Skill UI

A comprehensive guide for analyzing .NET malware (C#, VB.NET, F#) using professional tools like dnSpy and de4dot. Learn to decompile code, identify obfuscation techniques (ConfuserEx, SmartAssembly), extract C2 configurations, and debug malicious behavior in stealers and RATs.

A comprehensive deep dive into reverse engineering ransomware encryption mechanisms. It details the analysis of hybrid encryption models (AES/RSA), identifying specific cryptographic APIs (CryptoAPI, CNG), and locating implementation flaws such as weak key generation or IV reuse. This guides authorized security professionals in finding potential decryption opportunities without paying a ransom.

This skill provides a comprehensive methodology for identifying and exploiting open redirect vulnerabilities in web applications. It covers advanced bypass techniques (e.g., URL encoding, protocol-relative URLs, path traversal) and demonstrates chaining with other flaws like OAuth redirection for advanced phishing simulations and token theft. Designed for authorized security professionals conducting penetration tests.

A professional-grade 'Living Pipeline' that integrates advanced AI reasoning into the SDLC. It provides autonomous guardrails for system security, cloud cost management (FinOps), and Kubernetes compliance. It audits Linux Kernel patches for memory vulnerabilities, detects cost drifts in Terraform plans, and generates hardened K8s manifests from natural language policies.

A comprehensive guide to professional Git version control. It covers best practices for branching strategies (GitHub Flow, GitFlow, Trunk-Based), writing standardized commit messages using Conventional Commits, managing merges vs. rebases, and defining effective Pull Request workflows. Ideal for any development team looking to improve code collaboration and maintain a clean, traceable history.

This comprehensive guide implements External Attack Surface Management (EASM). It integrates leading industry tools like Shodan, Censys, subfinder, httpx, and nuclei for deep reconnaissance. Users can systematically discover assets, enumerate subdomains, fingerprint services, scan for vulnerabilities, and calculate weighted exposure scores based on professional OWASP methodology. Ideal for continuous security monitoring and deep penetration testing.

A comprehensive guide covering best practices for creating videos using Remotion and React. Learn how to incorporate advanced features such as 3D rendering (Three.js), complex animations, audio synchronization, data charting, subtitles, and sophisticated scene transitions. This skill covers 29 domain-specific rules for professional video pipelines.

This powerful tool utilizes Playwright to record high-quality, professional web application demo videos. It simulates natural user interactions, injecting a visible cursor overlay and adhering to specific pacing guidelines. It is ideal for creating comprehensive tutorials, feature walk-throughs, or documentation for stakeholders.

A guide for security researchers focused on finding exploitable, remote-reachable vulnerabilities for bug bounties or responsible disclosure. It emphasizes high-signal flaws such as SSRF, RCE, and SQL injection, while guiding users through the professional triage and PoC creation process for penetration testing.

Generates professional documentation for software projects, covering READMEs, API references, architecture guides, inline comments, and changelogs, adapting style and scope to the codebase and user request.

A comprehensive guide for building production-quality, highly accessible, and responsive user interfaces. Covers advanced topics including component architecture (composition over configuration), robust state management patterns (Context, Redux, Server State), adherence to design systems, and meeting WCAG accessibility standards. Use this skill when developing or refining complex user-facing components that require professional polish and maintainability.

A comprehensive guide for developing robust, Unix-native Command Line Interfaces (CLIs) using Go. It details best practices for command structure, flag handling, configuration layering (Viper), and argument validation using Cobra. Learn how to build, extend, and review professional-grade Go tools that behave predictably in shell environments.