Packs
6 packscurated
Design System Foundation
Create design tokens, principles, and naming conventions for a new design system.
16 skills · pack
curated
Design System Audit and Remediation
Identify design debt, audit tokens, and enforce consistency across a product.
14 skills · pack
curated
Publish Mobile-First Page
Scaffold and publish a mobile-first page with responsive layout and design tokens.
4 skills · pack
curated
React Motion UI System
Install foundational motion tokens, UI patterns, and accessibility enforcement for React/Next.js.
5 skills · pack
@owl-listener
Design Systems
Design system skills: component specs, design tokens, naming conventions, spacing and grid systems, accessibility standards, and documentation.
11 skills · pack
@owl-listener
Visual Critique
Visual critique skills: hierarchy analysis, brand consistency checks against mood/voice/tokens, composition evaluation, and typography audits — with a /critique-screen command that compiles a prioritised fix list.
7 skills · pack
Results for “tokens”
8 skills
mukul975 implementing-canary-tokens-for-network-intrusion
Deploys DNS, HTTP, and AWS API key canary tokens across network infrastructure to detect unauthorized access and lateral movement, with webhook alerting to Slack, Teams, email, or generic HTTP endpoints.
24.6k · bundle
mukul975 performing-jwt-none-algorithm-attack
Test JWT signature verification bypass by crafting tokens with the 'none' algorithm.
24.6k · bundle
mukul975 attacking-entra-id-with-roadtools
Enumerate Microsoft Entra ID tenants using ROADrecon and acquire/exchange tokens with roadtx for authorized red-team operations.
24.6k · bundle
More results
mukul975 extracting-credentials-from-memory-dump
Extract cached credentials, password hashes, Kerberos tickets, and authentication tokens from memory dumps using Volatility and Mimikatz for forensic investigation.
24.6k · bundle
mukul975 performing-csrf-attack-simulation
Test web applications for Cross-Site Request Forgery vulnerabilities by crafting forged requests that exploit authenticated user sessions during authorized security assessments.
24.6k · bundle
mukul975 performing-initial-access-with-evilginx3
Conduct authorized red team initial access using EvilGinx3 adversary-in-the-middle phishing to capture session tokens and bypass multi-factor authentication.
24.6k · bundle
shulkwisec csrf
Detect and exploit Cross-Site Request Forgery vulnerabilities by testing for missing or predictable CSRF tokens, absent SameSite cookie attributes, and JSON endpoints accepting text/plain Content-Type, with payloads and bypass techniques for security testing.
21
mukul975 attacking-oauth-with-device-code-phishing
Execute OAuth 2.0 device-code and illicit-consent phishing attacks against Microsoft Entra ID to steal access and refresh tokens, bypass MFA, and pivot across Microsoft 365 services during authorized red-team engagements.
24.6k · bundle