Agent Skills by Bingo
Showing 104 vetted skills indexed across 1 GitHub repositories.
bingooksql-injection-advanced
Automates detection and extraction of SQL injection vulnerabilities in web applications.
bingookapi_security
Discover and test vulnerabilities in RESTful APIs, GraphQL APIs, and JWT tokens.
bingookauth_attack
Detect authentication vulnerabilities in web applications using Python.
bingookweb_vuln
Automate detection and exploitation of XSS, SSRF, LFI, SSTI, RCE, and XXE vulnerabilities in web applications.
bingookWAF BYPASS MASTERY
Automate WAF bypass and penetration testing with SQL injection, XSS, and SSRF techniques.
bingookfile-access-vuln
Automate testing of file access and upload vulnerabilities in web applications.
bingookdependency-confusion
Identify and analyze package manager dependency confusion vulnerabilities across ecosystems.
bingookinjection-checking
Route injection testing workflows based on input context.
bingookcmdi-command-injection
Provide command injection payloads, bypass techniques, and blind detection strategies for web applications.
bingookprototype-pollution
Detect prototype pollution vulnerabilities in JavaScript applications with payloads and patterns.
bingookunauthorized-access-common-services
Exploit unauthenticated management services like Redis, Rsync, and PHP-FPM.
bingooksaml-sso-assertion-attacks
Validate SAML assertion signatures, audiences, recipients, and XML parsing.
bingookapi-sec
Categorize API security testing into recon, authorization, token, and parameter issues.
bingookssti-server-side-template-injection
Identify and exploit Server-Side Template Injection vulnerabilities across templating engines.
bingookmacos-process-injection
Provides macOS code injection via DYLD hijacking, XPC exploits, Mach ports, MIG abuse, and Electron targeting.
bingookformat-string-exploitation
Exploit format string vulnerabilities for stack reads and arbitrary writes.
bingookhttp-host-header-attacks
Detects and mitigates Host header vulnerabilities in web applications.
bingooksteganography-techniques
Detect hidden data in images, audio, files, and text.
bingookcsv-formula-injection
Detect CSV and spreadsheet formula injection vulnerabilities across Excel, LibreOffice Calc, and Google Sheets.
bingookdefi-attack-patterns
Analyze DeFi protocols for flash loan, oracle, and governance attack patterns.
bingookwebsocket-security
Detect and mitigate WebSocket security flaws using wsrepl, ws-harness, and Burp Suite.
bingookgraphql-and-hidden-parameters
Discover and exploit GraphQL API vulnerabilities via introspection and hidden parameters.
bingookbrowser-exploitation-v8
Exploit JavaScript engine vulnerabilities in Chrome/Chromium via V8 JIT type confusion.
bingookxxe-xml-external-entity
Detect and exploit XML External Entity vulnerabilities in XML-based systems.