159 tools found
Verifies that fix commits properly address security audit findings, resolve the root cause, and introduce no new bugs or regressions.
Methodology for HTML injection flaws - discovery, payloads, phishing/defacement PoC, filter bypass, remediation. Authorized testing only.
Assess object-level access controls using authorized test accounts, ownership evidence, affected-endpoint reports, and server-side remediation.
Laravel security audit skill using OWASP awareness to risk-classify vulnerabilities in validation, authorization, auth, and deployment config.
Authorized-use guide for Linux privilege escalation - kernel exploits, sudo/SUID/capabilities/cron abuse, and enumeration.
Mobile security coding expert for secure storage, WebView security, certificate pinning, and biometric authentication implementation.
Sets up HTTP, HTTPS, SNMP, and SMB services in an authorized pentest lab for hands-on enumeration and log-analysis practice.
Modern cloud networking expert: multi-cloud architecture, service mesh, zero-trust security, and performance optimization.
Reviews payment data flows and prepares engineering control evidence for a scoped PCI assessment, without claiming certification or automated audit.
Plans authorized penetration tests end-to-end: scoping, environment prep, tester selection, monitoring, and remediation.
Escalates privileges on compromised Linux/Windows/AD systems for authorized pentesting: sudo abuse, Kerberoasting, Golden Ticket.
Designs secure CI/CD secret retrieval, workload identity and coordinated rotation for Vault, cloud secret managers and GitHub Actions.
