mn-youssef
- 17 skills
- 0 followers
- 13 hours ago last updated
- ▌ Job Match Finder · mn-youssef bundleFind the latest LinkedIn job openings that match a person's CV or LinkedIn profile, filtered by how recently they were posted, and deliver them as a ranked list where every job has a direct apply link. Searches LinkedIn Jobs only. Use this skill whenever someone uploads a resume/CV (PDF or doc) or shares a linkedin.com/in/ URL and asks to "find jobs", "find me the latest jobs", "jobs that match my profile/CV", "what's hiring for me", "jobs posted since [date] / in the last X days", or wants matched/compatible openings based on their background. Trigger on any request that pairs a profile/CV with a job search, even if the word "match" isn't used.
- ▌ Active Pentest · mn-youssef bundleUse when you need to actually run security tests against a running application you own or are authorized to test — the shared execution harness for lab/proxy/scanner setup, safe non-destructive execution, and standardized proof-of-concept capture that the find/exploit specialist skills rely on.
- ▌ Recon And Osint · mn-youssef bundleUse when starting an assessment and you need to discover an application's full attack surface — subdomains, hosts, endpoints, technologies, exposed services, leaked credentials and secrets — on assets you own or are authorized to test. Feeds the threat model with real, not assumed, targets.
- ▌ Threat Modeling · mn-youssef bundleUse when starting a security assessment and you need to map an application's attack surface, enumerate trust boundaries, and rank what to test first — before auditing code or running tools. Produces a prioritized target list.
- ▌ Security Testing · mn-youssefUse when you want to security-test, pentest, audit, or find vulnerabilities in an application you own or are authorized to test — entry point that confirms authorization and routes to the right phase (threat model, code audit, active test, or hardening).
- ▌ Injection Testing · mn-youssef bundleUse when dynamically testing whether untrusted input reaches an interpreter — SQL/NoSQL injection (incl. blind/time-based), OS command injection, server-side template injection (SSTI), XXE, LDAP/XPath, and CRLF/header injection. Confirms on a running app what security-code-audit finds in source.
- ▌ Pentest Reporting · mn-youssef bundleUse when turning security findings into a clear, actionable report — scoring severity with CVSS, writing findings with reproduction and impact, prioritizing remediation, producing an executive summary, and tracking retests to closure. The phase that makes testing matter.
- ▌ Security Hardening · mn-youssefUse when you have a security finding (from code audit or pentest) and need to fix it correctly with secure-coding patterns, then verify the fix actually closes it. Covers fixes for injection, access control, XSS, auth, secrets, and config across the stack.
- ▌ Security Code Audit · mn-youssef bundleUse when you have application source code and want to find security vulnerabilities by reading it — covers OWASP Top 10 across frontend, backend API, and database. Produces a findings register with severity, file:line, and exploitability.
- ▌ API Security Testing · mn-youssef bundleUse when testing REST, GraphQL, gRPC, or WebSocket APIs against the OWASP API Security Top 10 — object- and function-level authorization (BOLA/BFLA), excessive data exposure, mass assignment, unrestricted resource consumption, and GraphQL-specific abuse. For apps you own or are authorized to test.
- ▌ File Upload And Ssrf · mn-youssef bundleUse when testing file-upload handling, server-side request forgery (SSRF), and insecure deserialization — upload bypasses (type/extension/content, polyglots, path traversal), SSRF to cloud metadata and internal services, and unsafe deserialization sinks. On apps you own or are authorized to test.
- ▌ Access Control Testing · mn-youssef bundleUse when testing whether users can access data or actions they shouldn't — IDOR/BOLA, horizontal and vertical privilege escalation, multi-tenant isolation, forced browsing, function-level authorization (BFLA), and mass assignment. The
- ▌ Authentication Testing · mn-youssef bundleUse when testing login, sessions, password reset, OAuth/OIDC/SAML/SSO, MFA, and JWTs for weaknesses that lead to account takeover — credential attacks, session fixation, reset-token poisoning, MFA bypass, and token forgery. On apps you own or are authorized to test.
- ▌ Business Logic Testing · mn-youssef bundleUse when testing application-specific workflow and business-rule flaws that scanners cannot find — price/quantity/parameter tampering, workflow and state-machine bypass, race conditions and TOCTOU, replay, and abuse of coupons/refunds/limits. Requires understanding what the app is supposed to do.
- ▌ Vulnerability Chaining · mn-youssef bundleUse when you have multiple findings and need to combine them into realistic end-to-end attack paths — turning several low/medium issues into a single critical-impact exploit chain. The red-team-lead skill that ties the specialists' findings together into business impact.
- ▌ Client Side Exploitation · mn-youssef bundleUse when testing advanced browser-side and HTTP-layer attacks beyond basic XSS/CSRF — DOM XSS, CSP bypass, CORS misconfiguration exploitation, postMessage abuse, prototype pollution, DOM clobbering, clickjacking, web cache poisoning, and HTTP request smuggling. On apps you own or are authorized to test.
- ▌ Secrets Management Audit · mn-youssef bundleUse when hunting for exposed secrets and auditing how an app you own manages them — API keys, tokens, passwords, and private keys in source, git history, binaries, logs, config, and CI; plus vaulting, rotation, and least-privilege of the secrets themselves.