Plugins

9 plugins

Build Blazor Web App with Auth

Install this pack to build a Blazor Web App with authentication and interactive components.

4 skills · plugin

Debug Web App with DevTools

Install this pack to test and debug a web application in a real browser using Chrome DevTools MCP.

7 skills · plugin

Web Performance Audit and Optimize

Measure performance, identify bottlenecks, and apply fixes to improve Core Web Vitals.

9 skills · plugin

[Deprecated] Use the "expo" plugin instead. Deploying Expo apps to App Store, Play Store, and web.

18 skills · plugin

Azure Web PubSub Toolkit

For developers building real-time messaging apps with Azure Web PubSub using JavaScript and Python.

3 skills · plugin

WCAG Audit and Remediation

Audit a web app against WCAG 2.2 AA, then apply fixes for identified issues.

9 skills · plugin

Skills for Blazor development: component authoring, interactivity, and web application patterns.

9 skills · plugin

Build Gemini Live API App

Build real-time, bidirectional streaming applications with the Gemini Live API, covering WebSocket-based audio/video/text streaming and function calling.

4 skills · plugin

Safe Production Deployment

Deploy a web application safely with pre-deployment audit, rollout plan, canary monitoring, and rollback strategy.

9 skills · plugin

Results for “web-app”

20 skills

competition-web-runtime

Inspects web behavior, browser state, server routing, API order, and worker-backed application flow within a sandboxed CTF environment.

12.8k · bundle

performing-web-application-penetration-test

Systematically tests web applications for vulnerabilities following the OWASP Web Security Testing Guide (WSTG) methodology, covering authentication, authorization, input validation, session management, and business logic using Burp Suite and manual techniques.

24.6k · bundle

performing-web-application-firewall-bypass

Bypass Web Application Firewall protections using encoding techniques, HTTP method manipulation, parameter pollution, and payload obfuscation to deliver SQL injection, XSS, and other attack payloads past WAF detection rules.

24.6k · bundle

Systematically fuzz web applications for hidden content and input validation vulnerabilities across directories, files, parameters, and authentication bypasses.

testing-for-host-header-injection

Test web applications for HTTP Host header injection vulnerabilities to identify password reset poisoning, web cache poisoning, SSRF, and virtual host routing manipulation risks.

24.6k · bundle

testing-for-xss-vulnerabilities

Tests web applications for Cross-Site Scripting (XSS) vulnerabilities by injecting JavaScript payloads into reflected, stored, and DOM-based contexts to demonstrate client-side code execution, session hijacking, and user impersonation.

24.6k · bundle

More results

Routes security testing tasks to the correct vulnerability category, guiding recon, validation, privilege escalation, and chain building for web application and API security assessments.

exploiting-sql-injection-vulnerabilities

Identifies and exploits SQL injection vulnerabilities in web applications during authorized penetration tests using manual techniques and automated tools like sqlmap.

24.6k · bundle

performing-csrf-attack-simulation

Test web applications for Cross-Site Request Forgery vulnerabilities by crafting forged requests that exploit authenticated user sessions during authorized security assessments.

24.6k · bundle

testing-for-open-redirect-vulnerabilities

Identify and test open redirect vulnerabilities in web applications by analyzing URL redirection parameters, bypass techniques, and exploitation chains for phishing and token theft.

24.6k · bundle

testing-for-email-header-injection

Test web application email functionality for SMTP header injection vulnerabilities that allow attackers to inject additional email headers, modify recipients, and abuse contact forms for spam relay.

24.6k · bundle

exploiting-race-condition-vulnerabilities

Detect and exploit race condition vulnerabilities in web applications using Turbo Intruder's single-packet attack technique to bypass rate limits, duplicate transactions, and exploit time-of-check-to-time-of-use flaws.

24.6k · bundle

Detect and exploit Broken Object Level Authorization (BOLA) and Insecure Direct Object Reference (IDOR) vulnerabilities in APIs and web applications.

cloudflare-security-audit

Finds exploitable vulnerabilities in codebases through a structured multi-phase audit covering recon, hunting, validation, and reporting.

performing-directory-traversal-testing

Test web applications for path traversal vulnerabilities that allow reading or writing arbitrary files on the server by manipulating file path parameters.

24.6k · bundle

performing-clickjacking-attack-test

Test web applications for clickjacking vulnerabilities by assessing frame embedding controls and crafting proof-of-concept overlay attacks during authorized security assessments.

24.6k · bundle

testing-for-xml-injection-vulnerabilities

Test web applications for XML injection vulnerabilities including XXE, XPath injection, and XML entity attacks to identify data exposure and server-side request forgery risks.

24.6k · bundle

testing-for-broken-access-control

Systematically test web applications for broken access control vulnerabilities including privilege escalation, missing function-level checks, and insecure direct object references.

24.6k · bundle

cross-site-scripting-xss-complete-deep-dive

Provides a complete deep-dive into Cross-Site Scripting (XSS) with exact payloads and bypass techniques for every PortSwigger lab variant, from apprentice to expert level.

performing-second-order-sql-injection

Detect and exploit second-order SQL injection vulnerabilities where malicious input is stored in a database and later executed in an unsafe SQL query during a different application operation.

24.6k · bundle