Supabase Pentest Skills

Supabase Pentest Skills from yoanbernabeu/supabase-pentest-skills.

by @yoanbernabeu 3 skills

Skills in this plugin

3
  1. Supabase Extract Anon Key · yoanbernabeu
    Extract the Supabase anon/public API key from client-side code. This key is expected in client apps but important for RLS testing.
    1 install
  2. Supabase Extract DB String · yoanbernabeu
    CRITICAL - Detect exposed PostgreSQL database connection strings in client-side code. Direct DB access is a P0 issue.
    1 install
  3. Supabase Audit Buckets Read · yoanbernabeu
    Attempt to list and read files from storage buckets to verify access controls.
    1 install