Skill UI

Provides steps and tooling for intercepting JWTs, crafting tokens with the alg header set to none, and submitting forged privileged claims to verify whether a service improperly skips signature verification during authorized security testing.

Systematically map Windows and Linux persistence vectors to reveal how malware survives reboots, enumerating autoruns, services, scheduled tasks, and WMI entries during incident response and threat hunting.

Performs OAuth 2.0 scope minimization reviews by inventorying service principals, delegated grants, and app role assignments to flag excessive permissions, risky consent patterns, and unused token grants across identity providers and SaaS integrations.

Continuously scrape Pastebin, GitHub Gists and similar paste services to detect leaked credentials or API keys through keyword alerts and regex-based pattern matching, enabling swift incident response before stolen data is weaponized.

Audits service accounts across Active Directory, cloud platforms, databases, and applications to spot orphaned, over-privileged, or non-compliant identities, assess rotations, and document dependencies for remediation.

Automates scheduled rotation of service account credentials across AD, cloud IAM, and application stores, updating all consumers, verifying health, and retiring old secrets to reduce compromise risk.

This tool performs deep security assessments on SOAP web services. It analyzes WSDL definitions and actively tests for critical vulnerabilities such as XML External Entity (XXE) injection, XPath injection, WS-Security misconfigurations, and SOAPAction spoofing. It is essential for securing complex, enterprise-level APIs and ensuring adherence to industry security standards.

Guides teams through designing, implementing, and evidencing SOC 2 Type II controls aligned with the AICPA Trust Services Criteria, covering scoping, control mapping, evidence collection, remediation, and audit collaboration for a six- to twelve-month examination.

This skill covers the comprehensive automation of X.509 certificate lifecycle management, including requesting, issuing, deploying, monitoring, renewing, and revoking certificates. Utilizing Python and the ACME protocol (like Let's Encrypt), it helps organizations mitigate security risks and prevent service outages caused by expired or poorly managed certificates. Ideal for security auditing, incident response, and continuous security testing.

This tool is designed for security professionals to test for Server-Side Request Forgery (SSRF) vulnerabilities. It systematically probes user-controllable URL parameters to identify access to internal network services, cloud metadata endpoints (AWS/GCP/Azure), and restricted local resources. It supports various payload techniques, including protocol handlers (gopher, file), IP encoding, and DNS rebinding, making it essential for thorough security assessments and penetration testing.

This comprehensive guide covers the principles and implementation steps for building Progressive Web Apps (PWAs). Learn to integrate essential components like Web App Manifests and Service Workers to ensure your web application offers a reliable, fast, and truly offline-capable experience, mimicking the feel of a native mobile app. Ideal for enhancing web resilience and installability.

Uses JADX to reverse-engineer Android APKs, inspect Java/Kotlin code, permissions, services, overlay layers, and C2 logic so analysts can uncover data theft, privilege abuse, and mobile malware behaviors.