mn-youssef
3 skills with substantive source documentation and an official publisher or observed installation demand. Read each skill’s original documentation through its card.
mn-youssefthreat-modeling
Use when starting a security assessment and you need to map an application's attack surface, enumerate trust boundaries, and rank what to test first — before auditing code or running tools. Produces a prioritized target list.
- instalacje
- 2
- GitHub Stars
- 46
- Aktualizacja
- 12 cze
mn-youssefaccess-control-testing
Use when testing whether users can access data or actions they shouldn't — IDOR/BOLA, horizontal and vertical privilege escalation, multi-tenant isolation, forced browsing, function-level authorization (BFLA), and mass assignment. The 1 cause of real-world breaches.
- instalacje
- 1
- GitHub Stars
- 48
- Aktualizacja
- 12 cze
mn-youssefvulnerability-chaining
Use when you have multiple findings and need to combine them into realistic end-to-end attack paths — turning several low/medium issues into a single critical-impact exploit chain. The red-team-lead skill that ties the specialists' findings together into business impact.
- instalacje
- 1
- GitHub Stars
- 48
- Aktualizacja
- 12 cze