Skill UI

A comprehensive guide covering advanced Kerberos attacks against Active Directory environments. Techniques include AS-REP roasting, Kerberoasting, forging golden, silver, diamond, and sapphire tickets, and exploiting delegation abuse. Designed for penetration testers and red teams to simulate sophisticated domain compromise scenarios.

This playbook details the methodology for detecting and exploiting subdomain takeover vulnerabilities. It focuses on identifying CNAME/NS/MX records pointing to deprovisioned or unclaimed cloud resources (e.g., AWS S3 buckets, Heroku apps). Understanding these weaknesses allows attackers to serve malicious content under the victim's trusted domain, leading to phishing, credential theft, and security bypasses.

Polis Protocol transforms static AI agent workflows into a self-improving, dynamic team environment. It uses a learning router to assign tasks based on an agent's historical track record and effectiveness on specific domains, rather than fixed roles. It is vendor-agnostic, allowing diverse agents (e.g., Claude, Gemini) to collaborate under a unified, auditable governance structure where agents can propose and vote on amending the protocol's core rules.

This module provides a comprehensive catalog of abstractions and utilities for handling API webhooks within the Webiny framework. It covers essential components such as payload types (IWebhookPayload), domain models (Webhook), delivery mechanisms, and core services like WebhookDispatcher and WebhookFactory. It supports advanced features including event routing, data validation, and secure payload signing, making it ideal for backend integration development.

This skill guides the decomposition of monolithic applications into independent microservices using Domain-Driven Design (DDD). It defines bounded contexts, service boundaries, communication patterns (sync/async), data ownership, and provides a structured migration roadmap (e.g., Strangler Fig Pattern). Essential for scaling and modernizing large enterprise systems.

A comprehensive skill for systematically building, refining, and documenting a project's domain model. It helps define core terminology, establish a ubiquitous language, and record critical architectural decisions (ADRs). Use this when you need to challenge ambiguous language, invent edge-case scenarios, or maintain architectural consistency throughout the development lifecycle.

This guide details the process of adding, verifying, and publishing necessary DNS records (SPF, DKIM, DMARC) for a custom sending domain in Mailtrap. It covers both manual compliance steps via the UI and programmatic automation through the Sending Domains API. Essential for ensuring high email deliverability and authentication compliance.

This skill scaffolds the necessary configurations for advanced engineering workflows. It guides the user through setting up the issue tracking system (GitHub, GitLab, or local markdown), defining the canonical triage label vocabulary, and establishing the domain documentation context (single or multi-context). It must be run once to initialize the repository for subsequent agent-driven development skills.

This skill provides a comprehensive solution for monitoring brand impersonation attacks across multiple digital vectors. It systematically scans domains, social media platforms, mobile app stores, and the dark web to detect phishing campaigns, typosquatting, and unauthorized brand usage. It is essential for security teams conducting proactive threat intelligence gathering and vulnerability assessments to safeguard brand integrity.

This skill details how to monitor Certificate Transparency (CT) logs using industry tools like crt.sh and Certstream. By analyzing publicly issued SSL/TLS certificates, users can proactively detect lookalike domains, unauthorized certificate issuance for owned assets, and early-stage phishing infrastructure targeting their organization. Ideal for SOC analysts and threat hunters.

This skill details the advanced red-teaming technique of exploiting Active Directory Certificate Services (AD CS) via the ESC8 path. By abusing the HTTP web-enrollment endpoint and relaying coerced NTLM credentials, an attacker can compel a domain controller to request a machine certificate. This certificate is then used to compromise the domain via PKINIT and DCSync.

This skill guides developers through the complex process of integrating an iOS App Clip target into an existing Expo project. It covers setting up the necessary bundle identifiers, configuring associated domains (AASA file), and deploying the required metadata to allow the lightweight clip to be invoked directly from a URL alongside the parent application.