# Skills for Security Skills for Security: what each one does, an install command and example prompts. 1434 cards · page 14 of 36 - HTML: https://affpapa.org/en/nevibecode/skills/topic/security?page=14 - Instructions for agents: https://affpapa.org/en/nevibecode/agents.md - [recon-for-sec](https://affpapa.org/en/nevibecode/skills/recon-for-sec.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3700 installs — Routes initial reconnaissance for a new application, from attack-surface mapping to the next security testing path. - [ios-pentesting-tricks](https://affpapa.org/en/nevibecode/skills/ios-pentesting-tricks.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3700 installs — A playbook for iOS app testing: keychain extraction, URL scheme hijacking, Universal Links abuse and runtime hooks. - [cors-cross-origin-misconfiguration](https://affpapa.org/en/nevibecode/skills/cors-cross-origin-misconfiguration.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3700 installs — Guides testing of CORS misconfigurations, origin reflection, and credentialed API access. - [injection-checking](https://affpapa.org/en/nevibecode/skills/injection-checking.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3700 installs — A router skill for injection testing: pick the right workflow based on where attacker-controlled input ends up. - [kubernetes-pentesting](https://affpapa.org/en/nevibecode/skills/kubernetes-pentesting.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3700 installs — A Kubernetes pentesting playbook: API server access, RBAC enumeration, service account token abuse, etcd, the Kubelet API and pod escape. - [auth-sec](https://affpapa.org/en/nevibecode/skills/auth-sec.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3700 installs — Entry P1 category router for authentication and authorization testing. - [api-authorization-and-bola](https://affpapa.org/en/nevibecode/skills/api-authorization-and-bola.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3700 installs — A playbook for testing API authorization: reaching other users' objects, calling functions your role should not have, and writing hidden fields. - [vm-and-bytecode-reverse](https://affpapa.org/en/nevibecode/skills/vm-and-bytecode-reverse.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3700 installs — A playbook for reversing hand-rolled virtual machines and bytecode: find the dispatcher, map opcodes, write a disassembler. - [websocket-security](https://affpapa.org/en/nevibecode/skills/websocket-security.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3800 installs — Helps analyze WebSocket security, detect CSWSH vulnerabilities, and review handshake headers. - [analyzing-web-server-logs-for-intrusion](https://affpapa.org/en/nevibecode/skills/analyzing-web-server-logs-for-intrusion.md) — skill · mahipal · Claude Code, Codex, Cursor +3 · 408 installs — This skill parses Apache and Nginx logs, flags attack patterns, and builds a findings report. - [reverse-engineering-tools](https://affpapa.org/en/nevibecode/skills/reverse-engineering-tools.md) — skill · gmh5225 · Claude Code, Codex, Cursor +3 · 544 installs — A skill for pulling apart game binaries, drivers and dumps: disassembly, decompilation, debugging and interface reconstruction. - [analyzing-cobalt-strike-beacon-configuration](https://affpapa.org/en/nevibecode/skills/analyzing-cobalt-strike-beacon-configuration.md) — skill · mahipal · Claude Code, Codex, Cursor +3 · 404 installs — This skill extracts Cobalt Strike Beacon configuration from PE files and memory dumps. - [neon-auth](https://affpapa.org/en/nevibecode/skills/neon-auth.md) — skill · neondatabase · Claude Code, Codex, Cursor +3 · 20300 installs — Provisions Managed Better Auth in Neon Postgres branches. - [dangling-markup-injection](https://affpapa.org/en/nevibecode/skills/dangling-markup-injection.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — A playbook for dangling markup injection: when HTML injection works but JavaScript is blocked, it shows how to pull CSRF tokens and page data through unclosed tags. - [dns-rebinding-attacks](https://affpapa.org/en/nevibecode/skills/dns-rebinding-attacks.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — Provides an expert playbook for executing DNS rebinding attacks against internal web targets. - [prototype-pollution](https://affpapa.org/en/nevibecode/skills/prototype-pollution.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — Tests JavaScript stacks for prototype pollution, from unsafe object merges to polluted-property reads. - [hash-attack-techniques](https://affpapa.org/en/nevibecode/skills/hash-attack-techniques.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — A playbook for hash attacks: length extension, MD5 and SHA-1 collisions, HMAC timing leaks, proof of work. - [arbitrary-write-to-rce](https://affpapa.org/en/nevibecode/skills/arbitrary-write-to-rce.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — Playbook for turning memory write primitives into code execution. - [active-directory-certificate-services](https://affpapa.org/en/nevibecode/skills/active-directory-certificate-services.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — This skill maps misconfigured AD CS and ESC1–ESC13 paths. - [saml-sso-assertion-attacks](https://affpapa.org/en/nevibecode/skills/saml-sso-assertion-attacks.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — A playbook for SAML SSO testing: which XML nodes are signed, how Audience and ACS checks behave, and where IdP/SP trust breaks down. - [active-directory-kerberos-attacks](https://affpapa.org/en/nevibecode/skills/active-directory-kerberos-attacks.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — Kerberos attack playbook for Active Directory covering AS-REP roasting, Kerberoasting, ticket forging, and delegation abuse. - [http2-specific-attacks](https://affpapa.org/en/nevibecode/skills/http2-specific-attacks.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — A skill for assessing HTTP/2-specific attack paths such as h2c, pseudo-headers, HPACK, and multiplexing. - [clickjacking](https://affpapa.org/en/nevibecode/skills/clickjacking.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — A clickjacking playbook: find out whether a page can be framed and whether an invisible overlay can trigger a sensitive action. - [jndi-injection](https://affpapa.org/en/nevibecode/skills/jndi-injection.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — A playbook for JNDI injection: lookup abuse over RMI and LDAP, JDK version limits, and post-8u191 bypasses. - [active-directory-acl-abuse](https://affpapa.org/en/nevibecode/skills/active-directory-acl-abuse.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — A playbook for abusing misconfigured Active Directory permissions: dangerous ACEs, DCSync, shadow credentials, LAPS and BloodHound paths. - [csv-formula-injection](https://affpapa.org/en/nevibecode/skills/csv-formula-injection.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — A skill for testing how CSV exports and spreadsheets handle formulas coming from user fields. - [expression-language-injection](https://affpapa.org/en/nevibecode/skills/expression-language-injection.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — An Expression Language injection attack playbook for Java frameworks. - [dependency-confusion](https://affpapa.org/en/nevibecode/skills/dependency-confusion.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — Reviews dependency-confusion risk in manifests and CI. - [subdomain-takeover](https://affpapa.org/en/nevibecode/skills/subdomain-takeover.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — A playbook for finding dangling CNAME, NS and MX records and claiming the resources behind them. - [http-host-header-attacks](https://affpapa.org/en/nevibecode/skills/http-host-header-attacks.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — Playbook for HTTP Host header attacks: password reset poisoning, cache poisoning, routing SSRF, and virtual host bypass. - [web-cache-deception](https://affpapa.org/en/nevibecode/skills/web-cache-deception.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — This skill guides checks for cached authenticated pages and cache poisoning conditions. - [mobile-ssl-pinning-bypass](https://affpapa.org/en/nevibecode/skills/mobile-ssl-pinning-bypass.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — A playbook for bypassing SSL pinning in mobile apps: Android and iOS methods plus framework-specific tricks for Flutter, React Native and Xamarin. - [insecure-source-code-management](https://affpapa.org/en/nevibecode/skills/insecure-source-code-management.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — Detects exposed .git, .svn, and .hg repositories along with leaked .env files. - [crlf-injection](https://affpapa.org/en/nevibecode/skills/crlf-injection.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — A playbook for CRLF injection: smuggling carriage-return and line-feed characters into response headers, redirects and logs. - [symbolic-execution-tools](https://affpapa.org/en/nevibecode/skills/symbolic-execution-tools.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — A symbolic execution playbook that keeps your agent's angr, Z3 and Unicorn scripts from breaking on state setup and missing libc hooks. - [browser-exploitation-v8](https://affpapa.org/en/nevibecode/skills/browser-exploitation-v8.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — A playbook for exploiting JavaScript engine bugs: JIT type confusion, bounds elimination, V8 sandbox bypass. - [csp-bypass-advanced](https://affpapa.org/en/nevibecode/skills/csp-bypass-advanced.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — A skill for picking apart Content Security Policy: which directives the policy leaves open and how data leaves the page without JavaScript. - [race-condition](https://affpapa.org/en/nevibecode/skills/race-condition.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — A skill for testing web apps for race conditions and TOCTOU: parallel requests, rate-limit bypass, one-time operations. - [http-parameter-pollution](https://affpapa.org/en/nevibecode/skills/http-parameter-pollution.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — Guides agents through HTTP Parameter Pollution tests when WAFs, proxies, and backends parse duplicate parameters differently. - [deserialization-insecure](https://affpapa.org/en/nevibecode/skills/deserialization-insecure.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — This skill helps find unsafe deserialization in Java, PHP, and Python and review possible attack chains. Next: https://affpapa.org/en/nevibecode/skills/topic/security.md?page=15 ## Refine [audit](https://affpapa.org/en/nevibecode/tag/audit.md) · [owasp](https://affpapa.org/en/nevibecode/tag/owasp.md) · [python](https://affpapa.org/en/nevibecode/tag/python.md) · [compliance](https://affpapa.org/en/nevibecode/tag/compliance.md) · [google-cloud](https://affpapa.org/en/nevibecode/tag/google-cloud.md) · [api](https://affpapa.org/en/nevibecode/tag/api.md) · [oauth](https://affpapa.org/en/nevibecode/tag/oauth.md) · [auth](https://affpapa.org/en/nevibecode/tag/auth.md) · [typescript](https://affpapa.org/en/nevibecode/tag/typescript.md) · [jwt](https://affpapa.org/en/nevibecode/tag/jwt.md) · [secrets](https://affpapa.org/en/nevibecode/tag/secrets.md) · [reverse-engineering](https://affpapa.org/en/nevibecode/tag/reverse-engineering.md) ## Narrow this list Parameters: `?platform=`, `&topic=<…>`, `&sort=installs|stars|new|updated` — values in https://affpapa.org/en/nevibecode/agents.md --- NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md