pentest-injection-engine

3

0x-Professor

Systematically test authorized targets for SQL, XSS, SSTI, XXE, command, and request-smuggling injection classes.

exploiting-http-request-smuggling

2

mukul975

Detecting and exploiting HTTP request smuggling vulnerabilities caused by Content-Length and Transfer-Encoding parsing discrepancies between front-end and back-end servers.

gcp-security-misconfiguration

hminooei

Use this skill when users need to audit, detect, or remediate Security Misconfiguration vulnerabilities (OWASP A05:2021) on Google Cloud Platform. This includes checking for unpatched flaws, default configurations, open admin endpoints, HTTP verb tampering, request smuggling, LFI/RFI vulnerabilities, disabled security hardening, and overly permissive firewall rules. Covers Cloud Armor WAF rule deployment, Security Command Center Health Analytics, Cloud Asset Inventory monitoring, SSL/TLS cipher hardening, and Apigee shared flow consolidation. Activate for GCP security hardening audits, default config reviews, admin endpoint protection, or OWASP A05 compliance.