Skill UI

This structured skill guides users through root-cause-first debugging when an implementer is blocked, verification fails, or repeated attempts at fixing do not converge. It mandates a systematic approach combining local evidence inspection, runtime analysis, and external documentation research to accurately classify the failure's true source (e.g., missing dependency, spec conflict). It prevents speculative patching and generates a clear, actionable fix plan.

This skill guides the comprehensive process of crash triage, enabling the assessment of vulnerability exploitability. It covers advanced techniques using debuggers (WinDbg/GDB), sanitizers (ASAN/MSAN), and interpreting low-level data like stack traces and register dumps. It is essential for vulnerability researchers analyzing crash dumps or fuzzer-generated failures to identify root causes and potential attack vectors.

This is a detailed offensive checklist for identifying and exploiting insecure deserialization vulnerabilities across multiple programming languages (Java, Python, PHP, .NET, Node.js, etc.). It covers techniques like gadget chain generation, magic method abuse, type confusion, and modern attack vectors, providing a deep methodology for penetration testing and vulnerability research.

This comprehensive checklist provides a deep dive into Endpoint Detection and Response (EDR) architecture and monitoring mechanisms. It details advanced evasion techniques, such as direct syscalls, AMSI bypass, kernel patching, and memory manipulation. This skill is essential for red team engagements, penetration testing, and advanced malware research to thoroughly assess and bypass modern security defenses.

This comprehensive curriculum provides a detailed roadmap for mastering exploit development and vulnerability research. It covers fundamental techniques like fuzzy testing using AFL++, and progresses through advanced topics such as in-process fuzzing with Google FuzzTest. It is ideal for structuring professional security training programs or onboarding new research engineers.

This guide provides a comprehensive operational checklist for exploit development. It covers the entire lifecycle, from initial bug identification and vulnerability analysis (e.g., stack overflow, UAF) to payload development, mitigation bypass (ASLR, DEP, CFG), and reliable weaponization. Essential for security researchers developing Proof-of-Concept exploits and establishing a professional exploit development environment.

A comprehensive guide detailing advanced offensive fuzzing methodologies. It covers the full lifecycle from target identification (parsers, network protocols, kernels) to tool selection (AFL++, libFuzzer, Honggfuzz, syzkaller), building harnesses, curating seed corpora, executing fuzz campaigns, and finally, performing crash triage and vulnerability analysis. Essential for security researchers and embedded systems developers.

This advanced skill automates the entire lifecycle of cloud infrastructure deployment. Instead of manual documentation review, it researches current best practices across multi-cloud platforms (AWS, GCP, Azure), synthesizes a coherent deployment strategy, and generates production-grade Infrastructure as Code (IaC). It outputs comprehensive artifacts, including Terraform modules, Kubernetes manifests, CI/CD pipelines, monitoring setups, and cost estimates, ensuring secure and optimized deployment.

Stress-tests a research paper against the strongest possible rejection argument. It executes a two-stage process: first, generating a single, devastating rejection memo (the 'attack'), and second, having a fresh reviewer defend the paper point-by-point to surface unresolved critical issues. This tool is invaluable for pre-submission quality assurance, especially for theory papers.

A comprehensive playbook detailing advanced JNDI injection techniques. Covers the abuse of JNDI lookups via RMI and LDAP, focusing on critical vulnerabilities like Log4Shell (CVE-2021-44228), deserialization gadgets, and post-8u191 bypass methods. Essential for deep-dive security testing and vulnerability research.

An expert playbook detailing advanced techniques for Linux kernel exploitation. Covers vulnerability classes (UAF, OOB, Race Condition), building primitives, bypassing modern mitigations (KASLR, SMEP, SMAP, KPTI), and achieving root privilege escalation via functions like commit_creds or modprobe_path overwrite. Essential for CTF and advanced security research.

A comprehensive playbook detailing advanced macOS process injection techniques. It covers exploiting system mechanisms such as DYLD_INSERT_LIBRARIES, dylib hijacking (weak/rpath), XPC abuse, and Mach port manipulation. Essential for security researchers and penetration testers aiming to execute code in target processes.