Skip to main content

abelrguezr/hacktricks-skills

SkillsMP hat 908 Skills aus abelrguezr/hacktricks-skills gesammelt. Öffne einen Skill, um Quelle und Details zu prüfen.

Letzte erfasste Quellaktivität
SkillsMP-Katalog aktualisiert
gesammelte Skills
908
GitHub-Stars
21
GitHub-Forks
8

Es werden 40 von 908 gesammelten Skills angezeigt.

Beruf
Informationssicherheitsanalysten
Beschreibung

AI-assisted fuzzing and vulnerability discovery. Use this skill whenever the user wants to generate fuzzing seeds, evolve grammars, analyze crashes, create proof-of-vulnerability exploits, or generate patches for discovered bugs. Trigger on mentions of…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

Set up and use Burp Suite's MCP Server extension to enable LLM-assisted passive vulnerability discovery. Use this skill whenever the user wants to integrate Burp with MCP-capable AI tools (Codex, Gemini, Ollama, Claude), configure the MCP proxy, troubleshoot…

Quellsprache: Englisch

Aktualisiert
Beruf
Datenwissenschaftler
Beschreibung

Help users understand and implement deep learning concepts including neural networks, CNNs, RNNs, LLMs, and diffusion models. Use this skill whenever the user asks about deep learning architectures, wants to build neural networks in PyTorch, needs help with…

Quellsprache: Englisch

Aktualisiert
Beruf
Hochschullehrer für Informatik
Beschreibung

Explain and teach Large Language Model fundamentals including pretraining, model architecture, PyTorch tensors, automatic differentiation, and backpropagation. Use this skill whenever the user asks about LLM concepts, neural network training, PyTorch…

Quellsprache: Englisch

Aktualisiert
Beruf
Datenwissenschaftler
Beschreibung

How to tokenize text for LLMs and NLP models. Use this skill whenever the user needs to convert text into token IDs, understand tokenization methods (BPE, WordPiece, Unigram), work with vocabularies, or implement tokenization for machine learning. Make sure…

Quellsprache: Englisch

Aktualisiert
Beruf
Datenwissenschaftler
Beschreibung

How to prepare and sample text data for training large language models. Use this skill whenever the user mentions data preparation, tokenization, sliding windows, sequence generation, training data, LLM datasets, or needs to create input/target pairs for…

Quellsprache: Englisch

Aktualisiert
Beruf
Softwareentwickler
Beschreibung

Create and work with token embeddings for LLMs. Use this skill whenever you need to understand token embeddings, create embedding layers in PyTorch, add positional embeddings (absolute, relative, or RoPE), or debug embedding-related issues in your language…

Quellsprache: Englisch

Aktualisiert
Beruf
Datenwissenschaftler
Beschreibung

How to implement and understand attention mechanisms in neural networks and LLMs. Use this skill whenever the user needs to build self-attention layers, causal attention, multi-head attention, or understand how attention weights are calculated. Trigger this…

Quellsprache: Englisch

Aktualisiert
Beruf
Softwareentwickler
Beschreibung

Build and understand LLM architecture from scratch. Use this skill whenever the user needs to create GPT models, implement transformer components (attention, feedforward, layer norm), calculate model parameters, or generate text with a trained model. Trigger…

Quellsprache: Englisch

Aktualisiert
Beruf
Datenwissenschaftler
Beschreibung

How to train LLMs from scratch using PyTorch, including model architecture setup, data preparation, training loops, loss monitoring, and model saving/loading. Use this skill whenever the user wants to train a language model from scratch, understand…

Quellsprache: Englisch

Aktualisiert
Beruf
Datenwissenschaftler
Beschreibung

How to implement LoRA (Low-Rank Adaptation) for efficient fine-tuning of large language models. Use this skill whenever the user wants to fine-tune an LLM, reduce training memory/compute requirements, implement parameter-efficient fine-tuning, or adapt a…

Quellsprache: Englisch

Aktualisiert
Beruf
Datenwissenschaftler
Beschreibung

How to fine-tune a pre-trained LLM (like GPT2) for text classification tasks. Use this skill whenever the user wants to adapt a language model for classification (spam detection, sentiment analysis, topic categorization, intent classification, or any…

Quellsprache: Englisch

Aktualisiert
Beruf
Datenwissenschaftler
Beschreibung

How to fine-tune a pre-trained LLM to follow instructions and respond to tasks like a chatbot. Use this skill whenever the user wants to train an LLM on instruction-response pairs, format datasets for instruction tuning, evaluate fine-tuned model responses,…

Quellsprache: Englisch

Aktualisiert
Beruf
Softwareentwickler
Beschreibung

Guide for building and training large language models from scratch. Use this skill whenever the user wants to understand LLM training concepts, implement tokenization, data sampling, embeddings, attention mechanisms, model architecture, pre-training, or…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

Security auditing and hardening for Model Context Protocol (MCP) servers. Use this skill whenever the user mentions MCP servers, Model Context Protocol, AI agent security, tool poisoning, prompt injection in MCP, Cursor IDE vulnerabilities, Flowise MCP, or…

Quellsprache: Englisch

Aktualisiert
Beruf
Datenwissenschaftler
Beschreibung

Prepare and evaluate machine learning data. Use this skill whenever the user needs to clean, transform, or split datasets for ML training, or evaluate model performance with metrics like accuracy, precision, recall, F1, ROC-AUC, MAE, or confusion matrices.…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

Security skill for understanding and testing RCE vulnerabilities in AI/ML model loading. Use this skill whenever the user mentions machine learning models, model deserialization, PyTorch, TensorFlow, Keras, ONNX, or any ML framework loading. Also trigger when…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

Security skill for understanding, detecting, and defending against prompt injection attacks on AI/LLM systems. Use this skill whenever the user asks about AI security, prompt injection vulnerabilities, LLM attack vectors, jailbreak techniques, or needs help…

Quellsprache: Englisch

Aktualisiert
Beruf
Datenwissenschaftler
Beschreibung

Implement and analyze reinforcement learning algorithms (Q-Learning, SARSA, PPO) and detect security vulnerabilities like backdoor attacks and reward poisoning. Use this skill whenever you need to build RL agents, understand RL algorithms, implement training…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

How to assess and document AI security risks using industry frameworks. Use this skill whenever the user mentions AI security, ML vulnerabilities, model risks, LLM security, adversarial attacks, data poisoning, prompt injection, or needs to evaluate AI system…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

Comprehensive guide for AI security professionals. Use this skill whenever the user asks about AI/ML security, adversarial attacks, prompt injection, model vulnerabilities, AI risk frameworks, LLM security, AI-assisted security testing, or anything related to…

Quellsprache: Englisch

Aktualisiert
Beruf
Datenwissenschaftler
Beschreibung

How to implement supervised machine learning algorithms for cybersecurity tasks like intrusion detection, malware classification, phishing detection, and spam filtering. Use this skill whenever the user mentions machine learning, ML models, classification,…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

Apply unsupervised machine learning algorithms to security data for anomaly detection, clustering, and dimensionality reduction. Use this skill whenever the user needs to analyze unlabeled security data, detect unknown threats, cluster network events, reduce…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

Binary exploitation skill for arbitrary write to code execution attacks. Use this skill whenever the user mentions arbitrary write vulnerabilities, write primitives, GOT overwrites, function pointer overwrites, or needs to convert a write primitive into code…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

How to exploit GOT/PLT vulnerabilities in binary exploitation challenges. Use this skill whenever the user mentions GOT overwrites, PLT hijacking, arbitrary write to GOT, libc GOT exploitation, free2system, strlen2system, or any binary exploitation task…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

Guide for exploiting __malloc_hook and __free_hook in binary exploitation challenges. Use this skill when working on CTF pwn challenges involving heap vulnerabilities, malloc/free hook overwrites, tcache poisoning, or Safe-Linking bypasses. Trigger when the…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

How to understand, test, and detect the macOS sips ICC profile out-of-bounds write vulnerability (CVE-2024-44236). Use this skill whenever the user mentions ICC profiles, sips vulnerability, CVE-2024-44236, macOS image processing exploits, heap corruption in…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

Guide for exploiting arbitrary write vulnerabilities through atexit handlers, link_map manipulation, and TLS dtor_list overwrites. Use this skill whenever the user mentions atexit, exit handlers, link_map, TLS destructors, PTR_MANGLE, __run_exit_handlers, or…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

Exploit arbitrary write vulnerabilities using .dtors and .fini_array sections to execute shellcode at program exit. Use this skill whenever the user mentions binary exploitation, arbitrary write vulnerabilities, .dtors, .fini_array, destructor sections, or…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

How to identify and exploit array indexing vulnerabilities in binary exploitation challenges. Use this skill whenever the user mentions array bounds, index manipulation, off-by-one errors, array overflows, heap corruption through arrays, or any CTF/binary…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

A comprehensive methodology for binary exploitation, covering stack overflows, ROP chains, shellcode injection, and bypassing protections like ASLR, PIE, NX, and canaries. Use this skill whenever the user mentions binary exploitation, CTF challenges, buffer…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

Analyze ELF binary files for reverse engineering, security research, and exploitation. Use this skill whenever the user needs to understand ELF structure, analyze program headers, section headers, symbols, relocations, GOT/PLT, or identify binary protections…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

Use this skill whenever working with binary exploitation, reverse engineering, or CTF challenges involving PwnTools. Trigger for: generating shellcode, analyzing binaries with checksec, creating cyclic patterns for buffer overflows, converting ELF to…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

A comprehensive guide to binary exploitation tools and techniques. Use this skill whenever the user needs help with buffer overflow exploitation, reverse engineering, debugging binaries, or working with tools like GDB, Metasploit, Ghidra, or analyzing…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

Guide for Chrome browser exploitation research and full-chain vulnerability analysis. Use this skill when researching Chrome security, analyzing browser vulnerabilities, developing proof-of-concepts for CVEs, or understanding Chrome's multi-layered sandbox…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

How to check, disable, and bypass ASLR (Address Space Layout Randomization) on Linux systems. Use this skill whenever the user mentions ASLR, address randomization, memory layout, binary exploitation, CTF challenges involving memory addresses, or needs to…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

How to perform ret2plt (return-to-PLT) attacks to bypass ASLR by leaking libc addresses. Use this skill whenever the user mentions ASLR bypass, PLT/GOT exploitation, libc leaks, ret2plt, return-to-PLT, or needs to leak function addresses from libc to…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

How to bypass ASLR using Ret2ret and Ret2pop techniques. Use this skill whenever the user mentions ASLR bypass, stack pointer manipulation, ret2ret, ret2pop, or needs help crafting exploits that leverage existing stack pointers to defeat address…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

Control Flow Enforcement Technology (CET) and Shadow Stack analysis for binary exploitation. Use this skill whenever the user mentions CET, shadow stack, control flow integrity, ROP/JOP attacks, binary security protections, or needs to understand how modern…

Quellsprache: Englisch

Aktualisiert
Beruf
Informationssicherheitsanalysten
Beschreibung

How to enable and analyze core dump files for binary exploitation debugging and crash analysis. Use this skill whenever the user mentions core dumps, crash analysis, GDB debugging, binary exploitation, reverse engineering, or needs to investigate why a…

Quellsprache: Englisch

Aktualisiert
Es werden 40 von 908 gesammelten Skills angezeigt.