offensive-security▌

### offensive-osint-methodology - - **Skill Name**: osint-methodology - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.

### offensive-supply-chain - Comprehensive offensive methodology for software supply chain attacks covering the full kill chain from reconnaissance through exploitation. - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.

### offensive-graphql - Offensive methodology for attacking GraphQL APIs during penetration tests and bug bounty engagements. Covers the full attack lifecycle: endp - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.

### offensive-request-smuggling - - **Skill Name**: request-smuggling - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.

### offensive-xss - - **Skill Name**: xss - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.

### offensive-evil-twin - Evil Twin / KARMA / Mana access point methodology — rogue AP construction with hostapd-mana / wifiphisher / airgeddon, KARMA universal probe - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.

### offensive-wpa-enterprise - WPA/WPA2/WPA3-Enterprise (802.1X / EAP) attack methodology — EAP method identification (PEAP-MSCHAPv2, EAP-TTLS, EAP-TLS, EAP-GTC, EAP-PWD, - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.

### offensive-fast-checking - - **Skill Name**: fast-checking - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.

### offensive-idor - - **Skill Name**: idor - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.

### offensive-business-logic - Business logic vulnerability testing for web/mobile/API engagements. Covers workflow bypass, state machine violations, multi-step process ab - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.