Skill UI

Delivers repository-grounded AppSec threat models that map components, boundaries, assets, entry points, and attacker capabilities to abuse paths, along with prioritized mitigations tailored to codebase evidence and explicit assumptions.

Walks through enabling system and per-app DEP, ASLR, CFG, and related mitigations via ProcessMitigation cmdlets, exporting configs for Intune or GPO deployment, and noting compatibility pitfalls.

Analyze ELF binaries for buffer overflow and ROP exploits using checksec, ROPgadget, and pwntools to assess mitigations, discover gadgets, and craft payloads for CTFs or authorized penetration tests.

Automates prioritizing CVEs by risk, orchestrating patch and configuration changes through WSUS/SCCM/Intune, handling zero-day mitigations, and validating fixes to keep endpoints compliant with SLAs.

A comprehensive reference and bypass catalog covering modern operating system kernel mitigations such as KASLR, SMAP, SMEP, KPTI, DEP/NX, and CFI. It details how these security mechanisms function, how to detect their presence, and advanced bypass techniques (e.g., side-channel attacks, ROP chains, information leaks). This skill is essential for security professionals conducting deep penetration testing, exploit development, and target hardening assessments.

An expert playbook detailing advanced techniques for Linux kernel exploitation. Covers vulnerability classes (UAF, OOB, Race Condition), building primitives, bypassing modern mitigations (KASLR, SMEP, SMAP, KPTI), and achieving root privilege escalation via functions like commit_creds or modprobe_path overwrite. Essential for CTF and advanced security research.