Topic: security
1,299 skills in this topic.
-
ai-threat-testing
Offensive AI security testing and exploitation framework. Systematically tests LLM applications for OWASP Top 10 vulnerabilities including prompt injection, model extraction, data poisoning, and supply chain attacks. Integrates with pentest workflows to discover and exploit AI-specific threats.
transilienceai/communitytools 129
-
api-security
API security testing - GraphQL, REST API, WebSocket, and Web-LLM attack techniques.
transilienceai/communitytools 129
-
cve-poc-generator
CVE research, standalone PoC script and report generation. Given a CVE ID, researches NVD and advisories, generates a safe Python PoC, and writes a detailed vulnerability report.
transilienceai/communitytools 129
-
essential-tools
Core pentesting tools and methodology - Burp Suite usage, Playwright automation, testing methodology, and professional reporting standards.
transilienceai/communitytools 129
-
github-workflow
GitHub workflow automation — branching, committing, pushing, pull requests, issues, and code review. Use when asked to commit, push, create PRs/branches/issues, or manage git workflow.
transilienceai/communitytools 129
-
hackerone
HackerOne bug bounty automation - parses scope CSVs, deploys parallel pentesting agents for each asset, validates PoCs, and generates platform-ready submission reports. Use when testing HackerOne programs or preparing professional vulnerability submissions.
transilienceai/communitytools 129
-
reconnaissance
Domain assessment and web application mapping - subdomain discovery, port scanning, endpoint enumeration, API discovery, and attack surface analysis.
transilienceai/communitytools 129
-
server-side
Server-side vulnerability testing - SSRF, HTTP Request Smuggling, Path Traversal, File Upload, Insecure Deserialization, and Host Header injection.
transilienceai/communitytools 129
-
skiller
transilienceai/communitytools 129
-
social-engineering
Social engineering testing - phishing, pretexting, vishing, and physical security assessment techniques.
transilienceai/communitytools 129
-
backend-inferencer
Infers backend technologies including servers, languages, frameworks, databases, and CMS
transilienceai/communitytools 129
-
cdn-waf-fingerprinter
Identifies CDNs (Cloudflare, Akamai, Fastly) and WAFs
transilienceai/communitytools 129
-
certificate-transparency
Queries CT logs for certificates and extracts SANs for subdomain discovery
transilienceai/communitytools 129
-
cloud-infra-detector
Detects cloud providers (AWS, Azure, GCP) and PaaS platforms
transilienceai/communitytools 129
-
dns-intelligence
Extracts technology signals from DNS records (MX, TXT, NS, CNAME, SRV)
transilienceai/communitytools 129
-
domain-discovery
Discovers official company domain via web search, WHOIS, and common TLD patterns
transilienceai/communitytools 129
-
evidence_formatter
transilienceai/communitytools 129
-
frontend-inferencer
Infers frontend technologies including React, Angular, Vue, jQuery, Bootstrap, etc.
transilienceai/communitytools 129
-
job-posting-analysis
Extracts technology requirements from job postings and career pages
transilienceai/communitytools 129
-
json_report_generator
transilienceai/communitytools 129
-
report_exporter
transilienceai/communitytools 129
-
security-posture-analyzer
Analyzes security headers, CSP, HSTS, WAF presence, and security.txt
transilienceai/communitytools 129
-
web-archive-analysis
Uses Wayback Machine to detect technology migrations over time
transilienceai/communitytools 129
-
transilience-report-style
transilienceai/communitytools 129