Skill UI

A detailed guide on discovering and exploiting Mass Assignment vulnerabilities in REST APIs. Users learn to inject unexpected parameters into API requests (POST, PUT, PATCH) to bypass authorization controls, escalate privileges (e.g., changing 'role'), and modify sensitive fields (e.g., 'balance', 'isAdmin') during security assessments and bug bounty hunting.

This skill guides threat hunters in detecting MITRE ATT&CK T1098 account manipulation techniques. It focuses on analyzing Windows Security Event Logs (like 4738, 4728) to uncover shadow administration creation, suspicious group membership changes, SID history injection, and unauthorized credential modifications, crucial for incident response and building robust detection rules.

This comprehensive guide details how to implement Single Sign-On (SSO) for Google Workspace using the SAML 2.0 protocol. It guides administrators through connecting a third-party Identity Provider (IdP) like Okta or Azure AD to centralize authentication, enforce MFA, and manage access policies across the organization.

This skill provides a comprehensive guide for designing and deploying Privileged Access Workstations (PAWs). It covers critical security controls such as device hardening, Zero Trust principles, and integrating Just-in-Time (JIT) access management. Learn how to enforce compliance using tools like Intune/GPO and secure credentials using leading PAM platforms like CyberArk or BeyondTrust, ensuring secure administrative operations.

A comprehensive guide to securing Kubernetes Role-Based Access Control (RBAC). It teaches best practices for implementing least-privilege policies, eliminating excessive cluster-admin bindings, utilizing namespace-scoped roles, and integrating external identity providers (OIDC) to mitigate risks like privilege escalation and unauthorized data access.

A comprehensive guide for deploying, configuring, and maintaining the OpenViking server in production environments. It covers service configuration management, environment setup using `uv` for virtual environments, reliable startup procedures using `nohup`, graceful shutdown methods, and critical data cleanup workflows. This resource is essential for DevOps engineers and system administrators managing OpenViking services.

A comprehensive guide for integrating the Algolia JavaScript v5 client into Node.js/TypeScript projects. It covers proper installation, secure management of Application IDs and API keys (Admin vs. Search-Only), and best practices for client initialization, ensuring robust and safe search functionality implementation.

This guide provides comprehensive instructions on configuring enterprise-grade access control for Intercom. It covers managing admin roles (Owner, Admin, Agent), implementing OAuth scope-based access for public apps, and enforcing granular permissions at the application layer using TypeScript examples. Essential for building secure, multi-tenant SaaS solutions.

This comprehensive debugging bundle collects essential diagnostic evidence from Linktree link-in-bio API integrations. It systematically checks OAuth token validity, profile metadata retrieval, link status, click analytics availability, and webhook endpoint health. The resulting data package helps support engineers quickly diagnose complex issues like broken links, missing analytics events, and permission errors without needing direct Linktree admin access. Ideal for QA and support teams.

This guide details configuring enterprise-grade Role-Based Access Control (RBAC) for Adobe services. It covers integrating Adobe Admin Console with external Identity Providers (Azure AD, Google Workspace) using SCIM provisioning, automating user provisioning via the User Management API (UMAPI), and defining custom product profiles to enforce fine-grained, centralized permissions across the organization.

This guide provides a comprehensive workflow for deploying Algolia-powered search applications to various cloud platforms, including Vercel, Fly.io, and Google Cloud Run. It covers best practices for API key separation (Admin vs. Search-Only), setting up environment variables, and implementing both backend API routes and advanced frontend components using React InstantSearch or vanilla JavaScript.

A comprehensive guide for configuring and managing organization-level access control within the Anthropic ecosystem. It details Workspaces setup (Production, Staging, Development), defines roles (Owner, Admin, Developer), and provides best practices for API key management. Includes practical Python code examples for implementing application-level Role-Based Access Control (RBAC) to restrict model access and usage limits.