Packs
12 packs@landonschropp
Ls Typescript
TypeScript and JavaScript skills
7 skills · pack
@cjthompson
Typescript Development
Deep TypeScript production guidance for testing, tooling, modules, packaging, and type-system work.
6 skills · pack
curated
Build TypeSpec API for Copilot
Generate TypeSpec API plugin files with REST operations, authentication, and Adaptive Cards.
3 skills · pack
@microsoft
Azure SDK Typescript
Azure SDK patterns and best practices for TypeScript/Node.js developers covering AI, storage, identity, monitoring, and messaging libraries.
24 skills · pack
@cjthompson
Python Development
Deep Python production guidance for testing, project tooling, concurrency, and type-system work.
6 skills · pack
curated
Azure Content Safety SDK
For developers integrating Azure AI Content Safety across Python and TypeScript projects.
2 skills · pack
curated
Ship Brand Design Guide
Generate a brand design guide including color palette, typography, UI components, and mockups.
5 skills · pack
curated
Create MCP Server in TypeScript
Generate a complete MCP server project with tools, resources, and proper configuration.
7 skills · pack
curated
Brand Identity Kit
Install this pack to generate a complete brand identity kit including logo, color palette, typography, and mockups.
13 skills · pack
@owl-listener
UI Design
UI design skills: color palettes, typography systems, layout grids, responsive breakpoints, dark mode specs, visual hierarchy, and brand alignment.
14 skills · pack
@cjthompson
Python Scripting
Low-context guidance for safe one-off Python helpers, typed scripts, lightweight quality checks, and zero-dependency macOS utilities.
4 skills · pack
curated
FP-TS Backend Toolkit
For Node.js/Deno developers building type-safe backends with fp-ts, covering async pipelines and service composition.
3 skills · pack
Results for “ty”
16 skills
mukul975 detecting-typosquatting-packages
Flag misspelled, brandjacked, and typosquatted package names across npm, PyPI, and crates.io before installation using edit-distance, keyboard-proximity, and known-target corpus matching with typomania, OSSGadget, and pypi-scan.
24.6k · bundle
mukul975 exploiting-type-juggling-vulnerabilities
Exploit PHP type juggling vulnerabilities caused by loose comparison operators to bypass authentication, circumvent hash verification, and manipulate application logic through type coercion attacks.
24.6k · bundle
mukul975 analyzing-typosquatting-domains-with-dnstwist
Detect typosquatting, homograph phishing, and brand impersonation domains using dnstwist to generate domain permutations and identify registered lookalike domains targeting your organization.
24.6k · bundle
mukul975 detecting-typosquatting-packages-in-npm-pypi
Detects typosquatting attacks in npm and PyPI package registries by analyzing package name similarity, publish date heuristics, and download count anomalies.
24.6k · bundle
mukul975 performing-supply-chain-attack-simulation
Simulate and detect software supply chain attacks including typosquatting via Levenshtein distance, dependency confusion testing, package hash verification, and vulnerability scanning with pip-audit.
24.6k · bundle
mukul975 analyzing-tls-certificate-transparency-logs
Queries Certificate Transparency logs via crt.sh and pycrtsh to detect phishing domains, unauthorized certificate issuance, and shadow IT. Monitors newly issued certificates for typosquatting and brand impersonation using Levenshtein distance.
24.6k · bundle
More results
mukul975 performing-adversary-in-the-middle-phishing-detection
Detect and respond to Adversary-in-the-Middle (AiTM) phishing attacks that use reverse proxy kits like EvilProxy, Evilginx, and Tycoon 2FA to bypass MFA and steal session tokens.
24.6k · bundle
mukul975 analyzing-certificate-transparency-for-phishing
Monitor Certificate Transparency logs using crt.sh and Certstream to detect phishing domains, lookalike certificates, and unauthorized certificate issuance targeting your organization.
24.6k · bundle
mukul975 detecting-pass-the-hash-attacks
Hunt for Pass-the-Hash attacks by analyzing NTLM authentication patterns, identifying Type 3 logons where Kerberos is expected, and correlating with credential dumping indicators.
24.6k · bundle
mukul975 detecting-sql-injection-via-waf-logs
Analyze WAF logs from ModSecurity, AWS WAF, or Cloudflare to detect SQL injection attack campaigns, classify injection types, and generate incident reports with OWASP classification.
24.6k · bundle
mukul975 performing-brand-monitoring-for-impersonation
Detect brand impersonation attacks across domains, social media, mobile apps, and dark web channels to identify phishing campaigns, fake sites, and unauthorized brand usage.
24.6k · bundle
zhaoxuya520 src-hunter
Provides a structured 5-phase workflow for bug bounty and SRC vulnerability hunting, including 19 attack-type playbooks, 305 structured payloads, 263 WAF bypass variants, and 2,887 real HackerOne case studies.
12.8k · bundle
vikingokft wp-security-deep
Audits WordPress plugin and theme PHP code for advanced security issues beyond basic sanitization, including object injection, SSRF, CSRF, mass assignment, file inclusion, mail header injection, ZipSlip, type juggling, and TOCTOU races.
0
tinh2 pci-dss
Audits codebases against PCI DSS v4.0, scanning for PAN patterns, CVV storage, and all 12 requirements including network security, encryption, access control, and logging. Estimates SAQ type for payment-handling systems.
13
mukul975 hunting-for-dns-tunneling-with-zeek
Detect DNS tunneling and data exfiltration by analyzing Zeek dns.log for high-entropy subdomain queries, excessive query volume, long query lengths, and unusual DNS record types indicating covert channel communication.
24.6k · bundle
mukul975 hunting-for-ntlm-relay-attacks
Detect NTLM relay attacks by analyzing Windows Event 4624 logon type 3 with NTLMSSP authentication, identifying IP-to-hostname mismatches, Responder traffic signatures, SMB signing status, and suspicious authentication patterns across the domain.
24.6k · bundle