Agent Skills by NwN
Showing 65 vetted skills indexed across 1 GitHub repositories.
lNwNlfile-access-vuln
Route security testing for file access and upload workflows by diagnosing parameter-to-path mappings.
lNwNldependency-confusion
Detect dependency confusion risks where internal package names resolve to public registries.
lNwNlinjection-checking
Classify injection vulnerabilities by routing attacker-controlled input to the correct sink-focused skill.
lNwNlprototype-pollution
Detect prototype pollution vulnerabilities in JavaScript via targeted payloads.
lNwNlunauthorized-access-common-services
Exploit exposed unauthenticated management services using port-scoped attack playbooks.
lNwNlsaml-sso-assertion-attacks
Detect SAML SSO assertion, signature, and routing vulnerabilities.
lNwNlapi-sec
Route API security testing to the appropriate workflow based on observed endpoint signals.
lNwNlssti-server-side-template-injection
Fingerprint server-side template injection engines using polyglot probes and math evaluation.
lNwNlmacos-process-injection
Analyze macOS process injection vectors via DYLD, XPC, Mach IPC, and Electron runtime features.
lNwNlformat-string-exploitation
Exploit format-string vulnerabilities to leak stack memory and write arbitrary values.
lNwNlsteganography-techniques
Detect and extract hidden steganography payloads from images, audio, files, and text.
lNwNlcsv-formula-injection
Detect and document CSV-to-spreadsheet formula injection vectors for SLDA.
lNwNlwebsocket-security
Detect WebSocket security weaknesses in handshake validation, session binding, and message semantics.
lNwNlgraphql-and-hidden-parameters
Probes GraphQL schemas to identify hidden parameters and authorization gaps.
lNwNlbrowser-exploitation-v8
Plan V8 JavaScript engine exploitation chains from bug classes to sandbox escape vectors.
lNwNltraffic-analysis-pcap
Analyze PCAP files with Wireshark/tshark to extract forensic evidence and indicators of compromise.
lNwNllinux-privilege-escalation
Organizes Linux enumeration and selects exploit paths for privilege escalation.
lNwNlai-ml-security
Identify security weaknesses across AI/ML model supply chains and adversarial threats.
lNwNlarbitrary-write-to-rce
Convert arbitrary write primitives into code execution across glibc versions.
lNwNlhack
Route web and API security testing toward likely bug-bounty vulnerability classes.
lNwNltunneling-and-pivoting
Establish network tunnels and pivot routes to access internal services.
lNwNlnetwork-protocol-attacks
Orchestrate layer 2/3 network protocol attacks for credential capture and relay.
lNwNlclassical-cipher-analysis
Identify and decrypt classical ciphers using frequency analysis and Kasiski examination.
lNwNlapi-recon-and-docs
Enumerate API endpoints, schemas, and undocumented parameters for security testing.