Skill UI

Step-by-step reference for detecting and exploiting server-side template injection (SSTI), covering injection point discovery, template engine fingerprinting, and payloads for Jinja2/Twig/Freemarker so authorized penetration tests can reach remote code execution.

Hardens Windows endpoints using CIS Benchmark guidance to reduce attack surface, enforce security baselines, and stay compliant when commissioning new workstations, servers, or remediating audit findings through GPO deployments and CIS-CAT validation.

Scans web server roots for high-entropy files, suspicious PHP/JSP/ASP payloads, and recent modifications to flag obfuscated webshells via entropy thresholds, regex signatures, and file metadata.

Securely generates, stores, scopes, rotates, and monitors API keys to help server-to-server services protect credentials from leakage and abuse.

This guide details the implementation of Delinea Secret Server for robust Privileged Access Management (PAM). It covers infrastructure deployment (IIS, SQL Server), configuring secret templates, automating the onboarding of credentials, and establishing centralized vaulting for sensitive accounts. It is essential for organizations needing to meet compliance mandates (SOX, PCI-DSS) by eliminating plaintext credentials and automating password rotation.

Implement SPF, DKIM, and DMARC to stop domain spoofing, verify message integrity, and enforce handling policies; ideal for teams configuring DNS/email servers and monitoring compliance.

Deploy privileged access management for Oracle, SQL Server, PostgreSQL, and MySQL by configuring session proxies, credential vaulting, auditing, and dynamic authentication to enforce least privilege and compliance.

Guides deployment of FIDO2/WebAuthn passwordless authentication, covering API integration, server configuration, passkey enrollment, biometric verification, and migration from password-based systems to meet compliance-aligned IAM controls.

Deploy and configure an OpenTAXII-based TAXII 2.1 server to share STIX 2.1 threat intelligence collections, define access roles, and automate indicator ingestion into SIEM/SOAR pipelines for collaborative CTI exchange.

Guide for deploying Velociraptor to scale forensic artifact collection across Windows, Linux, and macOS, including server/client setup, Docker options, and VQL artifacts used during incident response hunts and compliance-driven monitoring.

Implements Schnorr-based zero-knowledge proofs for authentication, including interactive and Fiat-Shamir non-interactive flows plus zero-knowledge password proofs so servers verify identities without learning secrets.

Intercepts mobile app HTTP/HTTPS traffic through a Burp Suite proxy to analyze insecure APIs, authentication flaws, certificate pinning, data leakage, and server-side responses during mobile penetration tests or API security assessments.