Skill UI

Comprehensive guidance on using Shodan’s web UI, CLI, and API for reconnaissance, exposed-service discovery, screenshot capture, and exporting JSON/CSV data during penetration tests.

Execute systematic SQL injection vulnerability assessments on web applications using reconnaissance, payload tuning, and exploitation workflows to uncover database flaws, capture evidence, and validate remediation recommendations for authorized security testing.

A comprehensive toolkit for automating and testing local web applications using Python and Playwright. It supports complex dynamic interactions, managing server lifecycles, identifying stable selectors, capturing visual evidence (screenshots), and debugging UI behavior. The guides follow a robust 'Reconnaissance-Then-Action' pattern for reliable end-to-end testing.

Guides bug bounty hunters through REST, SOAP, and GraphQL API fuzzing to uncover authentication weaknesses, IDOR, injections, and endpoint bypasses while outlining practical reconnaissance and exploitation workflows.

Guides security testers through identifying, exploiting, and remediating insecure direct object references in web apps, with methods covering reconnaissance, request manipulation, Burp Suite automation, and reportable mitigation steps.

Provides red team workflows combining subdomain enumeration, live host discovery, technology fingerprinting, XSS hunting, API fuzzing, and automated recon scripting to support bug bounty hunters and security researchers.

Comprehensive guidance on using Shodan’s web UI, CLI, and API for reconnaissance, exposed-service discovery, screenshot capture, and exporting JSON/CSV data during penetration tests.

COBRApy is a Python library for constraint-based reconstruction and analysis of genome-scale metabolic models, letting you load SBML/JSON/YAML models, perform FBA/FVA/sampling, and study gene or reaction knockouts for systems biology and metabolic engineering.

A comprehensive engineering stack for designing and implementing robust, production-grade payment gateways for Software-as-a-Service (SaaS) platforms targeting the Pakistani market. It covers integrating major local providers like JazzCash and Easypaisa, handling complex payment flows (PKR billing, webhooks, idempotency), and performing essential financial reconciliation and auditing processes. This guide ensures high correctness and reliability in B2B/SaaS billing operations in Pakistan.

This guide details the comprehensive process of using the Linux Audit framework (auditd) to detect advanced security threats. It covers deploying specific rules to monitor critical system files, detecting unauthorized privilege escalation, process injection, and suspicious system calls. Users can then leverage ausearch and aureport to efficiently query, reconstruct timelines, and summarize findings for forensic analysis and compliance auditing.

A dedicated tool for forensic analysis of Windows PowerShell Script Block Logs (Event ID 4104) captured in EVTX files. It reconstructs multi-block scripts, applying advanced detection heuristics such as entropy analysis and pattern matching to identify obfuscated commands, encoded payloads (Base64), download cradles, and AMSI bypass attempts, crucial for threat hunting and incident response.

This comprehensive guide configures Fail2ban to implement a robust, layered defense mechanism for network security. It sets up custom filters and actions to automatically detect and mitigate threats such as port scanning, SSH brute force attempts, and network reconnaissance. By dynamically banning malicious IP addresses and providing security alerts, this skill significantly enhances the host-based intrusion prevention capabilities of your system.