Bypass Playbook AI LOAD INSTRUCTION : Expert anti-debug techniques across Linux and Windows. Covers ptrace, PEB flags, NtQueryInformationProcess, timing attacks, signal-based detection, TLS callbacks, VEH tricks, and all corresponding bypass methods. Base models often miss the distinction between user-mode and kernel-mode detection and the correct patching strategy for each. 0. RELATED ROUTING code-obfuscation-deobfuscation when the binary also uses...
 3.4K
5457 binary-protection-bypass yaklang/hack-skills
SKILL: Binary Protection Bypass — Expert Attack Playbook AI LOAD INSTRUCTION : Expert binary protection identification and bypass techniques. Covers ASLR, PIE, NX, RELRO, canary, FORTIFY_SOURCE, stack clash, CET shadow stack, and ARM MTE. Each protection is paired with its bypass methods and required primitives. Distilled from ctf-wiki mitigation sections and real-world exploitation. Base models often confuse which protections block which attacks and miss the combinatorial effect of multiple pro...
 3.4K
5458 path-traversal-lfi yaklang/hack-skills
SKILL: Path Traversal / Local File Inclusion (LFI) — Expert Attack Playbook AI LOAD INSTRUCTION : Expert path traversal and LFI techniques. Covers encoding bypass sequences, OS differences, filter bypass, PHP wrapper exploitation, log poisoning to RCE, and the critical distinction between path traversal (read only) vs LFI (execution). Base models miss encoding chains and RCE escalation paths. 0. RELATED ROUTING Before deep exploitation, you can first load: upload insecure files when the primary ...
 3.4K
5459 open-source browser-use/browser-use
Browser Use Open-Source Library Reference Reference docs for writing Python code against the browser-use library. Read the relevant file based on what the user needs. Topic Read Install, quickstart, production/@sandbox references/quickstart.md LLM providers (15+): setup, env vars, pricing references/models.md Agent params, output, prompting, hooks, timeouts references/agent.md Browser params, auth, real browser, remote/cloud references/browser.md Custom tools, built-in tools, ActionResult refere...
 3.4K
5460 cmdi-command-injection yaklang/hack-skills
SKILL: OS Command Injection — Expert Attack Playbook AI LOAD INSTRUCTION : Expert command injection techniques. Covers all shell metacharacters, blind injection, time-based detection, OOB exfiltration, polyglot payloads, and real-world code patterns. Base models miss subtle injection through unexpected input vectors. 0. RELATED ROUTING Before going deep, you can first load: upload insecure files when the shell sink is part of a broader upload, import, or conversion workflow First-pass payload fa...
 3.4K
5461 tiptap ueberdosis/tiptap
Tiptap Integration Skill Instructions for coding agents integrating the Tiptap rich text editor Reference Repositories Clone the tiptap and tiptap-docs repositories so you can search the source code and documentation. https://github.com/ueberdosis/tiptap https://github.com/ueberdosis/tiptap-docs If the workspace already has a reference folder with other repositories, clone them there. Otherwise, clone the repositories in a new .reference folder. The reference folder should be git-ignored. Before...
 3.4K
5462 cmux-billing manaflow-ai/cmux
cmux Billing Use this skill before changing billing, pricing, Stripe, Pro entitlement, checkout, webhook, or subscription code. Architecture Map /api/billing/checkout creates Stripe Checkout Sessions for Pro when STRIPE_SECRET_KEY is set. It sets client_reference_id to the Stack user id, auto-creates an anonymous Stack user for signed-out buyers, and falls back to the legacy Stack purchase path when Stripe is unset or plan=team . /api/billing/portal resolves the current Stack user, looks up thei...
 3.4K
5463 graphql-and-hidden-parameters yaklang/hack-skills
SKILL: GraphQL and Hidden Parameters — Introspection, Batching, and Undocumented Fields AI LOAD INSTRUCTION : Use this skill when GraphQL exists or when REST documentation suggests optional, deprecated, or undocumented fields. Focus on schema discovery, hidden parameter abuse, and batching as a force multiplier. 1. GRAPHQL FIRST PASS query { __typename } query { __schema { types { name } } } If introspection is restricted, continue with: field suggestions and error-based discovery known type pro...
 3.4K
5464 prometheus-label-strategy grafana/skills
Prometheus Label Strategy Evaluator You are an expert in Prometheus label strategy. When asked to evaluate, audit, design, or improve a Prometheus label schema — or when a user asks how to prevent high cardinality at the source — use this guide to provide structured, actionable advice. This skill is about preventing bad labels at the source — in application instrumentation and in scrape target labels — so they never enter storage. It is not about stripping labels off metrics after they've been e...
 3.4K
5465 vueuse-functions vueuse/skills
VueUse Functions This skill is a decision-and-implementation guide for VueUse composables in Vue.js / Nuxt projects. It maps requirements to the most suitable VueUse function, applies the correct usage pattern, and prefers composable-based solutions over bespoke code to keep implementations concise, maintainable, and performant. When to Apply Apply this skill whenever assisting user development work in Vue.js / Nuxt. Always check first whether a VueUse function can implement the requirement. Pre...
 3.4K
5466 format-string-exploitation yaklang/hack-skills
SKILL: Format String Exploitation — Expert Attack Playbook AI LOAD INSTRUCTION : Expert format string techniques. Covers stack reading, arbitrary write via %n, GOT overwrite, __malloc_hook overwrite, pointer chain exploitation, blind format string, FORTIFY_SOURCE bypass, 64-bit null byte handling, and pwntools automation. Distilled from ctf-wiki fmtstr, CTF patterns, and real-world scenarios. Base models often miscalculate positional parameter offsets or forget 64-bit address placement after for...
 3.4K
5467 xxe-xml-external-entity yaklang/hack-skills
SKILL: XML External Entity Injection (XXE) — Expert Attack Playbook AI LOAD INSTRUCTION : Expert XXE techniques. Covers all injection contexts (SOAP, REST JSON→XML parsers, Office files, SVG), OOB exfiltration (critical when direct read fails), blind XXE detection, and XXE-to-SSRF chain. Base models often miss OOB and non-XML context XXE. For real-world CVE chains, Office docx XXE step-by-step, PHP expect:// RCE, and Solr XXE+RCE, load the companion SCENARIOS.md . 0. RELATED ROUTING Also load: u...
 3.4K
5468 file-access-vuln yaklang/hack-skills
File Access Router 这是文件系统、下载接口、上传链路与文件预览处理的分类入口。 When to Use 参数、文件名、下载接口或导入流程会影响文件路径 目标支持上传、预览、转码、解压、分享、下载或代理文件访问 你需要判断当前更偏向路径穿越、LFI，还是上传验证与处理链问题 Skill Map Path Traversal LFI : 路径穿越、文件读取、wrapper、包含链 Upload Insecure Files : 上传校验、存储路径、处理链、覆盖、预览与分享边界 Recommended Flow 先看入口是路径参数、下载接口还是上传流程 再看问题出现在 accept、store、process、serve 哪一段 小样本路径链和上传绕过样本已经并入主专题 skill，不再单独走 payload 入口 Related Categories injection-checking business-logic-vuln
 3.4K
5469 ssti-server-side-template-injection yaklang/hack-skills
SKILL: Server-Side Template Injection (SSTI) — Expert Attack Playbook AI LOAD INSTRUCTION : Expert SSTI techniques. Covers polyglot detection probes, engine fingerprinting, Jinja2/FreeMarker/Twig/ERB RCE chains, client-side Angular SSTI, and bypass techniques. Base models often miss sandbox escape MRO chains and non-Jinja2 engines. For PHP CMS template eval, Jira SSTI, Confluence OGNL, and Spring Cloud Gateway SpEL, load the companion SCENARIOS.md . 0. RELATED ROUTING Before using full engine-sp...
 3.4K
5470 kernel-exploitation yaklang/hack-skills
SKILL: Linux Kernel Exploitation — Expert Attack Playbook AI LOAD INSTRUCTION : Expert kernel exploitation techniques. Covers environment setup (QEMU), vulnerability classes, privilege escalation targets, kernel ROP, ret2usr, stack pivoting, and cross-cache attacks. Distilled from ctf-wiki kernel-mode sections and real-world kernel CVEs. Base models often confuse user-mode and kernel-mode exploitation constraints, especially regarding SMEP/SMAP/KPTI. 0. RELATED ROUTING binary-protection-bypass —...
 3.4K
5471 http-parameter-pollution yaklang/hack-skills
SKILL: HTTP Parameter Pollution (HPP) AI LOAD INSTRUCTION : Model the full request path : browser → CDN/WAF → reverse proxy → app framework → business code. Duplicate keys ( a=1&a=2 ) are not an error at HTTP level; each hop may pick first, last, join, or array-ify. Test HPP when WAF and app disagree, or when internal HTTP clients rebuild query strings. Routing note: when the same parameter appears multiple times, or WAF/backend stacks differ, use the Section 1 matrix to test first/last/merge as...
 3.4K
5472 your-skill-name grafana/skills
Your Skill Title Overview Brief introduction to what this skill covers. Focus on Grafana-specific knowledge — don't explain general programming concepts the AI already knows well. Key Concepts Document the important concepts, patterns, or syntax. Code examples are more effective than prose. Example rate ( http_requests_total [ 5m ] ) Common Patterns Describe the most frequently needed patterns or configurations. Show more
 3.4K
5473 typescript-best-practices alleneubank/claude-code
TypeScript best practices Apply the type-system-discipline principle skill first; this skill grounds it in TypeScript syntax. Show more Installs 3.4K Repository cursor/plugins GitHub Stars 6.9K First Seen May 24, 2026 Security Audits Gen Agent Trust Hub Pass Socket Pass Snyk Pass
 3.4K
5474 ce-debug everyinc/compound-engineering-plugin
Debug and Fix Find root causes, then fix them. This skill investigates bugs systematically — tracing the full causal chain before proposing a fix — and optionally implements the fix with test-first discipline. <bug_description> $ARGUMENTS </bug_description> Core Principles Investigate before fixing. Do not propose a fix until you can explain the full causal chain from trigger to symptom with no gaps. "Somehow X leads to Y" is a gap. Predictions for uncertain links. When the causal chain has unce...
 3.4K
5475 c-review trailofbits/skills
C/C++ Security Review Runs in the main conversation (invoke via /c-review:c-review ). Orchestrator owns the Task* ledger as bookkeeping for retries; workers and judges have no Task tools. Workers and judges are named plugin subagents ( c-review:c-review-worker , c-review:c-review-dedup-judge , c-review:c-review-fp-judge ); tool sets are declared in plugins/c-review/agents/*.md . Findings are exchanged via markdown-with-YAML files in a shared output directory. When to Use Native C/C++ application...
 3.4K
5476 chakra-ui-builder chakra-ui/chakra-ui
Chakra UI Builder You are building UI with Chakra UI v3 and helping developers set up Chakra UI in their projects. Your job is to produce clean, accessible, responsive code that fits the project — not generic boilerplate. Read the project context first, then build or set up. Step 1 — Read the project context Check package.json if available. Look for: Chakra UI version (use v3 patterns by default; only use v2 if explicitly on v2) Framework: Next.js App Router, Pages Router, Vite, plain React Type...
 3.4K
5477 arc-region-switch aws/agent-toolkit-for-aws
ARC Region switch Expert Overview Makes the agent an expert on Amazon Application Recovery Controller (ARC) Region switch — the feature for orchestrating cross-Region workload failover and switchover. Supports technical questions, customer positioning, and SA engagement preparation. Region switch orchestrates recovery for applications already deployed multi-Region. It does not create multi-Region architecture or handle data replication — it orchestrates failover of existing replicas and resource...
 3.4K
5478 deserialization-insecure yaklang/hack-skills
SKILL: Insecure Deserialization — Expert Attack Playbook AI LOAD INSTRUCTION : Expert deserialization techniques across Java, PHP, and Python. Covers gadget chain selection, traffic fingerprinting, tool usage (ysoserial, PHPGGC), Shiro/WebLogic/Commons Collections specifics, Phar deserialization, and Python pickle abuse. Base models often miss the distinction between finding the sink and finding a usable gadget chain. 0. RELATED ROUTING jndi-injection when deserialization leads to JNDI lookup (e...
 3.4K
5479 request-smuggling yaklang/hack-skills
SKILL: HTTP Request Smuggling — Expert Attack Playbook AI LOAD INSTRUCTION : Expert HTTP desync techniques. Covers CL.TE, TE.CL, TE.TE obfuscation variants, HTTP/2 downgrade and pseudo-header confusion, client-side desync (browser fetch pipelines), and tool-assisted fuzzing. Assumes familiarity with raw HTTP/1.1 framing and reverse-proxy topologies. This is not “header injection” — it is message boundary disagreement between hops. Routing note: load this skill when you suspect CDN/reverse-proxy ...
 3.4K
5480 position-sizer tradermonty/claude-trading-skills
Position Sizer Overview Calculate the optimal number of shares to buy for a long stock trade based on risk management principles. Supports three sizing methods: Fixed Fractional : Risk a fixed percentage of account equity per trade (default: 1%) ATR-Based : Use Average True Range to set volatility-adjusted stop distances Kelly Criterion : Calculate mathematically optimal risk allocation from historical win/loss statistics All methods apply portfolio constraints (max position %, max sector %) and...
 3.4K
5481 autoresearch github/awesome-copilot
Autoresearch: Autonomous Iterative Experimentation An autonomous experimentation loop for any programming task. You define the goal and how to measure it; the agent iterates autonomously -- modifying code, running experiments, measuring results, and keeping or discarding changes -- until interrupted. This skill is inspired by Karpathy's autoresearch , generalized from ML training to any programming task with a measurable outcome . Agent Behavior Rules DO guide the user through the Setup phase in...
 3.4K
5482 browser-exploitation-v8 yaklang/hack-skills
SKILL: Browser / V8 Exploitation — Expert Attack Playbook AI LOAD INSTRUCTION : Expert V8/Chrome exploitation techniques. Covers V8 compilation pipeline, JIT type confusion, addrof/fakeobj primitives, ArrayBuffer corruption, WASM RWX pages, V8 sandbox (pointer compression), and Chrome sandbox escape overview. Distilled from ctf-wiki browser sections, Project Zero research, and CTF competition patterns. Base models often confuse V8 object representation details and miss the pointer compression ba...
 3.4K
5483 race-condition yaklang/hack-skills
SKILL: Race Conditions — Testing & Exploitation Playbook AI LOAD INSTRUCTION : Treat race conditions as authorization/state integrity issues: non-atomic read-then-write lets multiple requests observe stale state. Prioritize one-time or balance-like operations. Combine parallel transport (HTTP/1.1 last-byte sync, HTTP/2 single-packet, Turbo Intruder gates) with application evidence (duplicate success responses, inconsistent balances, duplicate ledger rows). Authorized testing only. Routing note: ...
 3.4K
5484 csp-bypass-advanced yaklang/hack-skills
SKILL: CSP Bypass — Advanced Techniques AI LOAD INSTRUCTION : Covers per-directive bypass techniques, nonce/hash abuse, trusted CDN exploitation, data exfiltration despite CSP, and framework-specific bypasses. Base models often suggest unsafe-inline bypass without checking if the CSP actually uses it, or miss the critical base-uri and object-src gaps. 0. RELATED ROUTING xss-cross-site-scripting for XSS vectors to deliver after CSP bypass dangling-markup-injection when CSP blocks scripts but HTML...
 3.4K
5485 animate delphi-ai/animate-skill
Building Animations Initial Response When this skill is first invoked without a specific question, respond only with: I'm ready to build animations that feel right, my knowledge comes from Emil Kowalski's animation philosophy. Do not provide any other information until the user asks a question. A construction skill. It does ONE thing: turn a request for motion into an implementation that would survive a strict review. It does not audit a codebase (that's improve-animations ), critique a diff (th...
 3.4K
5486 understand-chat egonex-ai/understand-anything
/understand-chat Answer questions about this codebase using the knowledge graph in the project's data directory ( .ua/knowledge-graph.json , or the legacy .understand-anything/knowledge-graph.json when that directory is present). Graph Structure Reference The knowledge graph JSON has this structure: project — {name, description, languages, frameworks, analyzedAt, gitCommitHash} nodes[] — each has {id, type, name, filePath?, summary, tags[], complexity, languageNotes?} Code node types: file, func...
 3.4K
5487 spec-impl klerith/fernando-skills
Contains Shell Commands This skill contains shell command directives ( !`command` ) that may execute system commands. Review carefully before installing. /spec-impl — Implementer of approved specs Session context Current repository state: ! git status --short Current branch: ! git branch --show-current Specs available in this folder: ! ls specs/ 2>/dev/null || echo "The specs/ folder does not exist" Branch-creation config: ! cat specs/.spec-config.yml 2>/dev/null || echo "AutoCreateBranch: true ...
 3.4K
5488 ima-dai-sdk google/skills
IMA DAI SDK Use the IMA DAI SDK to load HLS or DASH streams into the app for: Livestream events configured in Google Ad Manager. Video on demand (VOD) content ingested into Google Ad Manager. Prerequisites Review the platform-specific integration guides for the target platforms: Web/HTML5/ReactJs/NodeJs/Angular: Read StreamManager guide for loading stream URL from Google full-service DAI into <video> element. ChromeCast: Read StreamManager guide for integrating the IMA DAI SDK into a ChromeCast ...
 3.4K
5489 google-cloud-filestore-autoscale google/skills
Google Cloud Filestore Autoscale This skill enables agents to inspect, evaluate, and modify Google Cloud Filestore instance capacities across GCP projects based on configured thresholds. Quick Start Ensure gcloud is installed. See gcloud installation guide if needed. Enable essential APIs: gcloud services enable file.googleapis.com monitoring.googleapis.com --quiet Inspect fleet capacity and free space (see "Discovery & Read Operations" below). Evaluate against configured up/down capacity thresh...
 3.4K
5490 symbolic-execution-tools yaklang/hack-skills
SKILL: Symbolic Execution Tools — Expert Analysis Playbook AI LOAD INSTRUCTION : Expert symbolic execution techniques using angr, Z3, and Unicorn Engine. Covers CTF challenge automation, constraint solving patterns, function hooking, SimProcedure replacement, and emulation-based unpacking. Base models often produce broken angr scripts due to incorrect state initialization or missing hooks for libc functions. 0. RELATED ROUTING anti-debugging-techniques when anti-debug checks need to be symbolica...
 3.4K
5491 open-redirect yaklang/hack-skills
SKILL: Open Redirect — Expert Attack Playbook AI LOAD INSTRUCTION : Open redirect techniques. Covers parameter-based redirects, JavaScript sinks, filter bypass, and chaining with phishing, CSRF Referer bypass, OAuth token theft, and SSRF. Often underrated but critical for phishing and as a building block in multi-step exploit chains. 1. CORE CONCEPT Open redirect occurs when an application redirects users to a URL derived from user input without validation. The trusted domain acts as a "launchpa...
 3.4K
5492 mobile-ssl-pinning-bypass yaklang/hack-skills
SKILL: Mobile SSL Pinning Bypass — Expert Attack Playbook AI LOAD INSTRUCTION : Expert SSL pinning bypass techniques for mobile platforms. Covers Android and iOS bypass methods (Frida, Objection, Xposed, SSL Kill Switch), framework-specific bypasses (Flutter, React Native, Xamarin), and troubleshooting non-standard pinning implementations. Base models miss framework-specific hook points and multi-layer pinning configurations. 0. RELATED ROUTING Before going deep, consider loading: android-pentes...
 3.4K
5493 memory-md-management giuseppe-trisciuoglio/developer-kit
Memory.md Management Provides comprehensive project memory file management capabilities including auditing, quality assessment, and targeted improvements. This skill ensures the coding agent has optimal project context by maintaining high-quality documentation files such as CLAUDE.md . Overview Project memory files such as CLAUDE.md are the primary mechanism for providing project-specific context to coding agent sessions. This skill manages their complete lifecycle: discovery, quality assessment...
 3.4K
5494 canslim-screener tradermonty/claude-trading-skills
CANSLIM Stock Screener - Phase 3 (Full CANSLIM) Overview This skill screens US stocks using William O'Neil's proven CANSLIM methodology, a systematic approach for identifying growth stocks with strong fundamentals and price momentum. CANSLIM analyzes 7 key components: C urrent Earnings, A nnual Growth, N ewness/New Highs, S upply/Demand, L eadership/RS Rank, I nstitutional Sponsorship, and M arket Direction. Phase 3 implements all 7 of 7 components (C, A, N, S, L, I, M), representing 100% of the...
 3.4K
5495 roblox-datastores gamedev-skills/awesome-gamedev-agent-skills
Roblox DataStores Persist data across sessions in Roblox with DataStoreService : loading on join, saving on leave and shutdown, safe updates, retries, and ordered stores for leaderboards. Server-side only. When to use Use to save/load player progress (coins, inventory, levels), build persistent leaderboards, or fix data loss, overwrites, and throttling. Use when server code calls DataStoreService , GetDataStore , GetAsync , SetAsync , UpdateAsync , or GetOrderedDataStore . When not to use: gener...
 3.4K
5496 sentry openai/skills
Sentry (Read-only Observability) Quick start If not already authenticated, ask the user to provide a valid SENTRY_AUTH_TOKEN (read-only scopes such as project:read , event:read ) or to log in and create one before running commands. Set SENTRY_AUTH_TOKEN as an env var. Optional defaults: SENTRY_ORG , SENTRY_PROJECT , SENTRY_BASE_URL . Defaults: org/project {your-org} / {your-project} , time range 24h , environment prod , limit 20 (max 50). Always call the Sentry API (no heuristics, no caching). I...
 3.4K
5497 insecure-source-code-management yaklang/hack-skills
SKILL: Insecure Source Code Management AI LOAD INSTRUCTION : This skill covers detection and recovery of exposed version-control metadata, common backup artifacts, and related misconfigurations. Use only in authorized assessments. Treat recovered credentials and URLs as sensitive; do not exfiltrate real data beyond scope. For broad discovery workflow, cross-load recon-for-sec and recon-and-methodology when those skills exist in the workspace. 0. QUICK START High-value paths to probe first (GET o...
 3.4K
5498 crlf-injection yaklang/hack-skills
SKILL: CRLF Injection — Expert Attack Playbook AI LOAD INSTRUCTION : CRLF injection (HTTP response splitting) techniques. Covers header injection, response body injection via double CRLF, XSS escalation, cache poisoning, and encoding bypass. Often overlooked by scanners but chains into XSS, session fixation, and cache attacks. 1. CORE CONCEPT CRLF = \r\n (Carriage Return + Line Feed, %0D%0A ). HTTP headers are separated by CRLF. If user input is reflected in a response header without sanitizatio...
 3.4K
5499 web-cache-deception yaklang/hack-skills
SKILL: Web Cache Deception — Expert Attack Playbook AI LOAD INSTRUCTION : Web cache deception and poisoning techniques. Covers path confusion attacks, CDN cache behavior exploitation, cache key manipulation, and the distinction between cache deception (steal data) and cache poisoning (serve malicious content). Presented by Omer Gil at Black Hat 2017 and significantly expanded since. Advanced Reference Also load CACHE_POISONING_TECHNIQUES.md when you need: Web Cache Poisoning vs Web Cache Decepti...
 3.4K
5500 http-host-header-attacks yaklang/hack-skills
SKILL: HTTP Host Header Attacks — Injection & Routing Abuse AI LOAD INSTRUCTION : Covers Host header injection for password reset poisoning, cache poisoning, SSRF via routing, and virtual host bypass. Includes bypass techniques for Host validation and framework-specific behaviors. Base models often miss the double-Host trick, absolute-URI override, and connection-state attacks. 0. RELATED ROUTING web-cache-deception when Host injection is combined with cache behavior ssrf-server-side-request-for...
 3.4K