Cargando el README del repositorio…
Mostrando 14 de 14 skills recopiladas.
Master Broken Access Control (BAC) and Insecure Direct Object Reference (IDOR) auditing skill for systematic evaluation of horizontal IDOR, vertical privilege escalation, multi-tenant boundaries, and authorization architecture based on TBHM Module 14.
Idioma del texto original: inglés
Master API Security and Documentation auditing skill for systematic assessment of OpenAPI/Swagger exposure, GraphQL vulnerabilities, BOLA/BFLA, mass assignment, and gateway defense based on TBHM and OWASP API Top 10.
Idioma del texto original: inglés
Master authentication and registration security skill for exhaustive 30-point login/registration bypass auditing, NoSQL/SQL/LDAP injection, mass assignment, email verification bypasses, and account takeovers based on TBHM v4.
Idioma del texto original: inglés
Master Business Logic and Workflow Integrity auditing skill for systematic assessment of pricing manipulation, multi-step workflow circumvention, concurrency race conditions, and state machine integrity based on TBHM Modules 10 & 11.
Idioma del texto original: inglés
Master cloud storage bucket discovery, Firebase database auditing, GitHub organization secret hunting, and npm dependency confusion assessment skill based on TBHM and modern offensive supply-chain methodologies.
Idioma del texto original: inglés
Master content & URL discovery skill for exhaustive 50-point directory/file fuzzing, sensitive data leak auditing (.env, .git, backups), administrative console probing, and API endpoint extraction using TBHM v4 and tailored wordlists.
Idioma del texto original: inglés
Master authentication and credential security skill for exhaustive 40-point password policy auditing, brute-force & rate-limiting defenses, password reset flow analysis, and 2FA/MFA bypass testing based on TBHM v4.
Idioma del texto original: inglés
Master JavaScript reconnaissance, de-minification, source map unpacking, deep secret mining, and endpoint discovery skill for bug bounty hunting based on TBHM and modern offensive JS pipelines.
Idioma del texto original: inglés
Master link, parameter, and client-side endpoint discovery skill for exhaustive 40-point web crawling, JavaScript AST analysis, source map recovery, hidden parameter fuzzing, and real-time protocol auditing based on TBHM v4.
Idioma del texto original: inglés
Full-stack recon-to-bug master skill. Runs passive + active recon, attack surface mapping, and bug discovery in one continuous 16-phase pipeline — all phases in order, zero skips. Triggers on: "recon", "enumerate", "subdomain", "find bugs", "attack surface",…
Idioma del texto original: inglés
Master application resource exhaustion and velocity control auditing skill for assessing rate limiting, form flood prevention, sensitive action re-authentication, and denial of service mitigations.
Idioma del texto original: inglés
Master Server-Side Request Forgery (SSRF) and Cloud Metadata auditing skill for systematic identification of remote URL fetchers, parser differentials, cloud IMDS exposure, and egress architecture review based on TBHM Module 15.
Idioma del texto original: inglés
Master reconnaissance skill for exhaustive 50-point subdomain enumeration, passive OSINT scraping, active multi-resolver brute-forcing, wildcard handling, and takeover auditing based on Jason Haddix's TBHM v4.
Idioma del texto original: inglés
Master technology profiling skill for exhaustive 40-point web stack detection, CDN/WAF identification, modern frontend SPA heuristics, backend runtime probing, and API architecture discovery (Swagger, GraphQL, Actuators).
Idioma del texto original: inglés
Copia este prompt en el asistente de IA que estés usando.
Follow https://skillsmp.com/skill-install/prompt.md to install Agent Skills from https://github.com/pruthuraut/BB-skill.No se ha podido cargar el README. Puedes seguir explorando los Skills del repositorio a continuación.