Find the best CLAUDE.md, AGENTS.md and Claude skills

yaklangSkill

mobile-ssl-pinning-bypass

yaklang/hack-skills/skills/mobile-ssl-pinning-bypass/SKILL.md

Mobile SSL pinning bypass playbook. Use when intercepting HTTPS traffic from mobile applications that implement certificate pinning, public key pinning, or SPKI hash pinning on Android and iOS, including React Native, Flutter, and Xamarin frameworks.

yaklangSkill

network-protocol-attacks

yaklang/hack-skills/skills/network-protocol-attacks/SKILL.md

Network protocol attack playbook. Use when exploiting layer 2/3 protocols including ARP spoofing, LLMNR/NBT-NS/mDNS poisoning, WPAD abuse, DHCPv6 attacks, VLAN hopping, STP manipulation, DNS spoofing, IPv6 attacks, and IDS/IPS evasion.

yaklangSkill

nosql-injection

yaklang/hack-skills/skills/nosql-injection/SKILL.md

NoSQL injection playbook. Use when MongoDB-style operators, JSON query objects, flexible search filters, or backend query DSLs may allow data or logic abuse.

yaklangSkill

ntlm-relay-coercion

yaklang/hack-skills/skills/ntlm-relay-coercion/SKILL.md

NTLM relay and authentication coercion playbook. Use when capturing and relaying NTLM authentication to escalate privileges via SMB, LDAP, HTTP, or MSSQL relay targets, combined with PetitPotam, PrinterBug, and other coercion methods.

yaklangSkill

oauth-oidc-misconfiguration

yaklang/hack-skills/skills/oauth-oidc-misconfiguration/SKILL.md

OAuth and OIDC misconfiguration testing playbook. Use when reviewing redirect URI handling, state and nonce validation, PKCE, token audience, callback binding, and identity-provider trust flaws.

yaklangSkill

open-redirect

yaklang/hack-skills/skills/open-redirect/SKILL.md

Open redirect playbook. Use when URL parameters, form actions, or JavaScript sinks control navigation targets and may redirect users to attacker-controlled destinations.

Often used withcsrf·ssti·file-upload

yaklangSkill

prototype-pollution-advanced

yaklang/hack-skills/skills/prototype-pollution-advanced/SKILL.md

Advanced prototype pollution playbook — server-side RCE, client-side gadgets, filter bypasses, and detection techniques. Companion to ../prototype-pollution/ for basics. Use when you've confirmed pollution and need to escalate to code execution or find framework-specific gadgets.

yaklangSkill

race-condition

yaklang/hack-skills/skills/race-condition/SKILL.md

Race condition and TOCTOU testing for web apps. Use when testing one-time operations, concurrent HTTP abuse, rate-limit bypass, Turbo Intruder gates, HTTP/2 single-packet attacks, and CWE-362-style synchronization gaps.

yaklangSkill

recon-for-sec

yaklang/hack-skills/skills/recon-for-sec/SKILL.md

Entry P1 category router for reconnaissance and methodology. Use when mapping scope, drawing an attack surface from one application, discovering assets, fingerprinting technology, building endpoint inventory, and choosing the first high-value security testing path.

yaklangSkill

request-smuggling

yaklang/hack-skills/skills/request-smuggling/SKILL.md

HTTP request smuggling and desynchronization testing. Use when front proxies, CDNs, or load balancers disagree with the origin on message framing (Content-Length vs Transfer-Encoding), on HTTP/2→HTTP/1 translation, or when exploring client-side desync via browser fetch pipelines.

yaklangSkill

reverse-shell-techniques

yaklang/hack-skills/skills/reverse-shell-techniques/SKILL.md

Reverse shell techniques playbook. Use when establishing remote shells including language one-liners, encrypted shells (OpenSSL/socat/ncat), web shells, PTY upgrades, file transfer methods, PowerShell shells, and Windows payload generation.

yaklangSkill

rsa-attack-techniques

yaklang/hack-skills/skills/rsa-attack-techniques/SKILL.md

RSA attack playbook for CTF and real-world cryptanalysis. Use when given RSA parameters (n, e, c) and need to recover plaintext by exploiting weak keys, small exponents, shared factors, or padding oracles.

yaklangSkill

saml-sso-assertion-attacks

yaklang/hack-skills/skills/saml-sso-assertion-attacks/SKILL.md

SAML SSO assertion attack playbook. Use when testing signature validation, assertion wrapping, audience restrictions, ACS handling, XML trust boundaries, and enterprise SSO flaws.

yaklangSkill

sandbox-escape-techniques

yaklang/hack-skills/skills/sandbox-escape-techniques/SKILL.md

Sandbox escape playbook. Use when breaking out of Python sandbox, Lua sandbox, seccomp filter, chroot jail, container/Docker, browser sandbox, or namespace isolation to achieve unrestricted code execution or file access.

yaklangSkill

smart-contract-vulnerabilities

yaklang/hack-skills/skills/smart-contract-vulnerabilities/SKILL.md

Smart contract vulnerability playbook. Use when auditing Solidity/EVM contracts for reentrancy, integer overflow, access control, delegatecall, flash loan, signature replay, and MEV-related attack patterns.

yaklangSkill

sqli-sql-injection

yaklang/hack-skills/skills/sqli-sql-injection/SKILL.md

SQL injection playbook. Use when input reaches SQL queries, authentication logic, sorting, filtering, reporting, or DB-specific blind and out-of-band execution paths.

yaklangSkill

ssrf-server-side-request-forgery

yaklang/hack-skills/skills/ssrf-server-side-request-forgery/SKILL.md

SSRF playbook. Use when the server fetches URLs, resolves hostnames, imports remote content, or can be driven toward internal networks, cloud metadata, or secondary protocols.

yaklangSkill

stack-overflow-and-rop

yaklang/hack-skills/skills/stack-overflow-and-rop/SKILL.md

Stack overflow and ROP playbook. Use when exploiting buffer overflows to hijack control flow via return address overwrite, ROP chains, ret2libc, ret2csu, ret2dlresolve, or SROP on Linux userland binaries.

yaklangSkill

steganography-techniques

yaklang/hack-skills/skills/steganography-techniques/SKILL.md

Steganography detection and extraction playbook. Use when analyzing images (LSB, PNG chunks, JPEG DCT, EXIF), audio (spectrogram, DTMF), files (polyglots, appended data, ADS), and text (whitespace, zero-width, homoglyphs) for hidden data.

yaklangSkill

subdomain-takeover

yaklang/hack-skills/skills/subdomain-takeover/SKILL.md

Subdomain takeover detection and exploitation playbook. Use when targets have dangling CNAME/NS/MX records pointing to deprovisioned cloud resources, expired third-party services, or unclaimed SaaS tenants that an attacker can register to serve content under the victim's domain.