One search for your own team's files and the public ecosystem. See how real projects write their agent instructions, and bring the good ideas home.
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
yaklangSkillyaklang/hack-skills/skills/request-smuggling/SKILL.md
HTTP request smuggling and desynchronization testing. Use when front proxies, CDNs, or load balancers disagree with the origin on message framing (Content-Length vs Transfer-Encoding), on HTTP/2→HTTP/1 translation, or when exploring client-side desync via browser fetch pipelines.
6 projects use a version of this
yaklangSkillyaklang/hack-skills/skills/reverse-shell-techniques/SKILL.md
Reverse shell techniques playbook. Use when establishing remote shells including language one-liners, encrypted shells (OpenSSL/socat/ncat), web shells, PTY upgrades, file transfer methods, PowerShell shells, and Windows payload generation.
1 project uses a version of this
yaklangSkillyaklang/hack-skills/skills/rsa-attack-techniques/SKILL.md
RSA attack playbook for CTF and real-world cryptanalysis. Use when given RSA parameters (n, e, c) and need to recover plaintext by exploiting weak keys, small exponents, shared factors, or padding oracles.
2 projects use a version of this
yaklangSkillyaklang/hack-skills/skills/saml-sso-assertion-attacks/SKILL.md
SAML SSO assertion attack playbook. Use when testing signature validation, assertion wrapping, audience restrictions, ACS handling, XML trust boundaries, and enterprise SSO flaws.
2 projects use a version of this
yaklangSkillyaklang/hack-skills/skills/sandbox-escape-techniques/SKILL.md
Sandbox escape playbook. Use when breaking out of Python sandbox, Lua sandbox, seccomp filter, chroot jail, container/Docker, browser sandbox, or namespace isolation to achieve unrestricted code execution or file access.
2 projects use a version of this
yaklangSkillyaklang/hack-skills/skills/smart-contract-vulnerabilities/SKILL.md
Smart contract vulnerability playbook. Use when auditing Solidity/EVM contracts for reentrancy, integer overflow, access control, delegatecall, flash loan, signature replay, and MEV-related attack patterns.
2 projects use a version of this
yaklangSkillyaklang/hack-skills/skills/sqli-sql-injection/SKILL.md
SQL injection playbook. Use when input reaches SQL queries, authentication logic, sorting, filtering, reporting, or DB-specific blind and out-of-band execution paths.
2 projects use a version of this
yaklangSkillyaklang/hack-skills/skills/ssrf-server-side-request-forgery/SKILL.md
SSRF playbook. Use when the server fetches URLs, resolves hostnames, imports remote content, or can be driven toward internal networks, cloud metadata, or secondary protocols.
2 projects use a version of this
yaklangReads credentialsSkillyaklang/hack-skills/skills/ssti-server-side-template-injection/SKILL.md
SSTI playbook. Use when template expressions, server-side rendering, preview features, or templating engines may evaluate attacker-controlled content.
2 projects use a version of this
yaklangSkillyaklang/hack-skills/skills/stack-overflow-and-rop/SKILL.md
Stack overflow and ROP playbook. Use when exploiting buffer overflows to hijack control flow via return address overwrite, ROP chains, ret2libc, ret2csu, ret2dlresolve, or SROP on Linux userland binaries.
2 projects use a version of this
yaklangSkillyaklang/hack-skills/skills/steganography-techniques/SKILL.md
Steganography detection and extraction playbook. Use when analyzing images (LSB, PNG chunks, JPEG DCT, EXIF), audio (spectrogram, DTMF), files (polyglots, appended data, ADS), and text (whitespace, zero-width, homoglyphs) for hidden data.
2 projects use a version of this
yaklangSkillyaklang/hack-skills/skills/subdomain-takeover/SKILL.md
Subdomain takeover detection and exploitation playbook. Use when targets have dangling CNAME/NS/MX records pointing to deprovisioned cloud resources, expired third-party services, or unclaimed SaaS tenants that an attacker can register to serve content under the victim's domain.
5 projects use a version of this
yaklangSkillyaklang/hack-skills/skills/symbolic-execution-tools/SKILL.md
Symbolic execution and constraint solving playbook. Use when solving CTF reversing challenges, recovering keys, bypassing checks, or automating binary analysis with angr, Z3, or Unicorn Engine.
4 projects use a version of this
yaklangSkillyaklang/hack-skills/skills/symmetric-cipher-attacks/SKILL.md
Symmetric cipher attack playbook. Use when exploiting block cipher mode weaknesses (CBC padding oracle, ECB cut-and-paste, bit flipping), stream cipher key reuse, or meet-in-the-middle attacks.
2 projects use a version of this
yaklangSkillyaklang/hack-skills/skills/traffic-analysis-pcap/SKILL.md
Traffic analysis and PCAP forensics playbook. Use when analyzing network captures including Wireshark filters, protocol analysis (HTTP/DNS/FTP/SMTP/USB/WiFi), data extraction, covert channel detection, PCAP repair, TLS decryption, and tshark command-line analysis.
2 projects use a version of this
yaklangReads credentialsSkillyaklang/hack-skills/skills/tunneling-and-pivoting/SKILL.md
Tunneling and pivoting playbook. Use when establishing network tunnels through compromised hosts including SSH tunneling, Chisel, Ligolo-ng, socat, DNS/ICMP/HTTP tunneling, ProxyChains, and multi-layer pivoting strategies.
2 projects use a version of this
yaklangSkillyaklang/hack-skills/skills/type-juggling/SKILL.md
PHP type juggling and weak comparison (`==`) bypass. Use when authentication, HMAC/signature checks, or token validation uses loose equality, numeric coercion, or hash comparisons without strict types — common in legacy PHP and CTF-style code paths.
3 projects use a version of this
yaklangSkillyaklang/hack-skills/skills/unauthorized-access-common-services/SKILL.md
Unauthorized access playbook for common exposed services. Use when Redis, Rsync, PHP-FPM, AJP/Ghostcat, Hadoop YARN, H2 Console, or similar management interfaces are exposed without authentication.
1 project uses a version of this
yaklangSkillyaklang/hack-skills/skills/upload-insecure-files/SKILL.md
Insecure file upload playbook. Use when testing upload validation, storage paths, processing pipelines, preview behavior, overwrite risks, and upload-to-RCE chains.
1 project uses a version of this
yaklangSkillyaklang/hack-skills/skills/vm-and-bytecode-reverse/SKILL.md
Custom VM and bytecode reverse engineering playbook. Use when CTF challenges or protected software implement custom virtual machines with proprietary bytecode, dispatcher loops, or maze-style challenges.
4 projects use a version of this
Plain text files in a repository that tell a coding agent how the project works: commands to run, conventions to follow and things to avoid. CLAUDE.md, AGENTS.md, cursor rules and skills are the common kinds.
CLAUDE.md is read by Claude Code. AGENTS.md is an open format that Codex, Cursor and other agents read. Many projects keep one and point the other at it.
A folder with a SKILL.md that describes one capability, such as filling PDFs or reviewing code. The agent loads it only when the task calls for it.
Your agents already can, over MCP, limited to the files you're allowed to read. Searching them from this page is coming.
