Browse reusable instructions for your AI tools. Copy and customize a prompt, or download a skill for a supported agent.
External SSL VPN / remote-access appliance attack matrix
Evidence-capture and PoC-redaction discipline for bug-bounty submissions
Configure iptables, nftables, and cloud firewalls. Implement network segmentation and traffic filtering. Use when securing network perimeters or implementing security zones.
Firmware penetration testing following the OWASP FSTM nine-stage flow: extraction, EMBA automation, Firmadyne/QEMU emulation, AFL++ fuzzing, and hands-on exploitation in authorized labs.
Configure GCP Cloud Audit Logs for compliance. Set up log routing and BigQuery analysis. Use when auditing GCP activity.
Secure secrets in Google Cloud Secret Manager. Configure IAM policies, integrate with GKE, and manage secret versions. Use when managing secrets in GCP environments.
Free/open reverse engineering with Ghidra (headless or GUI): decompilation, cross-references, scripting, and optional Ghidra MCP workflows when IDA is unavailable.
Authorized hardware and embedded interface security research: UART/JTAG discovery, debug-pad triage, secure-boot overview, and offline firmware analysis.
Manage secrets and PKI with HashiCorp Vault.
Hunt ASP.NET-specific surface
Hunt account takeover taxonomy
Hunting skill for auth bypass vulnerabilities.
Hunt Missing/Weak Rate Limiting
Hunting skill for business logic vulnerabilities.
Hunting skill for cache poison vulnerabilities.
Hunt CAPTCHA Bypass
Hunt CI/CD pipeline vulnerabilities
Hunt Clickjacking
Hunt cloud / infrastructure misconfigurations.
Hunt CORS Misconfiguration
Hunting skill for csrf vulnerabilities.
Hunt Insecure Deserialization
Skill-set loader for /hunt orchestrator.
Hunt mishandling of exceptional conditions
Try another platform, a broader search, or fewer filters.
Explore all resourcesResource formats: Prompts are ready to copy into a conversation. Skills install into the compatible agent shown on their page.
How it worksInclude the instructions, intended platforms, author, and license. Submissions are reviewed before publication.