Skill UI

A comprehensive guide for conducting authorized wireless network penetration tests. This skill assesses the overall security posture of WiFi infrastructure, covering weak encryption protocols, captive portal bypasses, Evil Twin attacks, WPA2/WPA3 handshake capture, and rogue access point detection. It evaluates wireless authentication methods, network segmentation, and the effectiveness of WIDS/WIPS systems.

This comprehensive guide details the process of capturing WPA/WPA2 handshakes and performing offline dictionary and brute-force password cracking. It utilizes industry-standard tools like aircrack-ng and hashcat to assess the strength of wireless network security during authorized penetration tests. It covers everything from interface preparation to final report generation.

A comprehensive guide and code suite for performing penetration testing on real-time WebSocket APIs (WS/WSS). This tool assesses vulnerabilities including Cross-Site WebSocket Hijacking (CSWSH), missing handshake authentication, message injection, input validation failures, and DoS risks. It guides users through analyzing the handshake process and testing authorization enforcement using Python and specialized tools.

This comprehensive guide details the implementation of secure, event-driven webhooks for Adobe I/O Events. It covers the complete lifecycle, including programmatic webhook registration, handling the challenge-response handshake, implementing robust RSA-SHA256 signature verification, and routing incoming events from services like Creative Cloud and Experience Platform. Essential for building mission-critical, integrated backend systems within the Adobe ecosystem.

A wireless 802.11 offensive testing methodology for red team and security assessments. It covers monitor-mode setup, handshake and PMKID capture, WPA3/Enterprise attacks, evil twin setups, WPS abuse, and related wireless intrusion techniques.

A workflow for capturing PMKID or four-way handshakes from WPA/WPA2-Personal networks, converting captures to hashcat format, and cracking passwords with dictionaries, masks, and vendor default-key patterns.

This specialized skill analyzes the complete lifecycle of real-time web communications, including WebSocket and Server-Sent Events (SSE). It is designed to map the initial handshake, decode complex message streams (subscriptions, keepalives, pushes, reconnects), and trace how frame activity leads to persistent or rendered state changes. Use this to isolate the minimal, decisive sequence of events that prove a system's behavior.