Skill UI

This guide helps authors assess whether their computer security manuscript is suitable for the European Symposium on Research in Computer Security (ESORICS). It covers conference positioning, necessary evidence standards (e.g., threat models, empirical validation), and scope definition across privacy, systems, and cryptography, ensuring the paper meets the high academic bar of the venue.

A comprehensive guide for authors targeting top-tier security conferences like NDSS. This skill helps determine manuscript fit, refine the academic framing, strengthen evidence, and understand venue-specific expectations (e.g., realistic attacker models, empirical validation). It serves as a strategic tool for conference submission planning, comparing submissions against related venues like USENIX Security and CCS.

A comprehensive, 10-phase methodology for authorized security assessment of modern APIs, including REST, GraphQL, WebSocket, and SOAP. This guide covers the entire testing lifecycle—from endpoint discovery and authentication bypass (JWT/OAuth 2.0) to sophisticated authorization flaws (BOLA/IDOR/BFLA), input validation, rate limiting, and CI/CD integration testing.

A specialized downstream skill for advanced CTF and security sandbox environments. This tool is used when the challenge requires reconstructing the exact message sequence, state transitions, and field mutations necessary for a system to accept a session. It handles complex tasks like recovering custom framing, checksum validation, stateful replay, and identifying the minimal conversation path that proves a specific branch acceptance.

A comprehensive guide for conducting authorized database security assessments across various platforms (PostgreSQL, MySQL, MSSQL, Mongo, Redis). Covers critical areas including exposure analysis, authentication, authorization checks, misconfiguration review, and attack chain validation, ensuring non-destructive testing practices are followed.

Performs comprehensive, two-layer validation on generated plans. Layer 1 executes instant structural checks (format, dependencies, compliance) while Layer 2 triggers specialist agents (e.g., security, DB, performance) based on plan content. The system forces resolution of all identified issues before allowing execution, supporting auto-fixes and guided human input.