yaklang
103 skills with substantive source documentation and an official publisher or observed installation demand. Read each skill’s original documentation through its card.
yaklangmacos-security-bypass
macOS security bypass playbook. Use when targeting macOS endpoints and need to bypass TCC, Gatekeeper, SIP, sandbox, code signing, or entitlement-based protections during authorized red team or pentest engagements.
- 導入数
- 1
- GitHub Stars
- 2537
- 更新日
- 9月13日
yaklangopen-redirect
Open redirect playbook. Use when URL parameters, form actions, or JavaScript sinks control navigation targets and may redirect users to attacker-controlled destinations.
- 導入数
- 1
- GitHub Stars
- 2537
- 更新日
- 9月13日
yaklangrsa-attack-techniques
RSA attack playbook for CTF and real-world cryptanalysis. Use when given RSA parameters (n, e, c) and need to recover plaintext by exploiting weak keys, small exponents, shared factors, or padding oracles.
- 導入数
- 1
- GitHub Stars
- 2537
- 更新日
- 9月13日
yaklangsqli-sql-injection
SQL injection playbook. Use when input reaches SQL queries, authentication logic, sorting, filtering, reporting, or DB-specific blind and out-of-band execution paths.
- 導入数
- 1
- GitHub Stars
- 2537
- 更新日
- 9月13日
yaklangsubdomain-takeover
Subdomain takeover detection and exploitation playbook. Use when targets have dangling CNAME/NS/MX records pointing to deprovisioned cloud resources, expired third-party services, or unclaimed SaaS tenants that an attacker can register to serve content under the victim's domain.
- 導入数
- 1
- GitHub Stars
- 2537
- 更新日
- 9月13日
yaklangtunneling-and-pivoting
Tunneling and pivoting playbook. Use when establishing network tunnels through compromised hosts including SSH tunneling, Chisel, Ligolo-ng, socat, DNS/ICMP/HTTP tunneling, ProxyChains, and multi-layer pivoting strategies.
- 導入数
- 1
- GitHub Stars
- 2537
- 更新日
- 9月13日
yaklangunauthorized-access-common-services
Unauthorized access playbook for common exposed services. Use when Redis, Rsync, PHP-FPM, AJP/Ghostcat, Hadoop YARN, H2 Console, or similar management interfaces are exposed without authentication.
- 導入数
- 1
- GitHub Stars
- 2537
- 更新日
- 9月13日