Skill UI

Guide for using the Azure SWA CLI to create, configure, and deploy Static Web Apps with local emulation, API integration, and CI/CD setup for Azure-hosted frontends.

This comprehensive guide provides production-ready patterns for the WebContainer API, essential for building sophisticated online IDEs and code playgrounds. It covers key functionalities such as singleton WebContainer management, robust file system CRUD operations, process lifecycle management, jsh terminal emulation, and embedding projects using the StackBlitz SDK. Ideal for developers creating collaborative development environments.

An expert playbook detailing techniques for identifying, classifying, and defeating advanced code obfuscation in native binaries. Covers junk code, opaque predicates, self-modifying code (SMC), control flow flattening (CFF), VM protectors, and string encryption by utilizing symbolic execution, dynamic emulation, and advanced data flow analysis.

Stratus Red Team is an open-source tool for detection engineering and purple teaming. It atomistically detonates granular, MITRE ATT&CK-mapped offensive techniques across AWS, Azure, GCP, and Kubernetes. The tool executes a full, repeatable lifecycle (warmup, detonate, revert, cleanup) to generate realistic attacker telemetry. Use it to validate if cloud security tools (like CloudTrail or Sentinel) reliably trigger on simulated attacks, or to safely practice red teaming.

Sliver is an open-source, cross-platform Command and Control (C2) framework used for adversary emulation in authorized red-team engagements. This skill guides users through deploying the C2 server, establishing multi-protocol listeners (mTLS, DNS, HTTPS), generating cross-platform implants, and executing advanced post-exploitation techniques, including pivoting and in-memory execution via the Armory.

A comprehensive guide detailing the high standards required for presenting security evidence at major conferences. It covers methodologies for proving claims—including attacks, defenses, and detection systems—across live internet measurements, controlled testbeds, and emulation. Key requirements include adaptive adversary modeling, rigorous measurement hygiene, and adherence to ethical review protocols to ensure results are reproducible and relevant to real-world networks.

A comprehensive firmware and IoT penetration testing skill following OWASP FSTM. Covers firmware acquisition, static analysis, file system extraction with binwalk/unblob, automated EMBA scanning, system emulation via Firmadyne/QEMU, dynamic debugging, and binary exploitation for ARM/MIPS devices. Ideal for auditing routers, cameras, smart home devices, reproducing IoT CVEs, and discovering embedded 0-days.

Firmware penetration testing following the OWASP FSTM nine-stage flow: extraction, EMBA automation, Firmadyne/QEMU emulation, AFL++ fuzzing, and hands-on exploitation in authorized labs.