Skill UI

Centralizes proven red team methodologies into an automated reconnaissance and vulnerability discovery workflow that sequences asset discovery, live host validation, fingerprinting, content hunting, and exploit surface analysis for bug bounty and defensive assessments.

A comprehensive workflow for performing static and dynamic analysis of malicious PDF documents. It utilizes tools like peepdf, pdfid, and pdf-parser to extract embedded JavaScript, shellcode, and suspicious objects. Ideal for triaging phishing attachments, analyzing exploit documents, and building threat signatures in a controlled forensic environment.

This comprehensive guide details a step-by-step workflow for reverse engineering malware binaries using Ghidra. It guides users through static and dynamic analysis techniques to study internal logic, C2 communication protocols, cryptographic routines, and obfuscation methods at the assembly and pseudo-C code level. Use this when deep code review is required to extract configuration data, understand exploit mechanisms, or develop detection signatures.

Guides learners through reconnaissance, scanning, vulnerability analysis, exploitation, and reporting phases of authorized penetration testing, pairing command examples with tool choices and professional deliverables.

This curriculum covers foundational exploitation techniques essential for binary security analysis. Users will learn to control program execution flow, including overwriting EIP/RIP, constructing ROP chains, implementing ret2libc, and shellcode injection. It provides practical, hands-on exercises on stack overflows and heap manipulation in a controlled Linux environment, establishing the core primitives needed before tackling modern mitigation bypasses.

This skill guides the comprehensive process of crash triage, enabling the assessment of vulnerability exploitability. It covers advanced techniques using debuggers (WinDbg/GDB), sanitizers (ASAN/MSAN), and interpreting low-level data like stack traces and register dumps. It is essential for vulnerability researchers analyzing crash dumps or fuzzer-generated failures to identify root causes and potential attack vectors.

This guide provides a comprehensive operational checklist for exploit development. It covers the entire lifecycle, from initial bug identification and vulnerability analysis (e.g., stack overflow, UAF) to payload development, mitigation bypass (ASLR, DEP, CFG), and reliable weaponization. Essential for security researchers developing Proof-of-Concept exploits and establishing a professional exploit development environment.

A deep-dive curriculum into core memory corruption vulnerability classes, covering topics like stack/heap buffer overflows, Use-After-Free (UAF), integer overflows, and format strings. This guide uses real-world CVE case studies (e.g., QNAP, Chrome) to illustrate attack vectors, impact analysis, and modern mitigation techniques. Ideal for cybersecurity professionals, penetration testers, and students learning exploit development.

A hands-on methodology for testing IoT and embedded devices, covering hardware reconnaissance, firmware extraction and analysis, bootloader access, runtime exploitation, wireless protocol attacks, companion app review, and cloud API abuse.

A comprehensive playbook covering advanced cryptographic hash attack techniques. Learn how to exploit inherent weaknesses such as length extension attacks (MD5, SHA-256), generating identical-prefix or chosen-prefix collisions, and analyzing side-channel timing leaks. Essential for CTF challenges and authorized penetration testing scenarios.

This playbook provides expert-level techniques for cryptanalysis of symmetric encryption. It details how to exploit weaknesses in various modes and algorithms, including CBC padding oracle attacks, ECB mode exploitation, bit flipping attacks, stream cipher key reuse, and meet-in-the-middle attacks. Essential for authorized penetration testing and CTF challenges.

A comprehensive guide to exploiting PHP's loose type checking (using '==') and type juggling mechanics. This skill is crucial for bypassing security controls like authentication checks, HMAC/signature validations, and token comparisons that fail to use strictly typed comparisons (===) or timing-safe functions (hash_equals). Includes techniques for magic hash collisions and PHP version delta analysis.