Cybermes

In the author's own words, from each skill's SKILL.md — showing the first 30 of 409 files.

• 401-403-bypass-techniques

  401/403 bypass playbook. Use when encountering access-denied responses on admin panels, API endpoints, or restricted paths. Covers path manipulation, HTTP method tampering, header injection, protocol downgrade, and automated bypass tools.

  skills/401-403-bypass-techniques/SKILL.md on GitHub (opens in a new tab)

• active-directory-acl-abuse

  Active Directory ACL abuse playbook. Use when exploiting misconfigured AD permissions including GenericAll, WriteDACL, DCSync rights, shadow credentials, LAPS reading, GPO abuse, and BloodHound-guided attack paths.

  skills/active-directory-acl-abuse/SKILL.md on GitHub (opens in a new tab)

• active-directory-certificate-services

  AD Certificate Services attack playbook. Use when targeting misconfigured AD CS for privilege escalation via ESC1-ESC13 template abuse, NTLM relay to enrollment, CA officer abuse, and certificate-based persistence.

  skills/active-directory-certificate-services/SKILL.md on GitHub (opens in a new tab)

• active-directory-kerberos-attacks

  Kerberos attack playbook for Active Directory. Use when targeting AD authentication via AS-REP roasting, Kerberoasting, golden/silver/diamond tickets, delegation abuse, or pass-the-ticket attacks.

  skills/active-directory-kerberos-attacks/SKILL.md on GitHub (opens in a new tab)

• ai-ml-security

  AI/ML security playbook. Use when assessing model supply chain attacks (pickle RCE, poisoned weights), adversarial examples, model poisoning, model stealing, data privacy attacks (membership inference, model inversion), and autonomous agent security risks.

  skills/ai-ml-security/SKILL.md on GitHub (opens in a new tab)

• android-pentesting-tricks

  Android pentesting playbook. Use when testing Android applications for SSL pinning bypass, exported component abuse, WebView vulnerabilities, intent redirection, root detection bypass, tapjacking, and backup extraction during authorized mobile security assessments.

  skills/android-pentesting-tricks/SKILL.md on GitHub (opens in a new tab)

• anti-debugging-techniques

  Anti-debugging detection and bypass playbook. Use when reversing protected binaries that detect debuggers via ptrace, PEB flags, timing checks, or signal/exception handlers on Linux and Windows.

  skills/anti-debugging-techniques/SKILL.md on GitHub (opens in a new tab)

• api-auth-and-jwt-abuse

  API authentication and JWT abuse playbook. Use when testing bearer tokens, API keys, claim trust, header spoofing, rate limits, and API auth boundary weaknesses.

  skills/api-auth-and-jwt-abuse/SKILL.md on GitHub (opens in a new tab)

• api-authorization-and-bola

  API authorization and BOLA testing playbook. Use when APIs expose object identifiers, nested resources, hidden writable fields, or weak function-level authorization.

  skills/api-authorization-and-bola/SKILL.md on GitHub (opens in a new tab)

• api-recon-and-docs

  API reconnaissance and documentation review playbook. Use when discovering endpoints, schemas, versions, OpenAPI specs, hidden docs, and surface area for API testing.

  skills/api-recon-and-docs/SKILL.md on GitHub (opens in a new tab)

• api-sec

  Entry P1 category router for API security. Use when choosing between API recon, authorization, token abuse, and hidden-parameter workflows before any deeper API topic skill.

  skills/api-sec/SKILL.md on GitHub (opens in a new tab)

• api-testing

  Evaluates REST, GraphQL, and JSON-RPC APIs for authorization issues (BOLA/IDOR), schema exposure, and business logic flaws.

  skills/api-testing/SKILL.md on GitHub (opens in a new tab)

• apk-redteam-pipeline

  End-to-end Android APK red-team pipeline — automated APK acquisition (Play Store + apkpure + apkmirror fallback), jadx decompilation, secret/URL/JWT/Firebase grep, pinned-cert extraction, exported-component enumeration, Frida runtime instrumentation templates, intent-injection probes. Built from an authorized external red-team engagement where 7 APKs were pulled manually, 4 download attempts trun…

  skills/apk-redteam-pipeline/SKILL.md on GitHub (opens in a new tab)

• arbitrary-write-to-rce

  Arbitrary write to RCE playbook. Use when you have an arbitrary write primitive (from heap exploitation, format string, or OOB write) and need to convert it into code execution by targeting GOT, hooks, _IO_FILE vtable, exit_funcs, TLS_dtor_list, modprobe_path, .fini_array, or C++ vtables.

  skills/arbitrary-write-to-rce/SKILL.md on GitHub (opens in a new tab)

• auth-sec

  Entry P1 category router for authentication and authorization. Use when testing login flows, sessions, object authorization, JWT, OAuth, CORS, CSRF, and enterprise SSO weaknesses before any deeper auth topic skill.

  skills/auth-sec/SKILL.md on GitHub (opens in a new tab)

• authbypass-authentication-flaws

  Authentication bypass testing playbook. Use when assessing login flows, password reset logic, account recovery, MFA bypass, token predictability, brute-force resistance, and session boundary flaws.

  skills/authbypass-authentication-flaws/SKILL.md on GitHub (opens in a new tab)

• authentication

  Assesses authentication flows, OAuth2 / OIDC implementations, session lifecycle management, and JWT security.

  skills/authentication/SKILL.md on GitHub (opens in a new tab)

• autonomous-godmode-hunter

  Autonomous end-to-end security research and full-surface bug hunting engine. Executes non-stop reconnaissance, attack-surface discovery, parameter mining, multi-stage vulnerability verification, minimal-impact PoC generation, and structured reporting on authorized targets.

  skills/autonomous-godmode-hunter/SKILL.md on GitHub (opens in a new tab)

• bb-local-toolkit

  Local-tooling companion to the bug-bounty orchestrator — carries the SAME complete bug-bounty workflow, but reach for THIS variant when you also need to resolve where tools, wordlists, and clones are installed on the local machine (jhaddix, SecLists, trufflehog, ffuf, dalfox, ghauri); for pure orchestration/routing use the bug-bounty skill. Workflow it covers — recon (subdomain enumeration, asset…

  skills/bb-local-toolkit/SKILL.md on GitHub (opens in a new tab)

• bb-methodology

  Use at the START of any bug bounty hunting session, when switching targets, or when feeling lost about what to do next. Master orchestrator that combines the 5-phase non-linear hunting workflow with the critical thinking framework (developer psychology, anomaly detection, What-If experiments). Routes to all other skills based on current hunting phase. Also use when asking "what should I do next"…

  skills/bb-methodology/SKILL.md on GitHub (opens in a new tab)

• binary-protection-bypass

  Binary protection bypass playbook. Use when identifying and bypassing ASLR, PIE, NX/DEP, stack canary, RELRO, FORTIFY_SOURCE, CET, and MTE protections in ELF binaries to enable exploitation.

  skills/binary-protection-bypass/SKILL.md on GitHub (opens in a new tab)

• browser-exploitation-v8

  Browser and V8 exploitation playbook. Use when exploiting JavaScript engine vulnerabilities including JIT type confusion, incorrect bounds elimination, and V8 sandbox bypass to achieve renderer RCE and sandbox escape in Chrome/Chromium.

  skills/browser-exploitation-v8/SKILL.md on GitHub (opens in a new tab)

• bug-bounty-target-prioritization

  Autonomously prioritize and select high-value targets from reconnaissance results for deep vulnerability analysis in bug bounty engagements.

  skills/bug-bounty-target-prioritization/SKILL.md on GitHub (opens in a new tab)

• bug-bounty

  Complete bug bounty workflow — recon (subdomain enumeration, asset discovery, fingerprinting, HackerOne scope, source code audit), pre-hunt learning (disclosed reports, tech stack research, mind maps, threat modeling), vulnerability hunting (IDOR, SSRF, XSS, auth bypass, CSRF, race conditions, SQLi, XXE, file upload, business logic, GraphQL, HTTP smuggling, cache poisoning, OAuth, timing side-cha…

  skills/bug-bounty/SKILL.md on GitHub (opens in a new tab)

• bugcrowd-reporting

  Bugcrowd-specific reporting tactics complementing report-writing: VRT category search-and-fallback strategy when no exact match exists, manual severity override when VRT defaults underrate impact, severity-request paragraph as first body section, OOS-clause rebuttal templates (rate limiting on auth-flow endpoints, debug-info framing, user-enumeration with sensitive PII, theoretical-issue counter)…

  skills/bugcrowd-reporting/SKILL.md on GitHub (opens in a new tab)

• business-logic-and-idor

  Evaluates multi-tenant authorization barriers, Insecure Direct Object References (IDOR), parameter tampering, and privilege escalation logic.

  skills/business-logic-and-idor/SKILL.md on GitHub (opens in a new tab)

• business-logic-vuln

  Entry P1 category router for business logic testing. Use when workflow abuse, race conditions, pricing flaws, or multi-step state attacks matter more than parser-level input injection.

  skills/business-logic-vuln/SKILL.md on GitHub (opens in a new tab)

• business-logic-vulnerabilities

  Business logic vulnerability playbook. Use when reasoning about workflows, race conditions, price manipulation, coupon abuse, state machines, and multi-step authorization gaps.

  skills/business-logic-vulnerabilities/SKILL.md on GitHub (opens in a new tab)

• ci-security-scanning-with-strix

  Add security scanning to CI/CD with Strix — GitHub Actions, GitLab CI, or any pipeline — so every pull request gets a diff-scoped AI pentest that blocks vulnerable code before it merges, with results as PR comments and SARIF uploaded to code scanning. Covers both the self-hosted open-source CLI (runs in your runner) and the managed app.strix.ai platform (GitHub/GitLab app or API, no runner infra)…

  skills/ci-security-scanning-with-strix/SKILL.md on GitHub (opens in a new tab)

• classical-cipher-analysis

  Classical cipher analysis playbook. Use when encountering substitution ciphers, Vigenere, transposition, XOR, or encoded text in CTF challenges that requires frequency analysis, Kasiski examination, or known-plaintext cryptanalysis.

  skills/classical-cipher-analysis/SKILL.md on GitHub (opens in a new tab)

No skill matches that filter.

Similar skills

• Anthropic-Cybersecurity-Skillsby mukul975 817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF &… 34.5k stars · 30 skills
• career-opsby career-ops-hq Open-source AI job search agent and job finder: scan job boards, score each job 1-5 against your CV before you apply, tailor an ATS-friendl… 75.1k stars · 6 skills
• cherry-studioby CherryHQ AI productivity studio with smart chat, autonomous agents, and 300+ assistants. Unified access to frontier LLMs 52.7k stars · 30 skills
• CowAgentby zhayujie Open-source personal AI assistant & Agent Harness. Plans tasks, runs tools and skills, self-evolves with memory and knowledge. Multi-agent,… 47.4k stars · 3 skills
• invisible_dotsby feder-cr Open-source, self-hosted alternative to OpenAI Dots, Grok Bot. Built to be undetectable by anti-bot systems. 32.1k stars · 1 skill
• cliby googleworkspace Google Workspace CLI — one command-line tool for Drive, Gmail, Calendar, Sheets, Docs, Chat, Admin, and more. Dynamically built from Google… 31.5k stars · 30 skills