yaklang · Agent Skills

103 skills with substantive source documentation and an official publisher or observed installation demand. Read each skill’s original documentation through its card.

yaklang

Community

macos-security-bypass

macOS security bypass playbook. Use when targeting macOS endpoints and need to bypass TCC, Gatekeeper, SIP, sandbox, code signing, or entitlement-based protections during authorized red team or pentest engagements.

installs

1

GitHub stars

2.5K

Updated

Sep 13

MIT2 Files

View skill details →

yaklang

Community

open-redirect

Open redirect playbook. Use when URL parameters, form actions, or JavaScript sinks control navigation targets and may redirect users to attacker-controlled destinations.

installs

1

GitHub stars

2.5K

Updated

Sep 13

MIT1 Files

View skill details →

yaklang

Community

rsa-attack-techniques

RSA attack playbook for CTF and real-world cryptanalysis. Use when given RSA parameters (n, e, c) and need to recover plaintext by exploiting weak keys, small exponents, shared factors, or padding oracles.

installs

1

GitHub stars

2.5K

Updated

Sep 13

MIT2 Files

View skill details →

yaklang

Community

sqli-sql-injection

SQL injection playbook. Use when input reaches SQL queries, authentication logic, sorting, filtering, reporting, or DB-specific blind and out-of-band execution paths.

installs

1

GitHub stars

2.5K

Updated

Sep 13

MIT3 Files

View skill details →

yaklang

Community

subdomain-takeover

Subdomain takeover detection and exploitation playbook. Use when targets have dangling CNAME/NS/MX records pointing to deprovisioned cloud resources, expired third-party services, or unclaimed SaaS tenants that an attacker can register to serve content under the victim's domain.

installs

1

GitHub stars

2.5K

Updated

Sep 13

MIT1 Files

View skill details →

yaklang

Community

tunneling-and-pivoting

Tunneling and pivoting playbook. Use when establishing network tunnels through compromised hosts including SSH tunneling, Chisel, Ligolo-ng, socat, DNS/ICMP/HTTP tunneling, ProxyChains, and multi-layer pivoting strategies.

installs

1

GitHub stars

2.5K

Updated

Sep 13

MIT1 Files

View skill details →

yaklang

Community

unauthorized-access-common-services

Unauthorized access playbook for common exposed services. Use when Redis, Rsync, PHP-FPM, AJP/Ghostcat, Hadoop YARN, H2 Console, or similar management interfaces are exposed without authentication.

installs

1

GitHub stars

2.5K

Updated

Sep 13

MIT2 Files

View skill details →