Skill UI

Hands-on lab guide to configuring HTTP, HTTPS, SNMP, and SMB services for pentesting, covering setup, firewall rules, enumeration tools, and log inspection in controlled environments.

Comprehensive guidance on using Shodan’s web UI, CLI, and API for reconnaissance, exposed-service discovery, screenshot capture, and exporting JSON/CSV data during penetration tests.

Guides analysts through automated SQL injection discovery and exploitation with SQLMap, covering enumeration, table/column mapping, data dumping, and advanced targeting across MySQL, PostgreSQL, MSSQL, Oracle, and other databases during authorized penetration tests.

Comprehensive guidance on using Shodan’s web UI, CLI, and API for reconnaissance, exposed-service discovery, screenshot capture, and exporting JSON/CSV data during penetration tests.

A comprehensive playbook for expert-level Android application security testing. It covers advanced exploitation techniques, including SSL pinning bypass (using Frida/Objection), detecting component exposure (activities, providers, services), and exploiting WebView vulnerabilities (RCE, XSS). Essential for authorized mobile penetration testing assessments.

A comprehensive guide for conducting authorized database security assessments across various platforms (PostgreSQL, MySQL, MSSQL, Mongo, Redis). Covers critical areas including exposure analysis, authentication, authorization checks, misconfiguration review, and attack chain validation, ensuring non-destructive testing practices are followed.

Leverage the Metasploit Framework for authorized penetration testing, from module search and exploit configuration to payload generation, auxiliary scanning, and post-exploitation. Use only with explicit written permission.

Provide systematic methodologies for automated SQL injection detection and exploitation using SQLMap. Covers database enumeration, table and column discovery, data extraction, multiple target specification methods, and advanced exploitation techniques for various DBMS.