hack-skills

Helping AI Agent become an awesome practical hacker!

npx skills add yaklang/hack-skills -g -y

40 skills

401 403 Bypass Techniques

401/403 bypass playbook.

yaklang/hack-skills2.6k

Active Directory Acl Abuse

Active Directory ACL abuse playbook.

yaklang/hack-skills2.6k

Active Directory Certificate Services

AD Certificate Services attack playbook.

yaklang/hack-skills2.6k

Active Directory Kerberos Attacks

Kerberos attack playbook for Active Directory.

yaklang/hack-skills2.6k

Android Pentesting Tricks

Android pentesting playbook.

yaklang/hack-skills2.6k

Anti Debugging Techniques

Anti-debugging detection and bypass playbook.

yaklang/hack-skills2.6k

API Auth And Jwt Abuse

API authentication and JWT abuse playbook.

yaklang/hack-skills2.6k

API Authorization And Bola

API authorization and BOLA testing playbook.

yaklang/hack-skills2.6k

API Recon And Docs

API reconnaissance and documentation review playbook.

yaklang/hack-skills2.6k

API Sec

Entry P1 category router for API security.

yaklang/hack-skills2.6k

Arbitrary Write To Rce

Arbitrary write to RCE playbook.

yaklang/hack-skills2.6k

Attack Surface Mapping

Draw a testable attack surface from one authorized target URL or one application.

yaklang/hack-skills2.6k

Auth Sec

Entry P1 category router for authentication and authorization.

yaklang/hack-skills2.6k

Authbypass Authentication Flaws

Authentication bypass testing playbook.

yaklang/hack-skills2.6k

Binary Protection Bypass

Binary protection bypass playbook.

yaklang/hack-skills2.6k

Browser Exploitation V8

Browser and V8 exploitation playbook.

yaklang/hack-skills2.6k

Business Logic Vuln

Entry P1 category router for business logic testing.

yaklang/hack-skills2.6k

Business Logic Vulnerabilities

Business logic vulnerability playbook.

yaklang/hack-skills2.6k

Classical Cipher Analysis

Classical cipher analysis playbook.

yaklang/hack-skills2.6k

Clickjacking

Clickjacking playbook.

yaklang/hack-skills2.6k

Cmdi Command Injection

Command injection playbook.

yaklang/hack-skills2.6k

Code Obfuscation Deobfuscation

Code obfuscation analysis and deobfuscation playbook.

yaklang/hack-skills2.6k

Container Escape Techniques

Container escape playbook.

yaklang/hack-skills2.6k

Cors Cross Origin Misconfiguration

CORS misconfiguration testing playbook.

yaklang/hack-skills2.6k

Crlf Injection

CRLF injection playbook.

yaklang/hack-skills2.6k

Csp Bypass Advanced

Advanced Content Security Policy bypass techniques.

yaklang/hack-skills2.6k

Csrf Cross Site Request Forgery

CSRF testing playbook.

yaklang/hack-skills2.6k

Csv Formula Injection

CSV/spreadsheet formula injection (DDE, Excel/LibreOffice, Google Sheets IMPORT*).

yaklang/hack-skills2.6k

Dangling Markup Injection

Dangling markup injection playbook.

yaklang/hack-skills2.6k

Defi Attack Patterns

DeFi attack pattern playbook.

yaklang/hack-skills2.6k

Dependency Confusion

Supply-chain testing via package-manager dependency confusion: when internal package...

yaklang/hack-skills2.6k

Deserialization Insecure

Insecure deserialization playbook.

yaklang/hack-skills2.6k

Dns Rebinding Attacks

DNS rebinding attack playbook.

yaklang/hack-skills2.6k

Email Header Injection

Email header injection and spoofing playbook.

yaklang/hack-skills2.6k

Expression Language Injection

Expression Language injection playbook.

yaklang/hack-skills2.6k

File Access Vuln

Entry P1 category router for file access and upload workflows.

yaklang/hack-skills2.6k

Format String Exploitation

Format string exploitation playbook.

yaklang/hack-skills2.6k

Ghost Bits Cast Attack

Java "Ghost Bits" / Cast Attack playbook (Black Hat Asia 2026).

yaklang/hack-skills2.6k

Graphql And Hidden Parameters

GraphQL and hidden parameter testing playbook.

yaklang/hack-skills2.6k

Hack

Entry P0 primary router and operating doctrine for HackSkills.

yaklang/hack-skills2.6k