AI Skills

linux-privilege-escalation

Linux privilege escalation playbook

linux-security-bypass

Linux security mechanism bypass playbook

llm-council

Run any question, idea, or decision through a council of 5 AI advisors who

llm-prompt-injection

LLM prompt injection playbook

macos-process-injection

MacOS process injection playbook

macos-security-bypass

MacOS security bypass playbook

memory-forensics-volatility

Memory forensics playbook using Volatility 2/3

mobile-ssl-pinning-bypass

Mobile SSL pinning bypass playbook

network-protocol-attacks

Network protocol attack playbook

nosql-injection

NoSQL injection playbook

ntlm-relay-coercion

NTLM relay and authentication coercion playbook

oauth-oidc-misconfiguration

OAuth and OIDC misconfiguration testing playbook

open-redirect

Open redirect playbook

path-traversal-lfi

Path traversal and LFI playbook

prototype-pollution

Prototype pollution testing for JavaScript stacks

prototype-pollution-advanced

Advanced prototype pollution playbook

race-condition

Race condition and TOCTOU testing for web apps

ralph-tui-prd

Generate a Product Requirements Document (PRD) for ralph-tui task orchestration

recon-and-methodology

Reconnaissance and methodology playbook

recon-for-sec

Entry P1 category router for reconnaissance and methodology

request-smuggling

HTTP request smuggling and desynchronization testing

reverse-shell-techniques

Reverse shell techniques playbook

rsa-attack-techniques

RSA attack playbook for CTF and real-world cryptanalysis

saml-sso-assertion-attacks

SAML SSO assertion attack playbook

sandbox-escape-techniques

Sandbox escape playbook

smart-contract-vulnerabilities

Smart contract vulnerability playbook

sqli-sql-injection

SQL injection playbook

ssrf-server-side-request-forgery

SSRF playbook. Use when the server fetches URLs, resolves hostnames

stack-overflow-and-rop

Stack overflow and ROP playbook

steganography-techniques

Steganography detection and extraction playbook

subdomain-takeover

Subdomain takeover detection and exploitation playbook

symbolic-execution-tools

Symbolic execution and constraint solving playbook

symmetric-cipher-attacks

Symmetric cipher attack playbook

threejs-3d-generator

Generate, texture, rig, animate, stylize, convert

threejs-aaa-graphics-builder

Upgrade Three.js games from prototype visuals

threejs-audio-generator

Generate, convert, clean, and integrate audio for Three.js browser games

threejs-debug-profiler

Debug and profile Three.js browser games: blank canvases

threejs-game-director

Entrypoint for building, upgrading, and finishing Three.js browser games

threejs-game-ui-designer

Design premium Three.js game UI: HUDs, menus, overlays, pause/win/lose screens

threejs-gameplay-systems

Build and iterate playable Three.js game systems: starter scaffold

threejs-image-generator

Generate and edit 2D image assets for Three.js games

threejs-qa-release

Verify and release Three.js browser games: playtest QA, automated bot playtests

traffic-analysis-pcap

Traffic analysis and PCAP forensics playbook

tunneling-and-pivoting

Tunneling and pivoting playbook

type-juggling

PHP type juggling and weak comparison (`==`) bypass

unauthorized-access-common-services

Unauthorized access playbook for common exposed services

upload-insecure-files

Insecure file upload playbook

vgpu

Build, debug, test, and optimize WebGPU projects

vm-and-bytecode-reverse

Custom VM and bytecode reverse engineering playbook

waf-bypass-techniques

WAF bypass methodology and generic evasion techniques