Skill UI

This skill provides a comprehensive guide to systematic dark web monitoring, involving scanning underground forums, paste sites, and marketplaces for organizational threats. It covers setting up Tor-based crawling, automating credential leak detection (e.g., HIBP integration), and analyzing threat intelligence (CTI) using Python. Essential for proactive incident response and security auditing.

This skill enables sophisticated runtime dynamic analysis of Android applications using industry-standard tools like Frida and Objection. It is used to observe application behavior, intercept API calls, monitor network traffic, and bypass client-side security protections (e.g., root detection, anti-debugging). Essential for identifying vulnerabilities and analyzing obfuscated code that static analysis cannot reach.

This skill leverages the VirusTotal API v3 to enrich file hashes (MD5, SHA-256). It retrieves comprehensive security data, including multi-engine detection rates, sandbox behavioral reports, YARA rule matches, and related Indicators of Compromise (IOCs). It is essential for SOC triage, incident response, and threat intelligence workflows.

A comprehensive security tool designed to simulate and detect critical software supply chain attacks. It identifies risks such as typosquatting via Levenshtein distance, dependency confusion against private registries, package integrity failures through SHA-256 hash verification, and known vulnerabilities using pip-audit. Essential for security auditing and assessing project dependency risk.

This guide details the process of developing precise YARA and YARA-X rules for advanced malware detection. It teaches analysts how to analyze unpacked malware artifacts—such as unique strings, byte sequences, and PE header traits—to extract stable detection anchors. This skill is crucial for threat hunting, malware family classification, and automating the creation of robust security signatures while aggressively minimizing false positives.

This tool automates the deployment of deception-based honeytokens within Active Directory environments. It creates fake privileged accounts, decoy SPNs for Kerberoasting detection, and misleading GPOs with password traps. Designed for advanced security teams to detect reconnaissance, lateral movement, and credential theft with high fidelity.

A comprehensive skill for conducting authorized Bluetooth Low Energy (BLE) security assessments. It covers detecting various attacks, including sniffing, Man-in-the-Middle interception, replay attacks, and GATT enumeration abuse. The workflow guides users through packet capture using specialized sniffers (Ubertooth, nRF Sniffer), analyzing services and characteristics via Python/bleak, and performing cryptographic analysis using tools like crackle.

This utility executes atomic Red Team tests mapped to the MITRE ATT&CK framework. It is essential for purple team exercises, allowing security teams to assess detection coverage gaps, validate SIEM/EDR rules, and generate detailed ATT&CK coverage heatmaps. Use it to build continuous detection validation loops and measure blue team visibility against known adversary techniques.

A comprehensive guide for setting up production-grade CI/CD pipelines for Go projects using GitHub Actions. It covers all critical stages: unit testing (with race detection), linting, static application security testing (SAST), vulnerability scanning, automated dependency updates (Dependabot/Renovate), Docker image builds, and automated releases via GoReleaser. Ideal for DevOps engineers establishing or improving Go project quality gates.

Covers comprehensive HTML injection attack scenarios, detection tips, and tooling so security testers can validate and document injection points, phishing overlays, and reflected or stored payloads during vulnerability assessments.

This comprehensive checklist provides a deep dive into Endpoint Detection and Response (EDR) architecture and monitoring mechanisms. It details advanced evasion techniques, such as direct syscalls, AMSI bypass, kernel patching, and memory manipulation. This skill is essential for red team engagements, penetration testing, and advanced malware research to thoroughly assess and bypass modern security defenses.

This comprehensive guide serves as a reference for offensive security professionals developing custom x86/x64 shellcode. It details advanced concepts including Position-Independent Code (PIC), PEB traversal for API resolution, safe memory allocation (avoiding RWX), and sophisticated process injection methods (e.g., APC injection, threadless techniques). Learn how to bypass modern AV/EDR detection using advanced evasion techniques like API hashing, encryption, direct syscalls, and abusing PE structures.