hack

Name: hack
Author: Prohao42

91stars8forks

How to install hack?

prohao42/aimy-skill/hack

$npx -y skills add Prohao42/aimy-skill --skill hack

Installs into the current project.

Summary

--- name: hack description: >- Entry P0 primary router for HackSkills. Use when the task involves web application testing, API security assessment, recon, vulnerability triage, exploit path planning, or choosing the right next category skill before any deep topic sk

Files · 1

View on GitHub

SKILL.md

1	# HACKING SKILLS / HackSkills
2
3	## Overview
4
5	This is a top-level routing skill for bug bounty, web security, API security, and authorized penetration testing.
6
7	Its core role is not to replace all specialized techniques, but to help the agent:
8
9	1. First determine the testing phase (Recon / Validation / Privilege Escalation / Chain building)
10	2. Then select the correct vulnerability category
11	3. Avoid relying only on baseline model memory; prefer structured methodology
12	4. Prioritize boundary conditions AI often misses but that matter in real engagements
13
14	## Trust Model
15
16	- This knowledge base emphasizes content safety and auditability.
17	- Use this only within authorized targets, legitimate research, defensive validation, and bug-bounty-approved rules.
18	- Do not use these techniques for unauthorized attacks.
19
20	## When to Use This Skill
21
22	Use this skill first in the following scenarios:
23
24	- You just received a new bug bounty target and do not know where to start
25	- You need to decide whether to load XSS / SQLi / SSRF / IDOR / JWT / API tracks first
26	- You want the agent to perform Web/API security testing with a more stable methodology
27	- You need to route scattered findings to the right attack surface
28	- You want AI to miss fewer critical test points in security work
29
30	## Operating Model
31
32	### Step 1: Start with Recon and context validation
33
34	Collect first:
35
36	- Target type: classic web, REST API, mobile backend, admin panel, payment flow, file upload, GraphQL
37	- Identity and permission model: anonymous, regular user, admin, multi-tenant
38	- Input locations: URL, query parameters, JSON, headers, cookies, filenames, imported files, templates, reflection points
39	- Output locations: HTML, attributes, JS, PDF, email, logs, background tasks, mobile endpoints
40
41	### Step 2: Route by observed behavior
42
43	\| Signal \| Priority direction \|
44	\|---\|---\|
45	\| Input reflects into HTML / JS \| XSS / SSTI \|
46	\| Server actively fetches URL / hostname \| SSRF \|
47	\| Accepts XML / Office / SVG \| XXE \|
48	\| Path, filename, or download endpoint is controllable \| Path Traversal / LFI \|
49	\| Many object IDs appear in APIs \| IDOR / BOLA / BFLA \|
50	\| Login, reset password, 2FA, sessions \| Auth Bypass / JWT / OAuth \|
51	\| Multi-step transactions, coupons, pricing, inventory \| Business Logic \|
52	\| MongoDB / JSON query syntax exposure \| NoSQL Injection \|
53	\| CLI tools, image processing, importers \| Command Injection \|
54	\| HTTP parsing anomalies / front-back framing mismatch \| Request Smuggling \|
55	\| Node.js JSON handling / controllable `__proto__` \| Prototype Pollution \|
56	\| PHP weak comparison / 0e hash / loose conditions \| Type Juggling \|
57	\| Repeated parameter names / WAF-app parsing mismatch \| HTTP Parameter Pollution \|
58	\| One-time operations (coupon/inventory/reset) \| Race Condition \|
59	\| XML/XSLT template processing \| XSLT Injection \|
60	\| Accessible .git/.svn/.env paths \| Insecure SCM \|
61	\| CSV/Excel export features \| CSV Formula Injection \|
62	\| WebSocket protocol upgrades \| WebSocket Security \|
63	\| Internal package names / supply-chain inventory \| Dependency Confusion \|
64
65	### Step 3: Use the most likely-hit testing order
66
67	1. Recon / Methodology
68	2. API Security / Auth / IDOR
69	3. XSS / SQLi / SSRF / SSTI / XXE
70	4. Business Logic / Race Condition
71	5. Chained exploits and privilege-escalation paths
72
73	## Core Skill Map
74
75	If you have the full repository, prioritize using these topic documents together:
76
77	- [Recon and Methodology](../recon-and-methodology/SKILL.md)
78	- [XSS Cross Site Scripting](../xss-cross-site-scripting/SKILL.md)
79	- [SQLi SQL Injection](../sqli-sql-injection/SKILL.md)
80	- [SSRF Server Side Request Forgery](../ssrf-server-side-request-forgery/SKILL.md)
81	- [XXE XML External Entity](../xxe-xml-external-entity/SKILL.md)
82	- [SSTI Server Side Template Injection](../ssti-server-side-template-injection/SKILL.md)
83	- [IDOR Broken Object Authorization](../idor-broken-object-authorization/SKILL.md)
84	- [CMDi Command Injection](../cmdi-command-injection/SKILL.md)
85	- [Path Traversal LFI](../path-traversal-lfi/SKILL.md)
86	- [CSRF Cross Site Request Forgery](../csrf-cross-site-request-forgery/SKILL.md)
87	- [API Security Router](../api-sec/SKILL.md)
88	- [JWT OAuth Token Attacks](../jwt-oauth-token-attacks/SKILL.md)
89	- [OAuth OIDC Misconfiguration](../oauth-oidc-misconfiguration/SKILL.md)
90	- [CORS Cross Origin Misconfiguration](../cors-cross-origin-misconfiguration/SKILL.md)
91	- [SAML SSO Assertion Attacks](../saml-sso-assertion-attacks/SKILL.md)
92	- [Authentication Bypass](../authbypass-authentication-flaws/SKILL.md)
93	- [Business Logic Vulnerabilities](../business-logic-vulnerabilities/SKILL.md)
94	- [Upload Insecure Files](../upload-insecur

People who liked this also viewed

6 picks

Type

hack

91stars8forks

View on GitHub

How to install hack?

prohao42/aimy-skill/hack

$npx -y skills add Prohao42/aimy-skill --skill hack

Installs into the current project.

Summary

Files · 1

View on GitHub

SKILL.md

1	# HACKING SKILLS / HackSkills
2
3	## Overview
4
5	This is a top-level routing skill for bug bounty, web security, API security, and authorized penetration testing.
6
7	Its core role is not to replace all specialized techniques, but to help the agent:
8
9	1. First determine the testing phase (Recon / Validation / Privilege Escalation / Chain building)
10	2. Then select the correct vulnerability category
11	3. Avoid relying only on baseline model memory; prefer structured methodology
12	4. Prioritize boundary conditions AI often misses but that matter in real engagements
13
14	## Trust Model
15
16	- This knowledge base emphasizes content safety and auditability.
17	- Use this only within authorized targets, legitimate research, defensive validation, and bug-bounty-approved rules.
18	- Do not use these techniques for unauthorized attacks.
19
20	## When to Use This Skill
21
22	Use this skill first in the following scenarios:
23
24	- You just received a new bug bounty target and do not know where to start
25	- You need to decide whether to load XSS / SQLi / SSRF / IDOR / JWT / API tracks first
26	- You want the agent to perform Web/API security testing with a more stable methodology
27	- You need to route scattered findings to the right attack surface
28	- You want AI to miss fewer critical test points in security work
29
30	## Operating Model
31
32	### Step 1: Start with Recon and context validation
33
34	Collect first:
35
36	- Target type: classic web, REST API, mobile backend, admin panel, payment flow, file upload, GraphQL
37	- Identity and permission model: anonymous, regular user, admin, multi-tenant
38	- Input locations: URL, query parameters, JSON, headers, cookies, filenames, imported files, templates, reflection points
39	- Output locations: HTML, attributes, JS, PDF, email, logs, background tasks, mobile endpoints
40
41	### Step 2: Route by observed behavior
42
43	\| Signal \| Priority direction \|
44	\|---\|---\|
45	\| Input reflects into HTML / JS \| XSS / SSTI \|
46	\| Server actively fetches URL / hostname \| SSRF \|
47	\| Accepts XML / Office / SVG \| XXE \|
48	\| Path, filename, or download endpoint is controllable \| Path Traversal / LFI \|
49	\| Many object IDs appear in APIs \| IDOR / BOLA / BFLA \|
50	\| Login, reset password, 2FA, sessions \| Auth Bypass / JWT / OAuth \|
51	\| Multi-step transactions, coupons, pricing, inventory \| Business Logic \|
52	\| MongoDB / JSON query syntax exposure \| NoSQL Injection \|
53	\| CLI tools, image processing, importers \| Command Injection \|
54	\| HTTP parsing anomalies / front-back framing mismatch \| Request Smuggling \|
55	\| Node.js JSON handling / controllable `__proto__` \| Prototype Pollution \|
56	\| PHP weak comparison / 0e hash / loose conditions \| Type Juggling \|
57	\| Repeated parameter names / WAF-app parsing mismatch \| HTTP Parameter Pollution \|
58	\| One-time operations (coupon/inventory/reset) \| Race Condition \|
59	\| XML/XSLT template processing \| XSLT Injection \|
60	\| Accessible .git/.svn/.env paths \| Insecure SCM \|
61	\| CSV/Excel export features \| CSV Formula Injection \|
62	\| WebSocket protocol upgrades \| WebSocket Security \|
63	\| Internal package names / supply-chain inventory \| Dependency Confusion \|
64
65	### Step 3: Use the most likely-hit testing order
66
67	1. Recon / Methodology
68	2. API Security / Auth / IDOR
69	3. XSS / SQLi / SSRF / SSTI / XXE
70	4. Business Logic / Race Condition
71	5. Chained exploits and privilege-escalation paths
72
73	## Core Skill Map
74
75	If you have the full repository, prioritize using these topic documents together:
76
77	- [Recon and Methodology](../recon-and-methodology/SKILL.md)
78	- [XSS Cross Site Scripting](../xss-cross-site-scripting/SKILL.md)
79	- [SQLi SQL Injection](../sqli-sql-injection/SKILL.md)
80	- [SSRF Server Side Request Forgery](../ssrf-server-side-request-forgery/SKILL.md)
81	- [XXE XML External Entity](../xxe-xml-external-entity/SKILL.md)
82	- [SSTI Server Side Template Injection](../ssti-server-side-template-injection/SKILL.md)
83	- [IDOR Broken Object Authorization](../idor-broken-object-authorization/SKILL.md)
84	- [CMDi Command Injection](../cmdi-command-injection/SKILL.md)
85	- [Path Traversal LFI](../path-traversal-lfi/SKILL.md)
86	- [CSRF Cross Site Request Forgery](../csrf-cross-site-request-forgery/SKILL.md)
87	- [API Security Router](../api-sec/SKILL.md)
88	- [JWT OAuth Token Attacks](../jwt-oauth-token-attacks/SKILL.md)
89	- [OAuth OIDC Misconfiguration](../oauth-oidc-misconfiguration/SKILL.md)
90	- [CORS Cross Origin Misconfiguration](../cors-cross-origin-misconfiguration/SKILL.md)
91	- [SAML SSO Assertion Attacks](../saml-sso-assertion-attacks/SKILL.md)
92	- [Authentication Bypass](../authbypass-authentication-flaws/SKILL.md)
93	- [Business Logic Vulnerabilities](../business-logic-vulnerabilities/SKILL.md)
94	- [Upload Insecure Files](../upload-insecur

People who liked this also viewed

6 picks

Type