Skill UI

This guide provides a comprehensive, advanced methodology for red team operations. It covers critical topics such as Operational Security (OPSEC), designing robust C2 infrastructure using redirectors, employing living-off-the-land techniques, mastering lateral movement, establishing persistence, and planning data exfiltration while evading modern defensive systems. Use this to plan complex red team engagements or deeply understand Advanced Persistent Threat (APT) TTPs.

A comprehensive methodology for discovering potential software vulnerabilities. It outlines advanced techniques including static analysis, dynamic analysis, fuzzing, taint tracking, and modern attack surface mapping (e.g., kernel, drivers). Ideal for professional code audits, bug bounty hunting, and building robust vulnerability research pipelines.

This skill provides a deep dive into the architecture of low-level keyloggers. It covers techniques such as kernel driver hooks, using WH_KEYBOARD_LL, ETW-based input capture, and analyzing user-mode vs. kernel-mode approaches. Use this methodology to understand input capture mechanisms, research EDR evasion methods, or analyze malware architecture for advanced security threat detection.

This comprehensive checklist guides thorough security testing of OAuth 2.0 and OpenID Connect (OIDC) protocols. It covers advanced vulnerabilities such as authorization code interception, PKCE bypass, CSRF flaws, and improper scope validation. The methodology emphasizes modern industry standards like FAPI (DPoP, JAR, PAR), making it essential for penetration testers and security researchers assessing web application integrity and API security.

A comprehensive methodology and checklist for identifying and exploiting race conditions (TOCTOU) in web applications. It guides users to find timing windows, detect vulnerabilities like double-spend or rate limit bypass, and exploit concurrent request flaws in state-changing business logic. Essential for penetration testing and bug bounty hunting.

This skill provides a comprehensive checklist and detailed methodology for detecting HTTP Request Smuggling vulnerabilities. It covers various desynchronization types (CL.TE, TE.CL, TE.TE), including HTTP/2 and modern variants. Use this when penetration testing multi-server architectures, proxies, or load balancers to identify potential security bypasses, unauthorized access, or cache poisoning risks.

This advanced skill explores offensive reconnaissance techniques focused on defeating modern operating system security boundaries and mitigations. Topics include kernel/user boundary manipulation, sandbox escapes (AppContainer, LPAC), COM/RPC boundary exploitation, hypervisor interactions, and various integrity level bypassing methods. It is essential for planning advanced privilege escalation paths and understanding deep Windows security architecture, including AMSI, WDAC, and ETW manipulation.

Provides a comprehensive, production-ready deployment solution for OneNote integrations in containerized environments. This skill addresses critical issues like MSAL token persistence (supporting both file and Redis caches), implementing deep health/readiness checks that validate actual Graph API connectivity, and managing graceful shutdowns. Ideal for containerizing OneNote services for robust, scalable production use with Docker and Kubernetes.

Collects comprehensive diagnostics from an unresponsive Oracle Cloud Infrastructure (OCI) compute instance. This tool gathers critical data—including serial console logs, cloud-init logs, VCN flow logs, and CPU metrics—into a single, self-contained tar archive. Use this when an instance is failing, stuck in provisioning, or showing underlying infrastructure errors, providing support teams with all necessary information for root-cause analysis.

A comprehensive guide for migrating cloud workloads from AWS or Azure to Oracle Cloud Infrastructure (OCI). It provides detailed concept mapping for core services like IAM, networking (VPC/VCN), compute (AMI/Custom Image), and data storage. The skill covers end-to-end migration procedures, including using OCI CLI and Python SDK for controlled deployment and resource translation.

This skill provides a deep dive into optimizing Oracle Cloud Infrastructure (OCI) resources. It guides users through selecting appropriate compute shapes (e.g., E5.Flex, A1.Flex) and understanding the performance tiers for block volumes (Balanced, Ultra High Performance). Users can programmatically query available shapes, create performance-tuned volumes, and monitor real-time IOPS and network bandwidth using the OCI SDK, ensuring optimal infrastructure decisions for any workload.

A comprehensive checklist designed to validate that an Oracle Cloud Infrastructure (OCI) environment meets rigorous production-grade standards. This tool automates checks for critical security controls, including compartment isolation, backup policy enforcement, NSG/security list auditing, API key rotation status, encryption verification, and compliance monitoring via Cloud Guard. Use it when preparing an OCI environment for mission-critical workloads or conducting a formal security audit.