yaklang.io Project
Official@yaklang
Offers a comprehensive security assessment framework for web, API, and binary exploitation, enabling advanced vulnerability research and penetration testing.
Agent Skills by yaklang.io Project
Showing 84 vetted skills indexed across 3 GitHub repositories.
yaklangjava-audit
Audits Java projects for vulnerable dependencies, hardcoded secrets, and framework misconfigurations.
yaklangcode-review
Audits source code for security vulnerabilities using grep pattern matching across multiple languages.
yaklangauthorization-bypass
Tests web applications for IDOR, privilege escalation, and business logic bypass vulnerabilities.
yaklanghow-to-use-browser
Automates browser interactions including navigation, form filling, and JavaScript evaluation via headless Chrome.
yaklangrecon-planning
Orchestrates attack surface reconnaissance by splitting synchronous probing from asynchronous sub-agent enumeration.
yaklangpentest-task-design
Orchestrates penetration testing workflows from reconnaissance through vulnerability verification to report generation.
yaklangsecurity-engineering
Guides authorized penetration testing, code auditing, and incident response with reproducible evidence standards.
yaklanglarge-skill
Provides large content for testing truncation and view offset functionality.
yaklangtest-skill
Verifies skill loading functionality with minimal test content.
yaklangyak
Routes Yaklang programming and hot-patch tasks to specialized skill topics.
yaklangyakit-native-plugin
Build Yakit native yak and mitm plugins with cli parameter forms and passive scanning hooks.
yaklangyakit-rightclick-plugin
Build Yakit codec right-click plugins with a single handle(input) function in Yaklang.
yaklangyakit-basic
Explains Yakit architecture, interface modes, feature routes, and engine connection for new users.
yaklangwebfuzzer-hotpatch
Implements Yakit Web Fuzzer hot-patch hooks for request encryption, response decryption, retries, and fuzztag payloads.
yaklangyaklang-syntax
Teaches Yaklang DSL syntax with runnable examples covering variables, functions, closures, and error handling.
yaklangyaklang-toolchain
Validates Yaklang hot-patch and codec plugins using the yak CLI's real gRPC execution paths.
yaklangyakit-data-extract-plugin
Extract unique URLs and login cookies from Yakit History to drive payload-based scanning.
yaklangmitm-hotpatch
Implements Yaklang hot-patch hooks to hijack, mirror, and mock HTTP traffic in Yakit MITM proxy.
yaklangyakit-ui-binding
Render logs, progress bars, tables, and charts from yak scripts in the Yakit UI.
yaklangglobal-hotpatch
Configure system-wide Yakit hot-patch hooks for transparent encryption, signing, and traffic tagging.
yaklangyaklang-database
Persist and query data in Yaklang scripts using SQLite, key-value storage, and payload dictionaries.
yaklangdependency-confusion
Tests package managers for dependency confusion where public registries override private packages.
yaklangprototype-pollution
Tests JavaScript applications for prototype pollution via __proto__ and constructor.prototype injection paths.
yaklangcsv-formula-injection
Tests CSV and spreadsheet exports for formula and DDE injection vulnerabilities.
Frequently Asked Questions About yaklang.io Project
FAQPage SchemaWhat specific security tasks does this framework support?▼
The framework supports comprehensive security assessments including web application penetration testing, API authorization validation, binary reverse engineering, memory forensics, and cryptographic analysis of classical and lattice-based ciphers.
Which technical personas benefit from these capabilities?▼
Security researchers, penetration testers, and red team operators utilize these capabilities to identify vulnerabilities in complex web services, cloud-native infrastructure, and compiled software binaries.
What are the primary dependencies for running these security modules?▼
Execution requires a compatible runtime environment capable of handling binary analysis libraries, network traffic capture processing, and constraint solving engines like Z3 or Unicorn for symbolic execution tasks.