Skill UI

This tool is designed for security professionals to test for Server-Side Request Forgery (SSRF) vulnerabilities. It systematically probes user-controllable URL parameters to identify access to internal network services, cloud metadata endpoints (AWS/GCP/Azure), and restricted local resources. It supports various payload techniques, including protocol handlers (gopher, file), IP encoding, and DNS rebinding, making it essential for thorough security assessments and penetration testing.

This guide details how to use OWASP Threat Dragon, an open-source tool, for comprehensive threat modeling. It enables security teams and developers to create data flow diagrams (DFD), identify potential vulnerabilities using standard methodologies like STRIDE and LINDDUN, and generate detailed threat reports. It is crucial for secure design review, risk assessment, and continuous security validation in DevSecOps pipelines.

Guides cloud security teams through setting up Microsoft Defender for Cloud to protect Azure workloads, extend CNAPP coverage to AWS/GCP, manage Secure Score, and monitor threats centrally via the unified Defender portal.

A comprehensive skill for identifying and exploiting Cross-Site Scripting (XSS) vulnerabilities in web applications. It systematically tests reflected, stored, and DOM-based contexts by injecting various JavaScript payloads. The process involves mapping all user input points, identifying output contexts (HTML body, attribute, JS string, etc.), and crafting payloads to bypass sanitization and Content Security Policy (CSP) protections, simulating real-world attacks like session hijacking and credential theft.

Guides SOC analysts through triaging Splunk ES notable events by prioritizing queues, investigating context, correlating telemetry, enriching with threat intelligence, and documenting disposition for escalation or closure.

Performs structured security assessments of SCADA HMI deployments by validating authentication, web interfaces, and PLC communication protections against IEC 62443 and NIST SP 800-82 requirements to guide OT risk reduction.

This comprehensive workflow guides the design, optimization, and deployment of scalable, cost-effective Google Cloud Platform (GCP) architectures for both startups and large enterprises. It covers the full lifecycle, from gathering detailed requirements (compliance, SLA) and recommending optimal patterns (Serverless, GKE, Data Pipelines) to estimating costs, generating Infrastructure as Code (IaC) using Terraform, setting up CI/CD pipelines, and completing a thorough security review.

Deploy deception-based Active Directory honeytokens—fake privileged accounts, SPNs, decoy GPOs and BloodHound paths—to detect Kerberoasting, lateral movement, credential theft and other reconnaissance activity via monitored Windows Security events.

Detects and analyzes Bluetooth Low Energy attacks by combining Ubertooth and nRF52840 sniffers, Bleak GATT enumeration, and Crackle encryption cracking for IoT security assessments and BLE penetration tests.

Detect NTLM relay attacks by correlating Windows Security Event 4624 LogonType 3 entries against IP-to-hostname inventories, auditing SMB/LDAP signing enforcement, spotting Responder/LLMNR poisoning traffic, and tagging NTLM downgrade attempts for SIEM alerting.

A library-agnostic Flutter/Dart code review checklist that walks through widget best practices, state management patterns, Dart idioms, performance, accessibility, security, and clean architecture, helping reviewers spot regressions in any app stack.

Practical workflow for finding exploitable, remotely reachable vulnerabilities, prioritizing those that qualify for bounties by confirming user-controlled attack paths, minimal PoCs, and real impact before reporting.