Skill UI

Sets up production-ready Odoo with Docker, docker-compose, PostgreSQL, persistent volumes, env config, optional Nginx SSL proxy, plus diagnostics and best practices for launching on VPS or local dev.

This guide outlines how to implement Google Cloud Identity-Aware Proxy (IAP) to enforce zero-trust, identity-based access control across various Google Cloud services (App Engine, Cloud Run, GKE, Compute Engine). It details configuring per-request authentication, context-aware policies (like device posture and location), and programmatic access management for highly secure internal applications.

A comprehensive guide for authorized penetration testing on detecting and exploiting HTTP Request Smuggling vulnerabilities. It details analyzing discrepancies between Content-Length and Transfer-Encoding header parsing in multi-tier architectures (e.g., CDN, reverse proxy, load balancers). Learn techniques to bypass access controls, capture subsequent user requests, and escalate attacks in a controlled environment.

This skill provides a systematic methodology for detecting Command and Control (C2) beaconing patterns in network traffic. It utilizes advanced statistical techniques, including Coefficient of Variation (CV) and jitter analysis, applied to network flow logs (Zeek, proxy, firewall). It is crucial for proactive threat hunting and incident response to identify compromised endpoints communicating periodically with malicious infrastructure.

This skill detects domain fronting, an advanced technique used by attackers to mask Command and Control (C2) traffic. It analyzes proxy/web gateway logs for mismatches between the TLS SNI field and the HTTP Host header, combined with deep TLS certificate inspection using pyOpenSSL. This is crucial for security teams investigating sophisticated network threats and validating detection coverage.

EvilGinx3 is an advanced Adversary-in-the-Middle (AiTM) framework designed for red teaming simulations. It goes beyond traditional credential harvesting by acting as a transparent proxy to intercept the entire authentication flow, including session cookies and Multi-Factor Authentication (MFA) tokens. This capability allows security professionals to assess the robustness of an organization's security posture against sophisticated account takeover attacks.

Accelerates GitHub cloning, release/raw/archive downloads, and other resource access for Mainland China users by rewriting URLs through githubproxy.cc or fallback ghfast.top, with an optional URL converter script for quick adaptation.

This comprehensive guide teaches the correct usage of the Flutter `provider` package for state management. It covers setting up various provider types (immutable, mutable, future, stream) and emphasizes best practices for consuming state safely using `context.watch`, `context.read`, and `Selector`. Learn how to use `ProxyProvider` for dependency injection and maintain robust, scalable Flutter applications.

Guides adding GraalVM native image support to Java apps by detecting Maven or Gradle frameworks, injecting native build plugins, configuring reflection/resource/JNI/proxy files, iterating builds per Oracle best practices, and validating the native executable.

This guide outlines a mandatory, evidence-based protocol for declaring any work complete, fixing a bug, or submitting a pull request. It strictly mandates that all claims of success must be supported by fresh, verifiable evidence, such as passing test outputs, successful build logs, or comprehensive checklist verification. It eliminates reliance on assumptions, gut feelings, or trusting proxy reports.

This comprehensive guide outlines essential security best practices for users operating within the Apify ecosystem. Learn how to properly manage API tokens, implement environment separation (dev/staging/prod), secure proxy credentials, and sanitize sensitive data (PII) before storage. Essential for hardening data pipelines and ensuring compliance.

A comprehensive diagnostic reference for common Bright Data proxy and API errors, including 407, 502, SSL Certificate errors, and rate limit issues. This guide provides specific causes, detailed fixes, and command-line solutions (cURL, Python, JavaScript) to ensure uninterrupted web scraping and API integration.