Skill UI

This skill utilizes the SpiderFoot REST API and CLI to automate Open-Source Intelligence (OSINT) collection. It performs comprehensive target profiling, reconnaissance, and attack surface mapping across 200+ data sources. Users can select specialized modules (e.g., footprint, investigate) to analyze domains, IPs, and credentials, generating structured intelligence reports essential for security assessments, incident response, and threat intelligence gathering.

Automatically reverse-engineers any codebase (frontend, backend, or fullstack) into a comprehensive Product Requirements Document (PRD). It analyzes complex elements like routes, components, API integrations, state management, and business logic across major stacks (React, Vue, Next.js, Django, FastAPI). The resulting PRD is detailed enough for both product managers (understanding 'what') and engineers/AI agents (understanding 'how' to reconstruct the system).

This tool automates the deployment of deception-based honeytokens within Active Directory environments. It creates fake privileged accounts, decoy SPNs for Kerberoasting detection, and misleading GPOs with password traps. Designed for advanced security teams to detect reconnaissance, lateral movement, and credential theft with high fidelity.

This comprehensive guide implements External Attack Surface Management (EASM). It integrates leading industry tools like Shodan, Censys, subfinder, httpx, and nuclei for deep reconnaissance. Users can systematically discover assets, enumerate subdomains, fingerprint services, scan for vulnerabilities, and calculate weighted exposure scores based on professional OWASP methodology. Ideal for continuous security monitoring and deep penetration testing.

Comprehensive reference for red teamers and penetration testers on executing Active Directory attacks, covering reconnaissance, credential harvesting, Kerberos abuses, lateral movement, and domain persistence techniques against Windows domains.

Enables structured cloud penetration testing across Azure, AWS, and GCP by guiding reconnaissance, authentication, enumeration, exploitation, and persistence workflows for authorized assessments.

Guides learners through reconnaissance, scanning, vulnerability analysis, exploitation, and reporting phases of authorized penetration testing, pairing command examples with tool choices and professional deliverables.

A robust reference architecture designed for integrating multi-property portfolios with the AppFolio Stack API. It manages complex tasks such as real-time vacancy tracking, tenant lifecycle management, work order routing, and financial accounting reconciliation (e.g., QuickBooks/Xero). Key components include a service layer, multi-level caching strategies for optimal data freshness, and an event-driven pipeline (using webhooks and message queues) to ensure data consistency and idempotency across all transactions, addressing potential rate limits and failure modes.

This workflow manages critical logistics documentation via the Flexport API, including creating commercial invoices for customs clearance, maintaining detailed product catalogs (SKUs, HS codes, costs), and retrieving freight invoices. It is essential for integrating customs documentation, product data management, and billing reconciliation into your supply chain systems.

Collects comprehensive diagnostic information for Fondo support tickets. This bundle checks API connectivity status, filing compliance, integration health (bank/payroll), and detects reconciliation discrepancies. Ideal for troubleshooting complex financial sync errors, tax filing issues, and general platform failures.

This utility helps manage API rate limits when building parallel integrations with multiple financial providers (Gusto, QuickBooks, Plaid, Stripe). It implements a token bucket algorithm and robust retry strategies to prevent shared-limit conflicts and ensure reliable data synchronization during high-volume processes like month-end reconciliation.

A comprehensive methodology for offensive security, red team intelligence gathering, and bug bounty reconnaissance. Covers domain recon, email harvesting, social media profiling, code leaks, infrastructure mapping, cryptocurrency tracing, and geospatial intelligence. Essential for building detailed attack-surface maps against organizations or individuals.