offensive-security▌

### offensive-parameter-pollution - - **Skill Name**: parameter-pollution - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.

### offensive-ssrf - - **Skill Name**: ssrf - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.

### offensive-reporting - Penetration test and red team report writing methodology. Covers executive summary structuring (risk-led narrative for non-technical readers - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.

### offensive-file-upload - - **Skill Name**: file-upload - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.

### offensive-sqli - SQL injection testing skill for offensive security assessments and bug bounty hunting. Covers error-based, UNION-based, boolean/time-based b - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.

### offensive-deserialization - Insecure deserialization exploitation across Java, PHP, .NET, Python, Node.js, and Ruby. Covers gadget chain construction with ysoserial/php - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.

### offensive-open-redirect - - **Skill Name**: open-redirect - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.

### offensive-ssti - Dense description covering Server-Side Template Injection across Jinja2, Twig, Freemarker, Velocity, Pebble, Smarty, Mako, Handlebars, ERB, - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.

### offensive-bluetooth-classic - Bluetooth Classic (BR/EDR) attack methodology — device discovery, service enumeration via SDP, LMP/L2CAP layer attacks, legacy PIN cracking - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.

### offensive-wifi-recon - Wi-Fi reconnaissance methodology — adapter selection, monitor mode and packet injection setup, regulatory domain handling, multi-band airspa - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.