business-logic-vuln
yaklang
Find security gaps in multi-step business workflows.
Application security
GitHub publisher101 Skills334.1k installs
Organization · yaklang.io Project · On GitHub since 2021
business-logic-vuln
yaklang
Find security gaps in multi-step business workflows.
Application security
csrf-cross-site-request-forgery
yaklang
Find CSRF gaps in your web app's defenses.
Web application security
heap-exploitation
yaklang
Heap exploit techniques matched to your glibc.
Binary exploitation
oauth-oidc-misconfiguration
yaklang
Find weak spots in your app's sign-in flow.
Authentication security
traffic-analysis-pcap
yaklang
Find hidden activity in your network captures.
Network forensics
vm-and-bytecode-reverse
yaklang
Decode custom bytecode to solve binary puzzles.
Reverse engineering
anti-debugging-techniques
yaklang
Make protected binaries work under a debugger.
Reverse engineering
binary-protection-bypass
yaklang
Find bypass paths for protected ELF binaries.
Binary exploitation
path-traversal-lfi
yaklang
Test web paths for file leaks and code execution.
Web security testing
cmdi-command-injection
yaklang
Find command injection even without visible output.
Application security
graphql-and-hidden-parameters
yaklang
Find hidden fields and access gaps in APIs.
API security
ssti-server-side-template-injection
yaklang
Find template injection in your web application.
Application security
format-string-exploitation
yaklang
Build memory-leak exploits for vulnerable binaries.
Binary exploitation
xxe-xml-external-entity
yaklang
Find file leaks in XML uploads and APIs.
Security testing
file-access-vuln
yaklang
Find the right security checks for file access.
Security testing
kernel-exploitation
yaklang
Build Linux kernel exploits for root access.
Kernel exploitation
http-parameter-pollution
yaklang
Find security gaps when web requests repeat fields.
Web security testing
deserialization-insecure
yaklang
Find exploitable flaws in how apps load saved data.
Application security
request-smuggling
yaklang
Find request mix-ups between proxies and servers.
Web security testing
browser-exploitation-v8
yaklang
Build V8 browser exploits that break out of the sandbox.
Browser exploitation
race-condition
yaklang
Find race conditions in one-time web actions.
Web security testing
csp-bypass-advanced
yaklang
Find gaps in a website's script security policy.
Web security
open-redirect
yaklang
Find unsafe redirects in your web application.
Web application security
symbolic-execution-tools
yaklang
Find inputs that unlock reverse-engineering puzzles.
Reverse engineering