yaklang/hack-skills
Helping AI Agent become an awesome practical hacker!
ARCHETYPE
Skill Collector
Ten-plus skills loaded on demand. A procedural-knowledge library.
Copy this rig
# review before running: this installs third-party code
$ npx degit yaklang/hack-skills/skills ./rig-hack-skills/skills MCP servers are added to Claude Code at local scope; env vars are shown as YOUR_… placeholders — we never store values. Files are fetched with degit into a separate folder so you can review before merging.
$ npx degit yaklang/hack-skills/skills/401-403-bypass-techniques .claude/skills/401-403-bypass-techniques $ npx degit yaklang/hack-skills/skills/active-directory-acl-abuse .claude/skills/active-directory-acl-abuse $ npx degit yaklang/hack-skills/skills/active-directory-certificate-services .claude/skills/active-directory-certificate-services $ npx degit yaklang/hack-skills/skills/active-directory-kerberos-attacks .claude/skills/active-directory-kerberos-attacks $ npx degit yaklang/hack-skills/skills/ai-ml-security .claude/skills/ai-ml-security $ npx degit yaklang/hack-skills/skills/android-pentesting-tricks .claude/skills/android-pentesting-tricks $ npx degit yaklang/hack-skills/skills/anti-debugging-techniques .claude/skills/anti-debugging-techniques $ npx degit yaklang/hack-skills/skills/api-auth-and-jwt-abuse .claude/skills/api-auth-and-jwt-abuse $ npx degit yaklang/hack-skills/skills/api-authorization-and-bola .claude/skills/api-authorization-and-bola $ npx degit yaklang/hack-skills/skills/api-recon-and-docs .claude/skills/api-recon-and-docs $ npx degit yaklang/hack-skills/skills/api-sec .claude/skills/api-sec $ npx degit yaklang/hack-skills/skills/arbitrary-write-to-rce .claude/skills/arbitrary-write-to-rce $ npx degit yaklang/hack-skills/skills/attack-surface-mapping .claude/skills/attack-surface-mapping $ npx degit yaklang/hack-skills/skills/auth-sec .claude/skills/auth-sec $ npx degit yaklang/hack-skills/skills/authbypass-authentication-flaws .claude/skills/authbypass-authentication-flaws $ npx degit yaklang/hack-skills/skills/binary-protection-bypass .claude/skills/binary-protection-bypass $ npx degit yaklang/hack-skills/skills/browser-exploitation-v8 .claude/skills/browser-exploitation-v8 $ npx degit yaklang/hack-skills/skills/business-logic-vuln .claude/skills/business-logic-vuln $ npx degit yaklang/hack-skills/skills/business-logic-vulnerabilities .claude/skills/business-logic-vulnerabilities $ npx degit yaklang/hack-skills/skills/classical-cipher-analysis .claude/skills/classical-cipher-analysis $ npx degit yaklang/hack-skills/skills/clickjacking .claude/skills/clickjacking $ npx degit yaklang/hack-skills/skills/cmdi-command-injection .claude/skills/cmdi-command-injection $ npx degit yaklang/hack-skills/skills/code-obfuscation-deobfuscation .claude/skills/code-obfuscation-deobfuscation $ npx degit yaklang/hack-skills/skills/container-escape-techniques .claude/skills/container-escape-techniques $ npx degit yaklang/hack-skills/skills/cors-cross-origin-misconfiguration .claude/skills/cors-cross-origin-misconfiguration $ npx degit yaklang/hack-skills/skills/crlf-injection .claude/skills/crlf-injection $ npx degit yaklang/hack-skills/skills/csp-bypass-advanced .claude/skills/csp-bypass-advanced $ npx degit yaklang/hack-skills/skills/csrf-cross-site-request-forgery .claude/skills/csrf-cross-site-request-forgery $ npx degit yaklang/hack-skills/skills/csv-formula-injection .claude/skills/csv-formula-injection $ npx degit yaklang/hack-skills/skills/dangling-markup-injection .claude/skills/dangling-markup-injection $ npx degit yaklang/hack-skills/skills/defi-attack-patterns .claude/skills/defi-attack-patterns $ npx degit yaklang/hack-skills/skills/dependency-confusion .claude/skills/dependency-confusion $ npx degit yaklang/hack-skills/skills/deserialization-insecure .claude/skills/deserialization-insecure $ npx degit yaklang/hack-skills/skills/dns-rebinding-attacks .claude/skills/dns-rebinding-attacks $ npx degit yaklang/hack-skills/skills/email-header-injection .claude/skills/email-header-injection $ npx degit yaklang/hack-skills/skills/expression-language-injection .claude/skills/expression-language-injection $ npx degit yaklang/hack-skills/skills/file-access-vuln .claude/skills/file-access-vuln $ npx degit yaklang/hack-skills/skills/format-string-exploitation .claude/skills/format-string-exploitation $ npx degit yaklang/hack-skills/skills/ghost-bits-cast-attack .claude/skills/ghost-bits-cast-attack $ npx degit yaklang/hack-skills/skills/graphql-and-hidden-parameters .claude/skills/graphql-and-hidden-parameters
This rig commits no guardrails. Here is the community baseline instead — the deny/ask rules most often found across all 7,204 rigs:
{
"permissions": {
"deny": [
"Read(./.env)",
"Read(**/.env)",
"Read(~/.ssh/**)",
"Bash(rm -rf *)",
"Read(**/*.pem)",
"Bash(rm -rf /)",
"Bash(git push --force:*)",
"Bash(sudo *)",
"Read(.env)",
"Bash(rm -rf /*)",
"Read(./.env.*)",
"Read(~/.aws/**)",
"Bash(git push --force*)",
"Bash(rm -rf:*)",
"Read(**/*.key)",
"Read(**/.env.*)",
"Bash(sudo:*)",
"Bash(git reset --hard*)",
"Bash(git reset --hard:*)",
"Read(.env.*)"
],
"ask": [
"Bash(git push:*)",
"Bash(git push *)",
"Bash(git commit:*)",
"Bash(rm *)",
"Bash(rm:*)",
"Bash(git rebase *)",
"Bash(wget *)",
"Bash(npm publish:*)",
"Bash(git commit *)",
"Bash(gh pr merge *)"
]
}
} Skills (103)
401-403-bypass-techniquesactive-directory-acl-abuseactive-directory-certificate-servicesactive-directory-kerberos-attacksai-ml-securityandroid-pentesting-tricksanti-debugging-techniquesapi-auth-and-jwt-abuseapi-authorization-and-bolaapi-recon-and-docsapi-secarbitrary-write-to-rceattack-surface-mappingauth-secauthbypass-authentication-flawsbinary-protection-bypassbrowser-exploitation-v8business-logic-vulnbusiness-logic-vulnerabilitiesclassical-cipher-analysisclickjackingcmdi-command-injectioncode-obfuscation-deobfuscationcontainer-escape-techniquescors-cross-origin-misconfigurationcrlf-injectioncsp-bypass-advancedcsrf-cross-site-request-forgerycsv-formula-injectiondangling-markup-injectiondefi-attack-patternsdependency-confusiondeserialization-insecuredns-rebinding-attacksemail-header-injectionexpression-language-injectionfile-access-vulnformat-string-exploitationghost-bits-cast-attackgraphql-and-hidden-parametershackhash-attack-techniquesheap-exploitationhttp-host-header-attackshttp-parameter-pollutionhttp2-specific-attacksidor-broken-object-authorizationinjection-checkinginsecure-source-code-managementios-pentesting-tricksjndi-injectionjwt-oauth-token-attackskernel-exploitationkubernetes-pentestinglattice-crypto-attackslinux-lateral-movementlinux-privilege-escalationlinux-security-bypassllm-prompt-injectionmacos-process-injectionmacos-security-bypassmemory-forensics-volatilitymobile-ssl-pinning-bypassnetwork-protocol-attacksnosql-injectionntlm-relay-coercionoauth-oidc-misconfigurationopen-redirectpath-traversal-lfiprototype-pollution-advancedprototype-pollutionrace-conditionrecon-and-methodologyrecon-for-secrequest-smugglingreverse-shell-techniquesrsa-attack-techniquessaml-sso-assertion-attackssandbox-escape-techniquessmart-contract-vulnerabilitiessqli-sql-injectionssrf-server-side-request-forgeryssti-server-side-template-injectionstack-overflow-and-ropsteganography-techniquessubdomain-takeoversymbolic-execution-toolssymmetric-cipher-attackstraffic-analysis-pcaptunneling-and-pivotingtype-jugglingunauthorized-access-common-servicesupload-insecure-filesvm-and-bytecode-reversewaf-bypass-techniquesweb-cache-deceptionwebsocket-securitywindows-av-evasionwindows-lateral-movementwindows-privilege-escalationxslt-injectionxss-cross-site-scriptingxxe-xml-external-entity
Similar rigs
H-mmer/pentest-agents
Bug bounty agent framework for Claude Code, Codex, Gemini, Cursor, Windsurf, Copilot, and OpenClaw — 48 agents, 26 commands, 19 CLI tools, 2 MCP servers, autonomous hunt loops, exploit chain builder.
Orchestrator 73.0k tok ·
zebbern/claude-code-guide
Claude Code Guide - Setup, Commands, workflows, agents, skills & tips-n-tricks from beginner to power user!
Orchestrator 32.5k tok ·
0xGhostCAT/claude-ai-cyber-security-skills
30 Claude Code Skills + 60+ integrated tools for HackerOne/Bugcrowd bug bounty hunters
Skill Collector 2.3k tok ·
newmindsgroup/ai-agent-skills-library
Shared library of AI agent skills — works across Claude Code, Cursor, Codex, Windsurf, OpenCode, and Google Antigravity via a single universal installer.
Orchestrator 7.7k tok ·