SecurityforTech
Official@securityfortech
Building Cybersecurity for Tech Companies
Agent Skills by SecurityforTech
Showing 41 vetted skills indexed across 1 GitHub repositories.
securityfortechdom-xss
Audit JavaScript for DOM XSS tainted data flow from sources to sinks.
securityfortechcors-misconfig
Detect and exploit CORS misconfigurations in web applications.
securityfortechclickjacking
Detect clickjacking vulnerabilities by embedding pages in iframes and analyzing framing headers.
securityfortechcspt
Analyze JavaScript fetch() and XHR requests for Client-Side Path Traversal vulnerabilities.
securityfortechcsrf
Detect and test CSRF vulnerabilities in web applications.
securityfortechopen-redirect
Identify and exploit open redirect vulnerabilities in web applications by analyzing redirect parameters and employing bypass techniques.
securityfortechdefault-credentials
Identify and exploit default or weak credentials on web login forms.
securityfortechjwt-misconfig
Identify and exploit JWT misconfigurations including algorithm confusion and weak HMAC secrets.
securityfortechauth-bypass
Bypass web application authentication via forced browsing and parameter tampering.
securityfortechpassword-reset-flaws
Identify and exploit password reset workflow vulnerabilities using Burp Suite and OWASP ZAP.
securityfortechinsecure-file-upload
Detect and exploit insecure file upload vulnerabilities in web applications.
securityfortechgraphql-idor-via-introspection-leak
Identify GraphQL IDOR vulnerabilities via schema introspection and resolver probing.
securityfortechbusiness-logic-flaws
Detect and exploit business logic flaws in web application workflows.
securityfortechcmd-injection
Detect and exploit OS command injection vulnerabilities using shell metacharacters and time-delay payloads.
securityfortechssrf
Detect and exploit SSRF vulnerabilities in user-controlled URL inputs.
securityfortechxxe
Detect and exploit XXE injection vulnerabilities in XML processing applications.
securityfortechxss-reflected
Detect and exploit reflected XSS vulnerabilities by injecting crafted payloads into HTTP responses.
securityfortechssti
Detect and exploit Server-Side Template Injection vulnerabilities in web applications.
securityfortechxss-stored
Detects and exploits stored cross-site scripting vulnerabilities in web applications.
securityfortechhttp-request-smuggling
Detect and exploit HTTP request smuggling via conflicting Content-Length and Transfer-Encoding headers.
securityfortechsql-injection
Detect and exploit SQL injection vulnerabilities in web applications.
securityfortechmass-assignment
Identify and exploit mass assignment vulnerabilities in web APIs and frameworks.
securityfortechbola-idor
Fuzz object identifiers in URLs, bodies, and headers to detect BOLA and IDOR vulnerabilities.
securityfortechpath-traversal
Exploit path traversal and file inclusion vulnerabilities in web applications.
Frequently Asked Questions About SecurityforTech
FAQPage SchemaWhat specific security tasks can I perform using these modules?▼
These modules enable comprehensive vulnerability assessment, including detection of injection flaws, authorization bypasses, session management weaknesses, and insecure mobile data storage. You can systematically audit web endpoints, mobile binaries, and pipeline configurations to identify and exploit security gaps.
Who is the target persona for these security modules?▼
The primary target personas are penetration testers, security researchers, and application security engineers. These professionals utilize the modules to perform rigorous security assessments, validate defensive controls, and identify exploitable vulnerabilities within complex web, mobile, and development environments.
What are the prerequisites for running these security modules?▼
Execution requires a standard environment capable of processing security test payloads, such as Burp Suite or OWASP ZAP for web testing. Mobile assessments require access to Android or iOS binaries, while CI/CD testing necessitates access to repository configuration files and build environment definitions.