Skill UI

This guide provides detailed instructions for migrating code from the legacy `google-search-results` package to the modern `serpapi` client library. It covers major API changes, including structural updates in Python and Node.js, transitioning from callback-based or class-based calls to modern, promise/async-await structures. Use this when upgrading dependencies or updating search logic.

A comprehensive guide covering advanced Kerberos attacks against Active Directory environments. Techniques include AS-REP roasting, Kerberoasting, forging golden, silver, diamond, and sapphire tickets, and exploiting delegation abuse. Designed for penetration testers and red teams to simulate sophisticated domain compromise scenarios.

An expert playbook detailing advanced techniques for pivoting across compromised Linux hosts. Techniques cover SSH agent hijacking, credential harvesting from common system files, key extraction, and abusing internal services via D-Bus and systemd exploitation, crucial for post-exploitation stages.

This skill runs the Bumblebee scanner on macOS/Linux to perform read-only inventory and exposure checks. It detects compromised packages, developer tools, and host configurations against known security advisories. It is primarily used for supply-chain incident response and vulnerability assessment, providing developers with a clear picture of local system exposure.

A comprehensive guide detailing modern, idiomatic, and efficient patterns for TypeScript and JavaScript development. It covers essential best practices from array manipulation (map, reduce) and destructuring to advanced asynchronous handling (async/await, Promise.all) and type safety best practices, helping developers write cleaner, more robust, and performant code.

This solution provides a comprehensive framework for detecting compromised cloud credentials across AWS, Azure, and GCP. It analyzes anomalous API activity, impossible travel patterns, and indicators of credential stuffing by leveraging services like AWS GuardDuty, Azure Defender, and GCP SCC. Use this when investigating suspicious cloud API calls, responding to exposed credential alerts, or scoping a potential account takeover.

A comprehensive framework for authorized AWS penetration testing and red-teaming. This skill automates end-to-end cloud exploitation using Pacu, covering session management, deep IAM enumeration, automated privilege escalation scanning, and establishing persistence backdoors. It is designed to assess the full blast radius of compromised cloud credentials.

A comprehensive tool for authorized red-team engagements, designed to map complex on-prem Active Directory and cloud Entra ID attack paths. It uses SharpHound and AzureHound to collect rich data, ingesting it into BloodHound CE for analysis using built-in queries and custom Cypher. Effectively identifies privilege escalation chains leading to domain or tenant compromise, especially in hybrid identity environments.

This skill provides methods to verify artifact signatures and SLSA provenance using tools like cosign and slsa-verifier. It is crucial for building secure CI/CD pipelines, detecting supply-chain attacks (e.g., tampering, compromised builds), and ensuring that deployed artifacts originate from trusted sources and build environments. Key features include enforcing keyless OIDC identity pinning and validating SLSA Build Levels.

This guide walks authors through the critical steps of transitioning an accepted academic paper from an anonymous submission to the final, published, double-column camera-ready version. It covers de-anonymization (restoring author details, links), fulfilling all review promises, completing ACM metadata and rights, coordinating artifact badges, and planning the in-person conference presentation.

This guide outlines the crucial, multi-stage process of converting a conditionally accepted academic paper into the final, publishable camera-ready version for top-tier conferences. It covers fulfilling rebuttal promises, meeting strict ACM accessibility standards (e.g., alt text for every figure and table), managing the ACM TAPS workflow, and finalizing all technical and logistical assets.

A systematic methodology for resolving deeply conflicting technical requirements (e.g., needing a system to be both fast and consistent). Instead of accepting a midpoint compromise or trade-off, TRIZ instructs users to name the conflict, separate the opposing states (using time, space, condition, or scale), and invent a concrete, no-compromise resolution. Ideal for architecture, API design, and complex system parameter definition.