Skill UI

This specialized skill is designed for advanced forensic analysis and penetration testing within Windows environments. It focuses on extracting and proving the replayability of credentials, tickets, and secrets stored in LSASS memory, Kerberos ticket caches, DPAPI, and SSP artifacts. Use it to establish the minimal, actionable chain (host artifact -> extracted material -> accepted privilege) that proves a decisive edge for privilege escalation.

A comprehensive guide detailing advanced, authorized techniques for Active Directory security testing and red teaming. It covers critical attack vectors such as Kerberos exploitation, BloodHound path analysis, NTLM relay, and domain privilege escalation. Designed for security professionals to systematically map and exploit domain weaknesses.

Coordinates authorized multi-stage security assessments including full penetration testing, external-to-domain compromise, and attack path planning. The skill acts as a central orchestrator, routing reconnaissance, initial access, privilege escalation, lateral movement, and reporting tasks to specialized sub-skills. Intended for authorized engagements only.

A comprehensive guide detailing offensive methodologies for exploiting Layer 2 (ARP spoofing, VLAN hopping) and Layer 3 (DNS poisoning, DHCP attacks) network infrastructure. Covers credential capture, traffic interception, and privilege escalation using tools like Bettercap, Responder, and ntlmrelayx. Essential for authorized internal penetration testing and red teaming.

Detailed methodology for achieving NT AUTHORITY\SYSTEM or local Administrator privileges on Windows targets. Covers token impersonation (JuicyPotato, PrintSpoofer), exploiting service misconfigurations, DLL hijacking, UAC bypass techniques, persistent access, and credential harvesting (LSA, DPAPI). Essential toolkit for red team and penetration testing engagements.

Comprehensive offensive techniques for Microsoft Active Directory environments including reconnaissance, credential harvesting, Kerberos attacks, lateral movement, privilege escalation, and domain dominance for authorized red team operations and penetration testing.

A specialized workflow guide for comprehensive security testing of REST and GraphQL APIs. It systematically covers critical security aspects such as authentication validation (OAuth2, JWT), authorization checks (IDOR, privilege escalation), input validation (SQL/NoSQL injection), rate limiting enforcement, and secure error handling. Ideal for vulnerability assessment, bug bounty programs, and pre-deployment security audits.

Orchestrates authorized multi-stage penetration testing workflows spanning reconnaissance, initial access, privilege escalation, and lateral movement. Coordinates specialist skills to plan coherent attack paths, manage risk, and generate comprehensive security assessment reports for red team engagements and authorized security assessments.

This skill provides comprehensive techniques for penetrating AWS cloud environments, covering IAM enumeration, privilege escalation, SSRF attacks, S3 exploitation, and Lambda code extraction. It supports red team operations and security assessments with tools like Pacu and Prowler. Requires AWS CLI and Python knowledge.

A comprehensive skill for offensive security testing of cloud IAM across AWS, Azure, and GCP. It guides users through credential identification, read-only validation, and privilege escalation techniques, emphasizing authorized use only.

This skill enables security professionals to conduct authorized assessments on Linux systems, identifying misconfigurations and vulnerabilities that allow privilege escalation from standard users to root. It covers techniques like SUID exploitation, sudo misconfigurations, and cron job hijacking, strictly requiring written authorization and defensive guardrails.

This skill involves conducting threat modeling using the STRIDE methodology to identify potential security threats, assess risks, and design appropriate security controls. It is essential when designing secure systems, making architectural changes, or preparing for security audits. The process includes analyzing data flows, identifying trust boundaries, and mitigating risks related to spoofing, tampering, repudiation, information disclosure, denial of service, and privilege escalation.