Gives an AI agent offensive security playbooks for authorized testing, covering web and API attacks, Active Directory abuse, privilege escalation and reverse engineering. Use it for step-by-step attack guidance during bug bounties, pentests and CTF challenges.
@yaklang401/403 bypass playbook. Use when encountering access-denied responses on admin panels, API endpoints, or restricted paths.…
@yaklangActive Directory ACL abuse playbook. Use when exploiting misconfigured AD permissions including GenericAll, WriteDACL, DCSync…
@yaklangAD Certificate Services attack playbook. Use when targeting misconfigured AD CS for privilege escalation via ESC1-ESC13 template…
@yaklangKerberos attack playbook for Active Directory. Use when targeting AD authentication via AS-REP roasting, Kerberoasting,…
@yaklangAI/ML security playbook. Use when assessing model supply chain attacks (pickle RCE, poisoned weights), adversarial examples,…
@yaklangAndroid pentesting playbook. Use when testing Android applications for SSL pinning bypass, exported component abuse, WebView…
@yaklangAnti-debugging detection and bypass playbook. Use when reversing protected binaries that detect debuggers via ptrace, PEB flags,…
@yaklangAPI authentication and JWT abuse playbook. Use when testing bearer tokens, API keys, claim trust, header spoofing, rate limits,…
@yaklangAPI authorization and BOLA testing playbook. Use when APIs expose object identifiers, nested resources, hidden writable fields,…
@yaklangAPI reconnaissance and documentation review playbook. Use when discovering endpoints, schemas, versions, OpenAPI specs, hidden…
@yaklangEntry P1 category router for API security. Use when choosing between API recon, authorization, token abuse, and hidden-parameter…
@yaklangArbitrary write to RCE playbook. Use when you have an arbitrary write primitive (from heap exploitation, format string, or OOB…
@yaklangIs this you? Claim your profilePut a plugin at the top of Plugins, from $9
