Skill UI

Guide to configuring and operating Tenable Nessus to assess network, server, workstation, and device security by creating policies, scheduling scans, running credentialed checks, and interpreting prioritized findings for vulnerability management workflows.

Guides security teams through hardening AWS IAM configurations by scoping policies, enabling Access Analyzer, enforcing permission boundaries, and rotating credentials so cloud accounts maintain least privilege for audits, migrations, or remediation.

Guides teams through securing serverless compute (AWS Lambda, Azure Functions, Google Cloud Functions) by enforcing least-privilege IAM, replacing hardcoded secrets with managed stores, embedding dependency scanning in CI/CD, validating inputs, and monitoring runtimes to block injections, credential theft, and supply-chain attacks.

Guides security testers through identifying and exploiting CORS misconfigurations on API endpoints and SPAs so unauthorized cross-domain data access and credential theft can be detected and proven during penetration testing.

Deploys deception-based honeytokens in Active Directory to add fake privileged accounts, SPNs, GPOs, and BloodHound paths so monitoring Event IDs flags credential theft, Kerberoasting, and lateral movement during AD security operations.

Implements FIDO2/WebAuthn hardware security key registration and authentication flows with python-fido2, covering YubiKey enrollment, passkey migration, resident credentials, and user verification policies for phishing-resistant, passwordless access.

Guides analysts through binwalk-driven firmware extraction, entropy inspection, filesystem mounting, and credential hunting for IoT or embedded security research.