Skill UI

A comprehensive guide for authorized red team engagements, covering the end-to-end lifecycle of advanced phishing campaigns. Learn techniques for infrastructure setup (domain aging, SPF/DKIM/DMARC), payload delivery (macro weapons, HTML smuggling), and bypassing email security gateways (MFA bypass, domain spoofing). Essential knowledge for penetration testers and security professionals.

A comprehensive guide for authorized red team and penetration testing engagements, detailing techniques that exploit human trust and psychological vulnerabilities. Coverage includes pretexting, vishing, smishing, physical access attacks (e.g., badge cloning, tailgating), USB payload delivery, and OSINT-driven targeting. This methodology maps to key MITRE ATT&CK T-numbers, simulating real-world, multi-vector adversaries to test organizational defenses at the human layer.

A comprehensive methodology covering advanced offensive techniques targeting the software supply chain. This includes exploiting dependency confusion across npm, PyPI, and NuGet, executing build system hooks, tampering with CI/CD pipelines, and compromising container images. It provides detailed PoC patterns and detection guidance for red team operations.

Detailed methodology for achieving NT AUTHORITY\SYSTEM or local Administrator privileges on Windows targets. Covers token impersonation (JuicyPotato, PrintSpoofer), exploiting service misconfigurations, DLL hijacking, UAC bypass techniques, persistent access, and credential harvesting (LSA, DPAPI). Essential toolkit for red team and penetration testing engagements.

A comprehensive AI sparring partner designed to prepare lawyers for high-stakes adversarial proceedings, such as oral arguments, depositions, or hearings. It profiles judges/arbitrators based on their prior opinions and questions, predicts likely lines of questioning, maps narrow 'escape routes' they can take, and simulates relentless, real-time adversarial questioning to sharpen arguments until only the strongest answers survive.

This advanced tool maps an organization's complete internet footprint by tracing ownership directly from a legal entity (LEI), not just a single seed domain. It discovers owned domains, netblocks, ASNs, and subsidiaries, including 'dark' or unlinked IP space and M&A acquired assets. It provides auditable attribution scoring for robust intelligence gathering.

An advanced, automated pipeline designed for comprehensive, deep-dive Open Source Intelligence (OSINT) gathering and reconnaissance against authorized domains. It executes the full methodology—from passive data harvesting and subdomain discovery to multi-agent content fan-out, vulnerability identification (BOLA/IDOR), and automated findings generation. The output is a single, consolidated, multi-tab deliverable (XLSX), eliminating the need for manual follow-up or superficial reporting.

A comprehensive utility for managing the global configuration of the Ouroboros system. This tool allows users to adjust per-stage runtime parameters, select global models, configure the LLM backend, and manage agent definitions. It supports multiple interaction modes, including graphical user interfaces (browser/TUI), remote SSH environments, and conversational chat interfaces, ensuring consistent setup regardless of the deployment context. Ideal for optimizing complex AI agent workflows.

Ouroboros is a sophisticated requirement crystallization engine designed for robust AI workflows. It transforms vague, high-level ideas into validated, actionable specifications using advanced techniques, including Socratic interviewing to expose hidden assumptions, generating immutable seed specs, and executing a rigorous 3-stage evaluation (Mechanical > Semantic > Consensus). Ideal for product managers and developers needing to solidify complex AI project requirements.

The Ouroboros workflow engine utility used to execute complex Seed specifications. It manages the entire lifecycle, including input validation (YAML), orchestration, real-time progress tracking, and formal convergence evaluation. This tool is crucial for running structured, multi-step computational workflows and assessing outcomes against defined criteria.

This powerful diagnostic skill monitors the operational status of long-running, complex sessions. It not only queries whether the session is active, completed, or failed, but also performs crucial 'goal drift' measurement. This measurement quantifies the deviation between the current execution output and the original defined seed goal. Based on the calculated drift score, it provides actionable status reports and suggests necessary course corrections, ensuring the project remains aligned with its core objectives.

A read-only skill designed to connect with Microsoft Outlook (Office 365/Exchange) via OAuth2. It allows users to read, search for, and download emails and their attachments (such as NDAs, contracts, or documents). Ideal for automating workflows that require accessing email content, performing keyword searches, or chaining email data into other specialized skills for review and analysis.