Skill UI

Guides teams on building container images with Google Distroless minimal bases to shrink attack surfaces by removing shells and package managers, covering image choices, multi-stage build patterns, debugging guidance, and scan results for hardened deployments.

Harden container images by minimizing attack surface, adopting multi-stage and distroless bases, stripping unused packages, enforcing non-root execution and read-only roots, and validating against CIS Docker Benchmark before production rollout.

Performs GraphQL introspection attacks to extract complete API schemas, map sensitive operations, and validate defenses against query depth abuse and nested DoS, enabling authorized penetration testers to understand the attack surface before exploiting GraphQL-specific vulnerabilities.

Use ProjectDiscovery’s Subfinder to passively enumerate target domains’ subdomains, configure API sources, and stream results to httpx/dnsx/nuclei for validation, rate control, and attack-surface mapping during penetration tests or bug bounty reconnaissance.

Implements comprehensive external attack surface management using Shodan, Censys, subfinder, httpx, and nuclei to discover assets, enumerate services, and score exposures for continuous ASM or pentest reconnaissance.

Provides methodology and scripts for proactive threat hunting, IOC sweeps, and statistical anomaly detection that surface attacker activity before automated alerts fire.