mobile-ssl-pinning-bypass
yaklang
Inspect mobile app traffic past certificate checks.
Mobile security testing
yaklang
GitHub publisher101 Skills334.1k installs
Organization · yaklang.io Project · On GitHub since 2021
- 3.3k
- 3.3k
crlf-injection
yaklang
Find CRLF flaws in HTTP headers and server logs.
Web security testing
- 3.3k
insecure-source-code-management
yaklang
Find exposed source code and secrets on websites.
Web security testing
- 3.3k
web-cache-deception
yaklang
Find private data leaks in your website's cache.
Web security testing
- 3.3k
http-host-header-attacks
yaklang
Find Host header flaws in your web application.
Web application security
- 3.3k
dependency-confusion
yaklang
Find public-package risks in your private builds.
Supply-chain security
- 3.3k
expression-language-injection
yaklang
Test Java apps for expression injection.
Application security
+1 - 3.3k
subdomain-takeover
yaklang
Find abandoned services behind your subdomains.
Security testing
- 3.3k
csv-formula-injection
yaklang
Find formula injection in spreadsheet exports.
Application security
- 3.3k
jndi-injection
yaklang
Test Java apps for JNDI injection weaknesses.
Application security
- 3.3k
active-directory-acl-abuse
yaklang
Turn Active Directory permissions into admin access.
Security testing
AD+1 - 3.3k
clickjacking
yaklang
Check if hidden clicks can trigger account actions.
Web security
- 3.3k
http2-specific-attacks
yaklang
Find HTTP/2 flaws beyond basic request smuggling.
Web security testing
- 3.3k
saml-sso-assertion-attacks
yaklang
Find assertion trust flaws in SAML sign-ins.
SSO security testing
- 3.3k
active-directory-kerberos-attacks
yaklang
Plan Kerberos attacks on Active Directory.
Security testing
AD - 3.3k
hash-attack-techniques
yaklang
Find the right hash attack for your CTF challenge.
Cryptanalysis
- 3.3k
linux-privilege-escalation
yaklang
Find a path from a Linux shell to root access.
Penetration testing
- 3.3k
active-directory-certificate-services
yaklang
Find paths to admin access through AD certificates.
Penetration testing
AD+1 - 3.3k
arbitrary-write-to-rce
yaklang
Find a path from memory writes to code execution.
Binary exploitation
- 3.3k
ai-ml-security
yaklang
Find security weaknesses in your AI systems.
AI security
- 3.3k
dns-rebinding-attacks
yaklang
Test browser access to hidden internal services.
Penetration testing
- 3.3k
prototype-pollution
yaklang
Find prototype pollution in JavaScript apps.
Application security
- 3.3k
defi-attack-patterns
yaklang
Spot attack risks in decentralized finance.
DeFi security
- 3.3k
dangling-markup-injection
yaklang
Capture page secrets without running JavaScript.
Web security