Packs
12 packs@claude-dev-suite
Claude Dev Suite
Claude Dev Suite from claude-dev-suite/claude-dev-suite.
100 skills · pack
curated
Python Test Suite with Coverage
Develop a comprehensive Python test suite using pytest, measure coverage, and increase to 100%.
3 skills · pack
curated
DotNet Test Quality Audit
Analyze .NET test suites for anti-patterns, maintainability issues, and assertion diversity, producing a severity-ranked report.
3 skills · pack
@juliusbrussee
Caveman
Token-compression suite: compressed chat mode plus commit, review, help, stats, memory-compress and subagent-crew skills by Julius Brussee.
7 skills · pack
curated
E2E Test Setup with Playwright
Set up an end-to-end test suite with Playwright, including real flows, layered assertions, and CI integration.
10 skills · pack
@testdouble
Han Reporting
Reporting and summary skills for the Han suite. Turns feature specifications into plain-language stakeholder summaries (also called executive or business summaries) with diagrams, for sharing with non-technical stakeholders before implementation kicks off.
2 skills · pack
@testdouble
Han Documentation
Documentation skills for the Han suite: writing down what the team built and decided. Home of project-documentation, architectural-decision-record, and runbook. Depends on han-communication and han-core; bundled by the han meta-plugin.
3 skills · pack
@testdouble
Han Research
Pre-planning knowledge-work skills for the Han suite: understanding a problem before anyone commits to a plan. Home of research, gap-analysis, and issue-triage, plus the research-analyst agent. Depends on han-communication and han-core; bundled by the han meta-plugin.
3 skills · pack
@testdouble
Han Coding
Code-writing and execution skills for the Han suite. Home of the tdd skill, which drives a feature or behavior through a BDD-framed red-green-refactor loop with an enforced observed-failure gate. Depends on han-core and han-communication; bundled by the han meta-plugin.
11 skills · pack
@alirezarezvani
Engineering
37 advanced engineering skills: agent designer, agent workflow designer, RAG architect, database designer + schema designer + SQL assistant, migration architect, observability designer, dependency auditor, changelog generator (with semantic version bumper and hotfix/rollback procedures), API design reviewer, API test suite builder, CI/CD pipeline builder, MCP server builder, skill security auditor
33 skills · pack
@testdouble
Han Planning
Planning skills for the Han suite: specifying, planning, sequencing, breaking down, and stress-testing work before implementation. Home of plan-a-feature, plan-implementation, plan-a-phased-build, plan-work-items, and iterative-plan-review, plus the discussion-facilitator agent. Depends on han-communication and han-core; bundled by the han meta-plugin.
5 skills · pack
@testdouble
Han Atlassian
Atlassian-facing extensions to the Han suite. Adds markdown-to-confluence, which publishes a local Markdown file to a user-specified Confluence page; project-documentation-to-confluence, which runs the han-documentation project-documentation skill and then publishes the result there; investigate-to-confluence, which runs the core investigate skill and publishes the resulting investigation report t
6 skills · pack
Results for “sui”
71 skills
mukul975 testing-for-xss-vulnerabilities-with-burpsuite
Identify and validate cross-site scripting vulnerabilities using Burp Suite's scanner, intruder, and repeater tools during authorized security assessments.
24.6k · bundle
mukul975 intercepting-mobile-traffic-with-burpsuite
Intercepts and analyzes HTTP/HTTPS traffic from mobile applications using Burp Suite proxy to identify insecure API communications, authentication flaws, data leakage, and server-side vulnerabilities.
24.6k · bundle
mukul975 performing-web-application-penetration-test
Systematically tests web applications for vulnerabilities following the OWASP Web Security Testing Guide (WSTG) methodology, covering authentication, authorization, input validation, session management, and business logic using Burp Suite and manual techniques.
24.6k · bundle
mukul975 performing-thick-client-application-penetration-test
Conduct a thick client application penetration test to identify insecure local storage, hardcoded credentials, DLL hijacking, memory manipulation, and insecure API communication in desktop applications using dnSpy, Procmon, and Burp Suite.
24.6k · bundle
trailofbits burpsuite-project-parser
Searches and extracts data from Burp Suite project files (.burp) using the burpsuite-project-file-parser extension, enabling regex searches on response headers and bodies, extraction of security audit findings, and analysis of proxy history and site map data.
6k · bundle
mukul975 exploiting-insecure-deserialization
Identify and exploit insecure deserialization vulnerabilities in Java, PHP, Python, and .NET applications during authorized penetration tests.
24.6k · bundle
More results
mukul975 exploiting-sql-injection-with-sqlmap
Detect and exploit SQL injection vulnerabilities using sqlmap to extract database contents during authorized penetration tests.
24.6k · bundle
mukul975 performing-web-cache-deception-attack
Exploit path normalization discrepancies between CDN caching layers and origin servers to cache and retrieve authenticated content.
24.6k · bundle
shulkwisec xxe
Detect and exploit XML External Entity (XXE) injection vulnerabilities in XML parsers, including file disclosure, SSRF, and blind out-of-band exfiltration.
21
shulkwisec jwt-authentication-complete-deep-dive
Provides exact payloads and bypass techniques for every PortSwigger JWT authentication lab variant, from unverified signatures to algorithm confusion attacks.
21 · bundle
shulkwisec bola-idor
Detect and exploit Broken Object Level Authorization (BOLA) and Insecure Direct Object Reference (IDOR) vulnerabilities in APIs and web applications.
21
mukul975 performing-graphql-introspection-attack
Extracts GraphQL API schemas through introspection attacks, identifies sensitive fields and mutations, and tests for query depth and complexity vulnerabilities.
24.6k · bundle
mukul975 exploiting-api-injection-vulnerabilities
Tests APIs for injection vulnerabilities including SQL, NoSQL, OS command, LDAP, and SSRF through parameters, headers, and request bodies.
24.6k · bundle
mukul975 performing-soap-web-service-security-testing
Analyze WSDL definitions and test SOAP endpoints for XML injection, XXE, WS-Security bypass, and SOAPAction spoofing.
24.6k · bundle
shulkwisec file-upload-vulnerabilities-deep-dive
Exploits file upload vulnerabilities across PortSwigger lab variants with exact payloads, bypass techniques, and zero-day escalation methods.
21 · bundle
mukul975 testing-websocket-api-security
Tests WebSocket API implementations for security vulnerabilities including missing authentication, Cross-Site WebSocket Hijacking, injection attacks, and denial-of-service.
24.6k · bundle
mukul975 exploiting-idor-vulnerabilities
Identify and exploit Insecure Direct Object Reference vulnerabilities during authorized penetration tests by manipulating object identifiers in API requests and URLs.
24.6k · bundle
mukul975 performing-directory-traversal-testing
Test web applications for path traversal vulnerabilities that allow reading or writing arbitrary files on the server by manipulating file path parameters.
24.6k · bundle
mukul975 performing-graphql-security-assessment
Assess GraphQL API endpoints for introspection leaks, injection attacks, authorization flaws, and denial-of-service vulnerabilities during authorized security tests.
24.6k · bundle
mukul975 exploiting-websocket-vulnerabilities
Test WebSocket implementations for authentication bypass, cross-site hijacking, injection attacks, and insecure message handling during authorized security assessments.
24.6k · bundle
mukul975 bypassing-authentication-with-forced-browsing
Discover hidden directories, files, APIs, and administrative interfaces by enumerating URLs and testing authentication enforcement during authorized security assessments.
24.6k · bundle
mukul975 testing-jwt-token-security
Assess JSON Web Token implementations for cryptographic weaknesses, algorithm confusion attacks, and authorization bypass vulnerabilities during security engagements.
24.6k · bundle
mukul975 exploiting-sql-injection-vulnerabilities
Identifies and exploits SQL injection vulnerabilities in web applications during authorized penetration tests using manual techniques and automated tools like sqlmap.
24.6k · bundle
mukul975 performing-clickjacking-attack-test
Test web applications for clickjacking vulnerabilities by assessing frame embedding controls and crafting proof-of-concept overlay attacks during authorized security assessments.
24.6k · bundle
mukul975 exploiting-server-side-request-forgery
Identify and exploit SSRF vulnerabilities to access internal services, cloud metadata, and restricted network resources during authorized penetration tests.
24.6k · bundle
mukul975 testing-for-xxe-injection-vulnerabilities
Discover and exploit XML External Entity injection vulnerabilities to read server files, perform SSRF, and exfiltrate data during authorized penetration tests.
24.6k · bundle
mukul975 testing-for-sensitive-data-exposure
Identify sensitive data exposure vulnerabilities including API key leakage, PII in responses, insecure storage, and unprotected data transmission during security assessments.
24.6k · bundle
mukul975 performing-privilege-escalation-on-linux
Elevate from a low-privilege user account to root access on a compromised Linux system by exploiting misconfigurations, vulnerable services, kernel exploits, and weak permissions.
24.6k · bundle
mukul975 exploiting-nosql-injection-vulnerabilities
Detect and exploit NoSQL injection vulnerabilities in MongoDB, CouchDB, and other NoSQL databases to demonstrate authentication bypass, data extraction, and unauthorized access risks.
24.6k · bundle
mukul975 performing-privilege-escalation-assessment
Performs privilege escalation assessments on compromised Linux and Windows systems to identify paths from low-privilege access to root or SYSTEM-level control.
24.6k · bundle
mukul975 exploiting-template-injection-vulnerabilities
Detect and exploit Server-Side Template Injection (SSTI) vulnerabilities across Jinja2, Twig, Freemarker, and other template engines to achieve remote code execution during authorized penetration tests.
24.6k · bundle
mukul975 exploiting-broken-function-level-authorization
Tests APIs for Broken Function Level Authorization (BFLA) vulnerabilities where regular users can invoke administrative functions or access privileged API endpoints by directly calling them.
24.6k · bundle
mukul975 detecting-broken-object-property-level-authorization
Detect and test for OWASP API3:2023 Broken Object Property Level Authorization vulnerabilities including excessive data exposure and mass assignment attacks.
24.6k · bundle
mukul975 testing-cors-misconfiguration
Identify and exploit Cross-Origin Resource Sharing misconfigurations that allow unauthorized cross-domain data access and credential theft during authorized security assessments.
24.6k · bundle
mukul975 exploiting-oauth-misconfiguration
Identify and exploit OAuth 2.0 and OpenID Connect misconfigurations including redirect URI manipulation, token leakage, and authorization code theft during authorized security assessments.
24.6k · bundle
mukul975 testing-api-security-with-owasp-top-10
Systematically assess REST and GraphQL API endpoints against the OWASP API Security Top 10 risks using automated and manual testing techniques.
24.6k · bundle