testing▌

Identify and exploit authentication and session management vulnerabilities in web applications. Broken authentication consistently ranks in the OWASP Top 10 and can lead to account takeover, identity theft, and unauthorized access to sensitive systems. This skill covers testing methodologies for password policies, session handling, multi-factor authentication, and credential management.

Systematic JUnit 5 patterns for testing numeric limits, null/empty cases, and edge conditions. \n \n Covers numeric boundaries (Integer.MIN_VALUE, MAX_VALUE, zero), string edge cases (null, empty, whitespace), and collection sizes (empty, single, many) \n Includes parameterized test examples using @ParameterizedTest and @ValueSource for efficient multi-case coverage \n Demonstrates floating-point precision testing with tolerance-based assertions, overflow/underflow detection, and special values

Generates integration test cases for data access artifacts in a single target project. Tests validate behavior consistency when running against Oracle or PostgreSQL.

Fast, scalable Python testing with fixtures, parametrization, and framework integration. \n \n Fixture system provides dependency injection and setup/teardown with function, class, module, and session scopes \n Parametrization enables data-driven tests; markers organize tests by category (unit, integration, slow, custom) \n Built-in support for FastAPI, Django, and Flask with async/await testing via pytest-asyncio \n Rich assertion introspection, mocking via pytest-mock, coverage reporting, and

Comprehensive Kotlin testing patterns for writing reliable, maintainable tests following TDD methodology with Kotest and MockK.

Testing patterns specifically designed for AI-assisted development, where the same model writes code and reviews it — creating systematic blind spots that only automated tests can catch.

Comprehensive testing strategies for Perl applications using Test2::V0, Test::More, prove, and TDD methodology.

If you see unfamiliar placeholders or need to check which tools are connected, see CONNECTORS.md.

Conduct comprehensive SSH security assessments including enumeration, credential attacks, vulnerability exploitation, tunneling techniques, and post-exploitation activities. This skill covers the complete methodology for testing SSH service security.

Conduct comprehensive security assessments of cloud infrastructure across Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP). This skill covers reconnaissance, authentication testing, resource enumeration, privilege escalation, data extraction, and persistence techniques for authorized cloud security engagements.