Carregando o README do repositório…
Mostrando 14 de 14 skills coletadas.
Master Broken Access Control (BAC) and Insecure Direct Object Reference (IDOR) auditing skill for systematic evaluation of horizontal IDOR, vertical privilege escalation, multi-tenant boundaries, and authorization architecture based on TBHM Module 14.
Idioma do texto original: inglês
Master API Security and Documentation auditing skill for systematic assessment of OpenAPI/Swagger exposure, GraphQL vulnerabilities, BOLA/BFLA, mass assignment, and gateway defense based on TBHM and OWASP API Top 10.
Idioma do texto original: inglês
Master authentication and registration security skill for exhaustive 30-point login/registration bypass auditing, NoSQL/SQL/LDAP injection, mass assignment, email verification bypasses, and account takeovers based on TBHM v4.
Idioma do texto original: inglês
Master Business Logic and Workflow Integrity auditing skill for systematic assessment of pricing manipulation, multi-step workflow circumvention, concurrency race conditions, and state machine integrity based on TBHM Modules 10 & 11.
Idioma do texto original: inglês
Master cloud storage bucket discovery, Firebase database auditing, GitHub organization secret hunting, and npm dependency confusion assessment skill based on TBHM and modern offensive supply-chain methodologies.
Idioma do texto original: inglês
Master content & URL discovery skill for exhaustive 50-point directory/file fuzzing, sensitive data leak auditing (.env, .git, backups), administrative console probing, and API endpoint extraction using TBHM v4 and tailored wordlists.
Idioma do texto original: inglês
Master authentication and credential security skill for exhaustive 40-point password policy auditing, brute-force & rate-limiting defenses, password reset flow analysis, and 2FA/MFA bypass testing based on TBHM v4.
Idioma do texto original: inglês
Master JavaScript reconnaissance, de-minification, source map unpacking, deep secret mining, and endpoint discovery skill for bug bounty hunting based on TBHM and modern offensive JS pipelines.
Idioma do texto original: inglês
Master link, parameter, and client-side endpoint discovery skill for exhaustive 40-point web crawling, JavaScript AST analysis, source map recovery, hidden parameter fuzzing, and real-time protocol auditing based on TBHM v4.
Idioma do texto original: inglês
Full-stack recon-to-bug master skill. Runs passive + active recon, attack surface mapping, and bug discovery in one continuous 16-phase pipeline — all phases in order, zero skips. Triggers on: "recon", "enumerate", "subdomain", "find bugs", "attack surface",…
Idioma do texto original: inglês
Master application resource exhaustion and velocity control auditing skill for assessing rate limiting, form flood prevention, sensitive action re-authentication, and denial of service mitigations.
Idioma do texto original: inglês
Master Server-Side Request Forgery (SSRF) and Cloud Metadata auditing skill for systematic identification of remote URL fetchers, parser differentials, cloud IMDS exposure, and egress architecture review based on TBHM Module 15.
Idioma do texto original: inglês
Master reconnaissance skill for exhaustive 50-point subdomain enumeration, passive OSINT scraping, active multi-resolver brute-forcing, wildcard handling, and takeover auditing based on Jason Haddix's TBHM v4.
Idioma do texto original: inglês
Master technology profiling skill for exhaustive 40-point web stack detection, CDN/WAF identification, modern frontend SPA heuristics, backend runtime probing, and API architecture discovery (Swagger, GraphQL, Actuators).
Idioma do texto original: inglês
Copie este prompt para o assistente de IA que você usa.
Follow https://skillsmp.com/skill-install/prompt.md to install Agent Skills from https://github.com/pruthuraut/BB-skill.Não foi possível carregar o README. Você ainda pode explorar os Skills do repositório abaixo.