yaklang

Public Agent Skills by yaklang on Lightlines.

• github:yaklang/401-403-bypass-techniques

  Provides a structured playbook for testing 401/403 bypasses through path, method, header, protocol, and combined techniques.

• github:yaklang/api-auth-and-jwt-abuse

  Guides testing of API authentication and JWT trust boundaries, including claims, headers, rate limits, and API keys.

• github:yaklang/api-recon-and-docs

  Discovers reachable API entrypoints, schemas, role differences, versions, mobile paths, GraphQL endpoints, and undocumented parameters.

• github:yaklang/api-sec

  Routes API security issues to a deeper testing workflow based on the issue type.

• github:yaklang/code-obfuscation-deobfuscation

  Guides identification, classification, and removal of obfuscation from native binaries.

• github:yaklang/hack

  Routes authorized security work through an impact-first quality gate and observed-behavior methodology.

• github:yaklang/idor-broken-object-authorization

  Tests applications and APIs for IDOR, BOLA, BFLA, and related authorization flaws.

• github:yaklang/jwt-oauth-token-attacks

  Guides testing of JWT trust, signing, key handling, claims, bearer flows, and OAuth account binding.

• github:yaklang/recon-and-methodology

  Maps a target's assets, endpoints, technologies, and likely testing priorities for bug bounty work.

• github:yaklang/sqli-sql-injection

  Guides advanced SQL injection validation, database-specific exploitation, data exfiltration, filter evasion, and operating-system escalation.

• github:yaklang/xss-cross-site-scripting

  Guides advanced XSS testing with context-specific payloads, bypass techniques, and post-exploitation methods.