Skill UI

Systematically review Kubernetes RBAC roles, bindings, and service accounts to surface overly permissive access, privilege escalation paths, and least-privilege violations using tools like rbac-tool and KubiScan.

Configure Google Cloud Identity-Aware Proxy to enforce per-request identity verification for Compute Engine, App Engine, Cloud Run, and GKE workloads using access levels, context-aware policies, and service accounts for programmatic automation.

Documented methodology for finding Active Directory accounts with constrained delegation and abusing their S4U2self/S4U2proxy flows via Rubeus or Impacket to impersonate privileged users, steal service tickets, and extend lateral movement in red-team engagements.

Detailed walkthrough for using Impacket's GetUserSPNs.py to enumerate service accounts, request Kerberos TGS tickets, export hashes, and crack them offline as part of a Kerberoasting red-team campaign against Active Directory.

Harden Kubernetes cluster access by auditing and tightening RBAC bindings, granting namespace-scoped least-privilege roles, separating service accounts, and integrating OIDC authentication plus continuous auditing for safer deployments.

Use GCPBucketBrute plus gcloud IAM inspection to enumerate buckets, probe permissions, audit bindings, inspect service accounts, and map privilege escalation paths for cloud security testing.

Provides automated discovery and inventorying of privileged accounts across enterprise infrastructure, covering domain admins, local admins, service accounts, databases, cloud IAM roles, and application admins with risk classification and PAM onboarding.