Plugins
12 plugins@googlechrome
Modern Web Guidance
Modern Web Guidance from googlechrome/modern-web-guidance.
2 skills · plugin
@a5c-ai
Web Development
Web Development from a5c-ai/babysitter.
24 skills · plugin
curated
Optimize Web Performance
Install this pack to optimize web performance by measuring and fixing Core Web Vitals.
9 skills · plugin
curated
Web Performance Audit and Optimize
Measure performance, identify bottlenecks, and apply fixes to improve Core Web Vitals.
9 skills · plugin
curated
Azure Web PubSub Toolkit
For developers building real-time messaging apps with Azure Web PubSub using JavaScript and Python.
3 skills · plugin
curated
Build Blazor Web App with Auth
Install this pack to build a Blazor Web App with authentication and interactive components.
4 skills · plugin
curated
Build ASP.NET Core Web API
Create ASP.NET Core Web API endpoints with correct HTTP semantics and OpenAPI metadata.
3 skills · plugin
curated
Web Performance Audit and Fix
Installs a pipeline to audit Core Web Vitals, analyze performance, and debug issues using DevTools.
10 skills · plugin
curated
Audit and Fix Web Accessibility
Install this pack to audit and fix web accessibility issues to WCAG 2.2 AA standards.
10 skills · plugin
@chen-yu-hao
Components
Components from chen-yu-hao/codex-web.
100 skills · plugin
curated
Debug Web App with DevTools
Install this pack to test and debug a web application in a real browser using Chrome DevTools MCP.
7 skills · plugin
@dotnet
Dotnet Blazor
Skills for Blazor development: component authoring, interactivity, and web application patterns.
9 skills · plugin
Results for “web”
38 skills
mukul975 Hunting For Webshell Activity
Hunt for web shell deployments on internet-facing servers by analyzing file creation in web directories, suspicious process spawning from web servers, and anomalous HTTP patterns.
24.6k · bundle
mukul975 Performing Web Application Scanning With Nikto
Scan web servers and applications for vulnerabilities, misconfigurations, and outdated software using the Nikto open-source scanner.
24.6k · bundle
mukul975 Performing Web Application Penetration Test
Systematically tests web applications for vulnerabilities following the OWASP Web Security Testing Guide (WSTG) methodology, covering authentication, authorization, input validation, session management, and business logic using Burp Suite and manual techniques.
24.6k · bundle
zhaoxuya520 API Security
Authorized security assessment of REST, GraphQL, WebSocket, and SOAP APIs covering discovery, authentication, authorization, rate-limiting, and CI/CD integration.
12.8k · bundle
shulkwisec Param Fuzz
Systematically fuzz web applications for hidden content and input validation vulnerabilities across directories, files, parameters, and authentication bypasses.
21
agentskillexchange Owasp Zap Scanner
Runs OWASP ZAP security scans against web applications using Java or Docker, with setup guidance and links to upstream documentation.
28
More results
tinh2 Owasp
Systematically audits a web application against the OWASP 2021 Top 10, producing severity-rated, file-level findings with fixes for each category.
13
zhaoxuya520 Protocol Reverse
Authorized reverse engineering of custom binary protocols, Protobuf/gRPC, WebSocket frames, and PCAP-driven protocol recovery with structured workflow and tooling.
12.8k · bundle
shulkwisec Hack
Routes security testing tasks to the correct vulnerability category, guiding recon, validation, privilege escalation, and chain building for web application and API security assessments.
21
mukul975 Testing JWT Token Security
Assess JSON Web Token implementations for cryptographic weaknesses, algorithm confusion attacks, and authorization bypass vulnerabilities during security engagements.
24.6k · bundle
mukul975 Implementing Web Application Logging With Modsecurity
Configure ModSecurity WAF with OWASP Core Rule Set for web application logging, tune rules to reduce false positives, and analyze audit logs for attack detection.
24.6k · bundle
mhassan0000 Repo Scan
Audits source code across C++, Android, iOS, and Web to classify files, detect embedded third-party libraries, and produce four-level verdicts with interactive HTML reports.
1
mukul975 Performing Web Application Vulnerability Triage
Triage web application vulnerability findings from DAST/SAST scanners using OWASP risk rating methodology to separate true positives from false positives and prioritize remediation.
24.6k · bundle
mukul975 Performing Csrf Attack Simulation
Test web applications for Cross-Site Request Forgery vulnerabilities by crafting forged requests that exploit authenticated user sessions during authorized security assessments.
24.6k · bundle
mukul975 Monitoring Darkweb Sources
Monitors dark web forums, marketplaces, paste sites, and ransomware leak sites for mentions of organizational assets, leaked credentials, threatened attacks, and threat actor communications to provide early warning intelligence.
24.6k · bundle
mukul975 Analyzing Web Server Logs For Intrusion
Parse Apache and Nginx access logs to detect SQL injection, LFI, XSS, scanner fingerprints, and brute-force patterns using regex-based detection, GeoIP enrichment, and statistical anomaly analysis.
24.6k · bundle
mukul975 Deobfuscating Javascript Malware
Deobfuscates malicious JavaScript code used in web-based attacks, phishing pages, and dropper scripts by reversing encoding layers, eval chains, string manipulation, and control flow obfuscation to reveal the original malicious logic.
24.6k · bundle
mukul975 Testing For Email Header Injection
Test web application email functionality for SMTP header injection vulnerabilities that allow attackers to inject additional email headers, modify recipients, and abuse contact forms for spam relay.
24.6k · bundle
mukul975 Testing For Xss Vulnerabilities
Tests web applications for Cross-Site Scripting (XSS) vulnerabilities by injecting JavaScript payloads into reflected, stored, and DOM-based contexts to demonstrate client-side code execution, session hijacking, and user impersonation.
24.6k · bundle
mukul975 Implementing Cloud Waf Rules
Deploy and tune Web Application Firewall rules on AWS WAF, Azure WAF, and Cloudflare to protect cloud-hosted applications against OWASP Top 10 attacks, including managed rule sets, custom rate limiting, bot management, and false positive reduction.
24.6k · bundle
mukul975 Detecting Indirect Prompt Injection
Detect and defend against prompt injection hidden in documents, web pages, and images consumed by an agent.
24.6k · bundle
shulkwisec Bb Huge
Initializes bug bounty hunt workspaces, logs vulnerability findings with severity and evidence, and enriches them throughout a session.
21 · bundle
shulkwisec Bola Idor
Detect and exploit Broken Object Level Authorization (BOLA) and Insecure Direct Object Reference (IDOR) vulnerabilities in APIs and web applications.
21
cloudflare-security-audit Security Audit
Finds exploitable vulnerabilities in codebases through a structured multi-phase audit covering recon, hunting, validation, and reporting.
· bundle
addyosmani Security And Hardening
Hardens code against vulnerabilities by applying threat modeling, OWASP Top 10 prevention patterns, and secure coding practices for web applications.
69.5k
shulkwisec File Upload Vulnerabilities Deep Dive
Exploits file upload vulnerabilities across PortSwigger lab variants with exact payloads, bypass techniques, and zero-day escalation methods.
21 · bundle
sakamoto-family-smile Perl Security
Secure Perl applications against injection, taint, and web vulnerabilities with validated patterns for input handling, file operations, process execution, and DBI queries.
0
mukul975 Performing Security Headers Audit
Audits HTTP security headers including CSP, HSTS, X-Frame-Options, and cookie attributes to identify missing or misconfigured browser-level protections.
24.6k · bundle
sakamoto-family-smile Production Audit
Audits a codebase for production readiness using local evidence, scoring ship/block risk and listing concrete fixes without sending repo data to external services.
0
mukul975 Testing For XML Injection Vulnerabilities
Test web applications for XML injection vulnerabilities including XXE, XPath injection, and XML entity attacks to identify data exposure and server-side request forgery risks.
24.6k · bundle
mukul975 Performing Scada Hmi Security Assessment
Assess security of SCADA HMI systems by evaluating authentication, communication, web interfaces, and hardening against IEC 62443 and NIST SP 800-82 guidelines.
24.6k · bundle
mukul975 Performing Brand Monitoring For Impersonation
Detect brand impersonation attacks across domains, social media, mobile apps, and dark web channels to identify phishing campaigns, fake sites, and unauthorized brand usage.
24.6k · bundle
mukul975 Performing Paste Site Monitoring For Credentials
Monitor paste sites like Pastebin and GitHub Gists for leaked credentials, API keys, and sensitive data using automated scraping and keyword matching to detect breaches early.
24.6k · bundle
mukul975 Implementing Runtime Application Self Protection
Deploy Runtime Application Self-Protection (RASP) agents to detect and block attacks from within application runtime, covering OpenRASP integration, attack pattern detection, and security policy configuration for Java and Python web applications.
24.6k · bundle
vikingokft Frontend Security
Audits frontend codebases for security vulnerabilities and bad practices, covering XSS, CSRF, DOM issues, CSP, input validation, file uploads, and Node.js/NPM dependencies across web, React, Astro, Twig, Node.js, and Bun.
0 · bundle
shulkwisec Cross Site Scripting Xss Complete Deep Dive
Provides a complete deep-dive into Cross-Site Scripting (XSS) with exact payloads and bypass techniques for every PortSwigger lab variant, from apprentice to expert level.
21 · bundle