Skill UI

Automates API injection security tests across endpoints by mapping inputs and crafting payloads for SQL, NoSQL, SSRF, and command injection vectors, helping analysts validate input handling and backend access control before production rollouts.

Identifies and exploits insecure local data storage in Android and iOS apps, covering SharedPreferences, SQLite, backups, and keychain misuse to support OWASP M9 and MASVS storage assessments during mobile penetration tests.

Step-by-step workflow for pentesters to detect and exploit NoSQL injection in MongoDB, CouchDB, and similar stacks, covering operator abuse, authentication bypass, blind data extraction, JavaScript injection, and automation with NoSQLMap.

Guides penetration testers through detecting and exploiting SQL injection flaws using manual and sqlmap-based techniques across major database engines, covering discovery, fingerprinting, exploitation, automation, and reporting for authorized assessments.

This guide details the implementation of Delinea Secret Server for robust Privileged Access Management (PAM). It covers infrastructure deployment (IIS, SQL Server), configuring secret templates, automating the onboarding of credentials, and establishing centralized vaulting for sensitive accounts. It is essential for organizations needing to meet compliance mandates (SOX, PCI-DSS) by eliminating plaintext credentials and automating password rotation.

Deploy privileged access management for Oracle, SQL Server, PostgreSQL, and MySQL by configuring session proxies, credential vaulting, auditing, and dynamic authentication to enforce least privilege and compliance.

Guide to detecting and exploiting second-order SQL injections where malicious input is stored safely but later resurfaces in a different query, covering discovery, payload storage, triggering, blind extraction, and escalation steps for web apps.

Techniques for bypassing Web Application Firewalls using encoding, HTTP tricks, payload splitting, and SQLMap tamper scripts to deliver SQLi and XSS payloads during penetration tests and red-team engagements.

Hardens process historian servers (OSIsoft PI, Honeywell PHD, GE Proficy, AVEVA Historian) in OT networks by covering Purdue-tier segmentation, secure interfaces, DMZ data replication, injection prevention, and integrity checks for safety, compliance, and optimization scenarios.

polars-bio accelerates genomic interval math and bioinformatics I/O by combining Polars, Arrow, and DataFusion to handle BED/VCF/BAM/GFF/FASTA streams, SQL queries, and cloud storage with overlap, coverage, and nearest APIs plus streaming fallbacks.

A comprehensive guide to advanced development practices on the Snowflake platform. Covers best practices for SQL (MERGE, semi-structured data, colon prefix rule), modern data pipeline construction (Dynamic Tables, Streams/Tasks, Snowpipe), and deep integration with Cortex AI functions and Snowpark Python. Essential knowledge for data engineers building robust, scalable, and intelligent data applications.

A powerful operational companion for database developers. This skill assists with the daily lifecycle of database interactions, including translating natural language requirements into optimized SQL queries, generating database migrations, performing comprehensive schema introspection across multiple dialects (PostgreSQL, MySQL, SQLite, SQL Server), and identifying performance bottlenecks through detailed query optimization and index recommendations. It also supports ORM patterns like Prisma and SQLAlchemy.