[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"creator:01M6ADEQR8T5M4EEG6C67BQCWF":3,"creator-list:01M6ADEQR8T5M4EEG6C67BQCWF:stars:1":23},{"accountNo":4,"login":5,"displayName":6,"avatarUrl":7,"accountType":8,"accountTypeDesc":9,"profileDescription":10,"skillCount":11,"repoCount":12,"professionCount":13,"scenarioCount":14,"totalStars":15,"updatedAt":16,"htmlUrl":17,"blogUrl":18,"company":19,"location":20,"followersCount":21,"publicReposCount":22},"01M6ADEQR8T5M4EEG6C67BQCWF","mukul975","Mahipal","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F42860185?v=4","USER","个人作者","🔐 Cybersecurity | 💻 Dev | 📷 Street Photographer\r\n🎓 MSc | 📚 Research & AI Security",1652,3,10,7,36317,"2026-08-31 12:32:44","https:\u002F\u002Fgithub.com\u002Fmukul975","Mahipal.engineer",null,"Berlin ",1429,33,{"records":24,"total":11,"current":420,"size":421},[25,62,86,114,140,167,191,206,227,250,280,296,320,339,358,377,391,409],{"skillNo":26,"name":27,"nameZh":19,"description":28,"descriptionZh":19,"repositoryFullName":29,"ownerLogin":5,"ownerAvatarUrl":7,"ownerAccountNo":4,"ownerDisplayName":6,"repositoryNo":30,"starsCount":31,"licenseSpdxId":32,"licenseFileUrl":19,"sourceHtmlUrl":33,"categories":34,"keywords":40,"publishedAt":61},"01M6AGDM3HJXTKXX15ZZ0ZVCJ3","verifying-build-provenance-with-slsa-sigstore","Verifies artifact signatures and SLSA provenance using Sigstore's cosign (verify, verify-attestation, verify-blob-attestation) and slsa-verifier (verify-artifact), enforcing keyless OIDC builder identity and source repo against SLSA Build levels. Use in CI\u002FCD before deploying artifacts, when consuming third-party attestations, establishing a SLSA Build L3 pipeline, or confirming provenance during incident response or admission control.","mukul975\u002FAnthropic-Cybersecurity-Skills","01M6ADJPMYWG1E5GM1FWBE3128",35884,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fverifying-build-provenance-with-slsa-sigstore\u002FSKILL.md",[35],{"categoryNo":36,"categoryName":37,"taxonomyType":38,"taxonomyTypeDesc":39},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60],"sigstore","provenance","slsa","verifying build provenance with slsa sigstore","security","cybersecurity","incident response","identity","pr","code","artifacts","ci","supply-chain","pipeline","supply-chain-security","t1195","attestation","code-signing","cosign","keyless","2026-11-10 10:12:30",{"skillNo":63,"name":64,"nameZh":19,"description":65,"descriptionZh":19,"repositoryFullName":29,"ownerLogin":5,"ownerAvatarUrl":7,"ownerAccountNo":4,"ownerDisplayName":6,"repositoryNo":30,"starsCount":31,"licenseSpdxId":32,"licenseFileUrl":19,"sourceHtmlUrl":66,"categories":67,"keywords":69,"publishedAt":61},"01M6AGDGBPWYVZ2F11GFKJ4HZ9","validating-tpm-measured-boot-attestation","Verifies TPM 2.0 measured-boot integrity and remote attestation with tpm2-tools -- reading PCRs (tpm2_pcrread), replaying the boot event log, generating and checking signed quotes (tpm2_quote\u002Ftpm2_checkquote), and sealing secrets to a PCR policy. Use to confirm a system booted trusted firmware\u002Fkernel for Zero Trust device posture, detect boot-chain tampering via PCR drift, or build a golden-value baseline for fleet attestation.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fvalidating-tpm-measured-boot-attestation\u002FSKILL.md",[68],{"categoryNo":36,"categoryName":37,"taxonomyType":38,"taxonomyTypeDesc":39},[70,57,71,72,45,73,46,49,74,75,76,77,78,79,80,81,82,83,84,85],"boot","TPM","validating tpm measured boot attestation","policy","verification","ZeRO","firmware","Tools","measured-boot","PCR","integrity","secrets","remote-attestation","tpm2-tools","integrity-verification","trusted-computing",{"skillNo":87,"name":88,"nameZh":19,"description":89,"descriptionZh":19,"repositoryFullName":29,"ownerLogin":5,"ownerAvatarUrl":7,"ownerAccountNo":4,"ownerDisplayName":6,"repositoryNo":30,"starsCount":31,"licenseSpdxId":32,"licenseFileUrl":19,"sourceHtmlUrl":90,"categories":91,"keywords":96,"publishedAt":61},"01M6AGDCW0Y4FXZ3362GT1941M","validating-backup-integrity-for-recovery","Validates backup integrity through cryptographic hash verification, automated restore testing, corruption detection, and recoverability checks to confirm backups are reliable for disaster recovery and ransomware response. Use before relying on backups for recovery, when building post-backup validation pipelines, auditing backup infrastructure for compliance, or checking immutable\u002Fair-gapped backups for silent corruption or tampering.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fvalidating-backup-integrity-for-recovery\u002FSKILL.md",[92,95],{"categoryNo":93,"categoryName":94,"taxonomyType":38,"taxonomyTypeDesc":39},"01JBSEEDCAT000000000000008","测试与质量",{"categoryNo":36,"categoryName":37,"taxonomyType":38,"taxonomyTypeDesc":39},[80,97,98,99,100,46,101,102,74,103,104,105,106,107,108,109,110,111,112,113],"backup","recovery","validating backup integrity for recovery","testing","infrastructure","validation","compliance","hash-verification","incident-response","ransomware","cryptocurrency","detection","t1078","t1490","immutable","disaster-recovery","restore-testing",{"skillNo":115,"name":116,"nameZh":19,"description":117,"descriptionZh":19,"repositoryFullName":29,"ownerLogin":5,"ownerAvatarUrl":7,"ownerAccountNo":4,"ownerDisplayName":6,"repositoryNo":30,"starsCount":31,"licenseSpdxId":32,"licenseFileUrl":19,"sourceHtmlUrl":118,"categories":119,"keywords":121,"publishedAt":61},"01M6AGD9GBG2KZ336AE763J3WH","triaging-windows-with-kape","Runs KAPE (Kroll Artifact Parser and Extractor) to collect targeted forensic artifacts (registry hives, $MFT, event logs, prefetch, browser data) via Targets and parse them with Modules wrapping Eric Zimmerman's EZ Tools (PECmd, MFTECmd, RECmd). Use during early incident containment\u002Ftriage when full disk imaging is impractical but a defensible, parseable Windows artifact set is needed quickly, including at-scale remote collection.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Ftriaging-windows-with-kape\u002FSKILL.md",[120],{"categoryNo":36,"categoryName":37,"taxonomyType":38,"taxonomyTypeDesc":39},[122,123,124,46,125,126,127,128,129,130,131,132,133,134,135,136,77,137,138,139],"windows","kape","triaging windows with kape","registry","browser","logs","windows-forensics","dfir","mft","mftecmd","data","prefetch","eric-zimmerman","digital-forensics","SET","collection","pecmd","artifact-collection",{"skillNo":141,"name":142,"nameZh":19,"description":143,"descriptionZh":19,"repositoryFullName":29,"ownerLogin":5,"ownerAvatarUrl":7,"ownerAccountNo":4,"ownerDisplayName":6,"repositoryNo":30,"starsCount":31,"licenseSpdxId":32,"licenseFileUrl":19,"sourceHtmlUrl":144,"categories":145,"keywords":147,"publishedAt":61},"01M6AGD5PW5J4EVZM958WD74ZQ","triaging-vulnerabilities-with-ssvc-framework","Triages and prioritizes vulnerabilities with CISA's Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree, weighing exploitation status (via the CISA KEV catalog and FIRST EPSS API), technical impact, automatability, and mission prevalence to output Track\u002FTrack*\u002FAttend\u002FAct decisions. Use when prioritizing vulnerability scan results (OpenVAS, Nessus, Qualys) for remediation planning beyond raw CVSS scores.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Ftriaging-vulnerabilities-with-ssvc-framework\u002FSKILL.md",[146],{"categoryNo":36,"categoryName":37,"taxonomyType":38,"taxonomyTypeDesc":39},[148,149,150,46,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166],"vulnerabilities","framework","triaging vulnerabilities with ssvc framework","status","planning","CISA","vulnerability-management","risk-management","nessus","qualys","openvas","cvss","remediation","risk","vulnerability","api","prioritization","ssvc","decision-tree",{"skillNo":168,"name":169,"nameZh":19,"description":170,"descriptionZh":19,"repositoryFullName":29,"ownerLogin":5,"ownerAvatarUrl":7,"ownerAccountNo":4,"ownerDisplayName":6,"repositoryNo":30,"starsCount":31,"licenseSpdxId":32,"licenseFileUrl":19,"sourceHtmlUrl":171,"categories":172,"keywords":174,"publishedAt":61},"01M6AGD24TTQQM4CXG69E3B9TJ","triaging-security-incident","Performs initial triage of security incidents using the NIST SP 800-61r3 and SANS PICERL frameworks, classifying incident type, assigning priority by business impact, and routing to the appropriate response team. Use when a SIEM\u002FEDR alert needs human classification, concurrent alerts must be prioritized, or a user report or threat-intel IOC match requires initial incident categorization.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Ftriaging-security-incident\u002FSKILL.md",[173],{"categoryNo":36,"categoryName":37,"taxonomyType":38,"taxonomyTypeDesc":39},[45,175,46,176,177,178,179,180,181,182,183,109,184,110,185,186,187,188,189,190],"triaging security incident","siem","file","ioc","soc","NIST-800-61","NIST","severity","edr","execution","analysis","classification","severity-classification","incident-triage","SANS-PICERL","SOC-operations",{"skillNo":192,"name":193,"nameZh":19,"description":194,"descriptionZh":19,"repositoryFullName":29,"ownerLogin":5,"ownerAvatarUrl":7,"ownerAccountNo":4,"ownerDisplayName":6,"repositoryNo":30,"starsCount":31,"licenseSpdxId":32,"licenseFileUrl":19,"sourceHtmlUrl":195,"categories":196,"keywords":198,"publishedAt":61},"01M6AGCYCY9QW562V4CDK3X2RY","triaging-security-incident-with-ir-playbook","Classifies and prioritizes security incidents using structured IR playbooks and SIEM\u002Fcase-management queries (Splunk, TheHive) to determine severity, assign response teams, and initiate the appropriate response procedures. Use when a new SOC alert needs triage, multiple concurrent incidents require prioritization, or automated triage rules need validation or tuning.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Ftriaging-security-incident-with-ir-playbook\u002FSKILL.md",[197],{"categoryNo":36,"categoryName":37,"taxonomyType":38,"taxonomyTypeDesc":39},[45,199,200,46,176,201,202,102,179,203,105,182,109,110,204,205,186,164,187],"playbook","triaging security incident with ir playbook","triage","teams","splunk","tuning","thehive",{"skillNo":207,"name":208,"nameZh":19,"description":209,"descriptionZh":19,"repositoryFullName":29,"ownerLogin":5,"ownerAvatarUrl":7,"ownerAccountNo":4,"ownerDisplayName":6,"repositoryNo":30,"starsCount":31,"licenseSpdxId":32,"licenseFileUrl":19,"sourceHtmlUrl":210,"categories":211,"keywords":213,"publishedAt":61},"01M6AGCTS4C98JBBW0BEADPHMR","triaging-security-alerts-in-splunk","Triages security alerts in Splunk Enterprise Security by classifying severity, investigating notable events, correlating related telemetry, and making escalation or closure decisions using SPL queries and the Incident Review dashboard. Use when SOC analysts face queued alerts from correlation searches, need to prioritize investigation order, or must document triage decisions for handoff to Tier 2\u002F3 analysts.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Ftriaging-security-alerts-in-splunk\u002FSKILL.md",[212],{"categoryNo":36,"categoryName":37,"taxonomyType":38,"taxonomyTypeDesc":39},[45,214,203,215,216,217,46,176,218,219,179,220,221,222,223,182,109,224,225,226],"security alerts","triaging security alerts in splunk","review","handoff","dashboard","search","Enterprise","SPL","correlation-search","escalation","t1566","notable-events","incident-review",{"skillNo":228,"name":229,"nameZh":19,"description":230,"descriptionZh":19,"repositoryFullName":29,"ownerLogin":5,"ownerAvatarUrl":7,"ownerAccountNo":4,"ownerDisplayName":6,"repositoryNo":30,"starsCount":31,"licenseSpdxId":32,"licenseFileUrl":19,"sourceHtmlUrl":231,"categories":232,"keywords":234,"publishedAt":61},"01M6AGCPF3H0TDCABRFP5WRHB6","tracking-threat-actor-infrastructure","Discovers and maps adversary-controlled infrastructure (C2 servers, phishing domains, exploit-kit hosts, bulletproof hosting) by pivoting across passive DNS, certificate transparency logs, Shodan\u002FCensys scans, WHOIS records, and network fingerprints (JARM\u002FJA3S). Use when tracking threat actor infrastructure, expanding a known IOC into related assets, or producing STIX-based threat intelligence during a CTI investigation.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Ftracking-threat-actor-infrastructure\u002FSKILL.md",[233],{"categoryNo":36,"categoryName":37,"taxonomyType":38,"taxonomyTypeDesc":39},[101,235,46,236,237,238,239,219,240,127,241,242,243,244,245,246,247,248,224,249],"tracking threat actor infrastructure","threat intelligence","development","create","capabilities","website","server","mitre-attack","threat-intelligence","cti","dns","network","jarm","seo","certificate",{"skillNo":251,"name":252,"nameZh":19,"description":253,"descriptionZh":19,"repositoryFullName":29,"ownerLogin":5,"ownerAvatarUrl":7,"ownerAccountNo":4,"ownerDisplayName":6,"repositoryNo":30,"starsCount":31,"licenseSpdxId":32,"licenseFileUrl":19,"sourceHtmlUrl":254,"categories":255,"keywords":266,"publishedAt":61},"01M6AGCJVEG504SF29PFJN0DQ1","testing-websocket-api-security","Tests WebSocket API implementations for missing upgrade-handshake authentication, Cross-Site WebSocket Hijacking (CSWSH), message injection, insufficient input validation, message-flooding DoS, and information leakage, using Burp Suite's WebSocket interception and the wscat CLI to craft malicious payloads. Use for real-time API penetration testing or CSWSH\u002Fauthorization-bypass assessments on WebSocket channels.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Ftesting-websocket-api-security\u002FSKILL.md",[256,257,260,261],{"categoryNo":93,"categoryName":94,"taxonomyType":38,"taxonomyTypeDesc":39},{"categoryNo":258,"categoryName":259,"taxonomyType":38,"taxonomyTypeDesc":39},"01JBSEEDCAT000000000000010","后端与接口",{"categoryNo":36,"categoryName":37,"taxonomyType":38,"taxonomyTypeDesc":39},{"categoryNo":262,"categoryName":263,"taxonomyType":264,"taxonomyTypeDesc":265},"01JBSEEDCAT000000000000030","开发工程师","PROFESSION","适用职业",[100,45,267,163,268,269,270,46,49,271,102,272,273,274,275,276,277,278,279],"websocket","testing websocket api security","cli","malicious","authentication","penetration testing","api-security","authorization","t1055","t1059","injection","real-time","cswsh",{"skillNo":281,"name":282,"nameZh":19,"description":283,"descriptionZh":19,"repositoryFullName":29,"ownerLogin":5,"ownerAvatarUrl":7,"ownerAccountNo":4,"ownerDisplayName":6,"repositoryNo":30,"starsCount":31,"licenseSpdxId":32,"licenseFileUrl":19,"sourceHtmlUrl":284,"categories":285,"keywords":288,"publishedAt":61},"01M6AGCEYZTY5JYWHN3T2H708A","testing-ransomware-recovery-procedures","Tests and validates ransomware recovery procedures - backup restore operations (e.g. with Restic), RTO\u002FRPO target verification, recovery sequencing, and clean-restore validation - to confirm organizational resilience against destructive ransomware attacks. Use when validating that recovery plans work under realistic conditions, measuring RTO\u002FRPO against business requirements, or testing restore integrity after simulated encryption.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Ftesting-ransomware-recovery-procedures\u002FSKILL.md",[286,287],{"categoryNo":93,"categoryName":94,"taxonomyType":38,"taxonomyTypeDesc":39},{"categoryNo":36,"categoryName":37,"taxonomyType":38,"taxonomyTypeDesc":39},[100,106,98,289,46,290,102,74,291,105,292,107,109,110,80,293,97,112,294,295],"testing ransomware recovery procedures","resilience","transfer","encryption","restic","rto","rpo",{"skillNo":297,"name":298,"nameZh":19,"description":299,"descriptionZh":19,"repositoryFullName":29,"ownerLogin":5,"ownerAvatarUrl":7,"ownerAccountNo":4,"ownerDisplayName":6,"repositoryNo":30,"starsCount":31,"licenseSpdxId":32,"licenseFileUrl":19,"sourceHtmlUrl":300,"categories":301,"keywords":304,"publishedAt":61},"01M6AGCBH88BM920VADS1XHRQ4","testing-prompt-injection-in-rag-pipelines","Probes Retrieval-Augmented Generation pipelines for indirect prompt injection via poisoned retrieved documents and embedding-space manipulation, using NVIDIA garak, Promptfoo red-team plugins, and Microsoft PyRIT against vector stores like FAISS, Chroma, Pinecone, or pgvector. Use when security-testing a RAG chatbot or document-Q&A system, validating retrieval guardrails, or gating CI\u002FCD on prompt-template\u002Fretriever changes.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Ftesting-prompt-injection-in-rag-pipelines\u002FSKILL.md",[302,303],{"categoryNo":93,"categoryName":94,"taxonomyType":38,"taxonomyTypeDesc":39},{"categoryNo":36,"categoryName":37,"taxonomyType":38,"taxonomyTypeDesc":39},[100,305,306,277,307,45,46,308,309,52,310,311,312,313,314,315,316,317,318,319],"prompt injection","rag","testing prompt injection in rag pipelines","documents","vector","red-team","NVIDIA","ai-security","Guardrails","owasp","llm-red-teaming","promptfoo","owasp-llm","pyrit","garak",{"skillNo":321,"name":322,"nameZh":19,"description":323,"descriptionZh":19,"repositoryFullName":29,"ownerLogin":5,"ownerAvatarUrl":7,"ownerAccountNo":4,"ownerDisplayName":6,"repositoryNo":30,"starsCount":31,"licenseSpdxId":32,"licenseFileUrl":19,"sourceHtmlUrl":324,"categories":325,"keywords":330,"publishedAt":61},"01M6AGC83NZ7Z07RQ2M2NYXCPT","testing-oauth2-implementation-flaws","Tests OAuth 2.0 and OpenID Connect implementations for authorization code interception, redirect URI manipulation, CSRF in OAuth flows, token leakage, scope escalation, and PKCE bypass, using Burp Suite Professional and the EsPReSSO extension to probe the authorization server, client, and token handling. Use when assessing OAuth2\u002FOIDC flows or SSO systems for misconfigurations enabling account takeover.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Ftesting-oauth2-implementation-flaws\u002FSKILL.md",[326,327,328,329],{"categoryNo":93,"categoryName":94,"taxonomyType":38,"taxonomyTypeDesc":39},{"categoryNo":258,"categoryName":259,"taxonomyType":38,"taxonomyTypeDesc":39},{"categoryNo":36,"categoryName":37,"taxonomyType":38,"taxonomyTypeDesc":39},{"categoryNo":262,"categoryName":263,"taxonomyType":264,"taxonomyTypeDesc":265},[100,331,332,45,46,49,333,50,271,241,273,334,335,223,274,276,336,337,163,338],"oauth2","testing oauth2 implementation flaws","connect","OAuth","sso","token-security","csrf","redirect-uri",{"skillNo":340,"name":341,"nameZh":19,"description":342,"descriptionZh":19,"repositoryFullName":29,"ownerLogin":5,"ownerAvatarUrl":7,"ownerAccountNo":4,"ownerDisplayName":6,"repositoryNo":30,"starsCount":31,"licenseSpdxId":32,"licenseFileUrl":19,"sourceHtmlUrl":343,"categories":344,"keywords":349,"publishedAt":61},"01M6AGC4CTZA1DKNZTW7HQPQ8Z","testing-mobile-api-authentication","Tests authentication and authorization mechanisms in mobile application APIs to identify broken authentication, insecure token management, session fixation, privilege escalation, and IDOR vulnerabilities. Use when performing API security assessments against mobile app backends, testing JWT implementations, evaluating OAuth flows, or assessing session management. Activates for requests involving mobile API auth testing, token security assessment, OAuth mobile flow testing, or API authorization bypass.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Ftesting-mobile-api-authentication\u002FSKILL.md",[345,346,347,348],{"categoryNo":93,"categoryName":94,"taxonomyType":38,"taxonomyTypeDesc":39},{"categoryNo":258,"categoryName":259,"taxonomyType":38,"taxonomyTypeDesc":39},{"categoryNo":36,"categoryName":37,"taxonomyType":38,"taxonomyTypeDesc":39},{"categoryNo":262,"categoryName":263,"taxonomyType":264,"taxonomyTypeDesc":265},[100,271,163,350,351,45,46,148,352,49,353,273,354,355,356,334,223,109,276,357],"testing mobile api authentication","android","auth","assessment","mobile-security","ios","flow","broken authentication",{"skillNo":359,"name":360,"nameZh":19,"description":361,"descriptionZh":19,"repositoryFullName":29,"ownerLogin":5,"ownerAvatarUrl":7,"ownerAccountNo":4,"ownerDisplayName":6,"repositoryNo":30,"starsCount":31,"licenseSpdxId":32,"licenseFileUrl":19,"sourceHtmlUrl":362,"categories":363,"keywords":366,"publishedAt":61},"01M6AGC133MF6RME4NXTZA4X3P","testing-jwt-token-security","Assessing JSON Web Token implementations for cryptographic weaknesses, algorithm confusion attacks, and authorization bypass vulnerabilities during security engagements.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Ftesting-jwt-token-security\u002FSKILL.md",[364,365],{"categoryNo":93,"categoryName":94,"taxonomyType":38,"taxonomyTypeDesc":39},{"categoryNo":36,"categoryName":37,"taxonomyType":38,"taxonomyTypeDesc":39},[100,45,367,368,46,148,369,49,271,370,274,371,276,372,373,374,336,375,376],"jwt","testing jwt token security","web","penetration-testing","web-application-security","web-security","burpsuite","t1505","application-security","web-application",{"skillNo":378,"name":379,"nameZh":19,"description":380,"descriptionZh":19,"repositoryFullName":29,"ownerLogin":5,"ownerAvatarUrl":7,"ownerAccountNo":4,"ownerDisplayName":6,"repositoryNo":30,"starsCount":31,"licenseSpdxId":32,"licenseFileUrl":19,"sourceHtmlUrl":381,"categories":382,"keywords":386,"publishedAt":61},"01M6AGBXFM7TK755GG53C1BK4N","testing-for-xxe-injection-vulnerabilities","Discovering and exploiting XML External Entity injection vulnerabilities to read server files, perform SSRF, and exfiltrate data during authorized penetration tests.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Ftesting-for-xxe-injection-vulnerabilities\u002FSKILL.md",[383,384,385],{"categoryNo":93,"categoryName":94,"taxonomyType":38,"taxonomyTypeDesc":39},{"categoryNo":258,"categoryName":259,"taxonomyType":38,"taxonomyTypeDesc":39},{"categoryNo":36,"categoryName":37,"taxonomyType":38,"taxonomyTypeDesc":39},[100,148,277,387,388,45,46,369,49,241,132,389,314,371,276,372,373,374,375,390],"xxe","testing for xxe injection vulnerabilities","ssrf","xml-injection",{"skillNo":392,"name":393,"nameZh":19,"description":394,"descriptionZh":19,"repositoryFullName":29,"ownerLogin":5,"ownerAvatarUrl":7,"ownerAccountNo":4,"ownerDisplayName":6,"repositoryNo":30,"starsCount":31,"licenseSpdxId":32,"licenseFileUrl":19,"sourceHtmlUrl":395,"categories":396,"keywords":399,"publishedAt":61},"01M6AGBT0WAJBFTXKXV6421P53","testing-for-xss-vulnerabilities","Tests web applications for reflected, stored, and DOM-based Cross-Site Scripting by injecting JavaScript payloads with Burp Suite (XSS extensions, Active Scan++) and browser tools, then bypassing sanitization and CSP to demonstrate session hijacking and user impersonation. Use for OWASP WSTG client-side injection testing or when evaluating input sanitization and output encoding coverage.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Ftesting-for-xss-vulnerabilities\u002FSKILL.md",[397,398],{"categoryNo":93,"categoryName":94,"taxonomyType":38,"taxonomyTypeDesc":39},{"categoryNo":36,"categoryName":37,"taxonomyType":38,"taxonomyTypeDesc":39},[100,148,400,401,45,46,402,369,126,314,403,109,77,276,277,404,405,406,407,408],"xss","testing for xss vulnerabilities","javascript","impersonation","OWASP-A03","applications","cross-site-scripting","client-side-security","JavaScript-injection",{"skillNo":410,"name":411,"nameZh":19,"description":412,"descriptionZh":19,"repositoryFullName":29,"ownerLogin":5,"ownerAvatarUrl":7,"ownerAccountNo":4,"ownerDisplayName":6,"repositoryNo":30,"starsCount":31,"licenseSpdxId":32,"licenseFileUrl":19,"sourceHtmlUrl":413,"categories":414,"keywords":417,"publishedAt":61},"01M6AGBPDBS8RY2R81W3JR82SN","testing-for-xss-vulnerabilities-with-burpsuite","Identifying and validating cross-site scripting vulnerabilities using Burp Suite's scanner, intruder, and repeater tools during authorized security assessments.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Ftesting-for-xss-vulnerabilities-with-burpsuite\u002FSKILL.md",[415,416],{"categoryNo":93,"categoryName":94,"taxonomyType":38,"taxonomyTypeDesc":39},{"categoryNo":36,"categoryName":37,"taxonomyType":38,"taxonomyTypeDesc":39},[100,148,373,400,418,45,46,369,49,370,314,419,77,371,276,372,374,375,376,406],"testing for xss vulnerabilities with burpsuite","scripting",1,18]