Skill UI

FluidSim is a Python-based CFD framework offering pseudospectral solvers (2D/3D Navier-Stokes, shallow water, stratified flows) with FFT, MPI, Pythran/Transonic acceleration, and rich output analysis for turbulence or geophysical studies.

This skill generates a complete, opinionated, modern full-stack Rails application boilerplate. It sets up a robust tech stack including Rails 8, PostgreSQL, React, Inertia.js, Vite, Tailwind CSS, Sidekiq, and Redis. Designed for developers who need a starting point that adheres to best practices for database structure (UUIDs, JSONB), background job processing, comprehensive testing, and modern frontend development (TSX). Ideal for bootstrapping complex, production-grade web services.

A specialist in building highly interactive, spatial, and weightless web interfaces using advanced techniques like GSAP, 3D CSS transforms, and React. This skill excels in implementing modern visual trends such as glassmorphism and isometric grids, providing a premium, immersive feel for sophisticated dashboards and landing pages.

Parses Cobalt Strike malleable C2 profiles via pyMalleableC2 to pull beacon configs, HTTP communication patterns, sleep/jitter settings, and combines JARM scans for C2 detection when hunting suspected infrastructure or building IDS signatures.

This skill parses various cyber threat intelligence (CTI) reports (Mandiant, CrowdStrike, etc.) using NLP and specialized libraries (stix2, mitreattack-python, spaCy). It systematically extracts adversary behaviors, maps them to MITRE ATT&CK IDs, and constructs a searchable STIX 2.1 Attack Pattern library. This is essential for threat-informed detection engineering, generating detection rules (Sigma, YARA), and validating security controls.

A comprehensive guide for conducting authorized wireless network penetration tests. This skill assesses the overall security posture of WiFi infrastructure, covering weak encryption protocols, captive portal bypasses, Evil Twin attacks, WPA2/WPA3 handshake capture, and rogue access point detection. It evaluates wireless authentication methods, network segmentation, and the effectiveness of WIDS/WIPS systems.

This skill guides the setup of Host-Based Intrusion Detection Systems (HIDS) using industry-standard tools like Wazuh, OSSEC, or AIDE. It covers essential security practices, including File Integrity Monitoring (FIM) for critical directories, monitoring system calls, detecting configuration changes, and identifying rootkits. It is crucial for meeting regulatory compliance requirements (e.g., PCI DSS) and significantly enhancing overall endpoint security posture.

Analyzes Windows Security EVTX logs to detect Kerberos golden ticket assaults by correlating event IDs 4768, 4624, and 4672, flagging long-lived TGTs, privilege escalations without group changes, SID inconsistencies, and outputting a timeline-based report.

A comprehensive system for detecting anomalies in industrial Modbus/TCP and Modbus RTU traffic. It monitors function codes, validates register ranges, analyzes timing patterns, and uses deep packet inspection combined with Markov chains to identify suspicious activity. Essential for deploying Modbus IDS, baselining polling patterns, and securing Operational Technology (OT) environments against unauthorized commands.

This skill details the detection of Pass-the-Ticket (PtT) attacks, a critical credential theft technique. It instructs users on analyzing Windows Security Event IDs (4768, 4769, 4771) within SIEM platforms like Splunk or Elastic. Use cases include investigating security incidents, building advanced threat hunting queries, and validating SOC monitoring coverage for lateral movement attacks.

A comprehensive guide for threat hunters and incident responders to detect WMI-based persistence mechanisms (MITRE T1546.003). It details the analysis of Sysmon Event IDs 19, 20, and 21, cross-referencing these events with root\subscription namespaces and using tools like Autoruns and SIEM analysis for robust detection.

This guide provides a comprehensive methodology for identifying and exploiting Insecure Direct Object Reference (IDOR) vulnerabilities in web applications and APIs. It teaches testers how to systematically manipulate object identifiers (such as numerical IDs, UUIDs, or slugs) within API requests and URLs. Techniques involve using advanced tools like Burp Suite's Authorize extension to test object-level access control, validating both horizontal (same privilege) and vertical (different privilege) access restrictions during authorized penetration tests or bug bounty engagements.