Hunt spa api
Discover a single-page-app's hidden backend API from its public JS bundle, then test that API for broken access control / missing authentication.
Skills for your AI
AI skills for IT & software development
Hunt springboot
Hunt Spring Boot specific vulnerabilities
Hunt sqli
Hunting skill for sqli vulnerabilities.
Hunt ssrf
Hunting skill for ssrf vulnerabilities.
Hunt ssti
Hunt server-side template injection (SSTI) across Jinja2 (Flask/Django), Twig (Symfony), Freemarker (Java), ERB (Rails), Spring, Velocity, Mako, Thymeleaf, Smarty.
Hunt subdomain
Hunting skill for subdomain takeover vulnerabilities.
Hunt tls network
Hunt TLS/SSL and DNS misconfigurations
Hunt websocket
Hunt WebSocket vulnerabilities
Hunt xss
Hunting skill for xss vulnerabilities.
Hunt xxe
Hunting skill for xxe vulnerabilities.
Identity access management
Set up and manage SSO, SCIM provisioning, and MFA for startup teams using Google Workspace, Okta, or Azure AD.
Incident management
Implement incident management processes and escalation procedures. Configure on-call schedules and post-incident reviews. Use when managing production incidents.
Incident response
Handle security incidents with IR playbooks and procedures.
Ios redteam pipeline
End-to-end iOS red-team pipeline
Iso27001 compliance
Implement ISO 27001 Information Security Management System. Configure ISMS controls and risk management. Use when implementing enterprise security frameworks.
Jenkins
Create and manage Jenkins CI/CD pipelines, configure agents, manage plugins, and automate builds.
Kubernetes hardening
Implement Kubernetes security contexts, Pod Security Standards, and network policies.
Kubernetes ops
Deploy, scale, and manage Kubernetes workloads.
Kustomize
Customize Kubernetes manifests without templating using Kustomize.
Linux administration
System administration for Linux servers. Manage packages, services, and system configuration. Use when administering Linux systems.
Linux hardening
Apply CIS benchmarks and secure Linux servers.
Llm app security
Secure LLM-powered applications with input validation, output controls, tenant isolation, and abuse prevention.
Llm caching
Implement multi-layer LLM caching with exact match, semantic similarity, and provider-side prompt caching.
Llm cost optimization
Reduce LLM API and infrastructure costs through model selection, prompt caching, batching, caching, quantization, and self-hosting strategies.