Skill UI

This skill guides the implementation of security chaos engineering experiments. It involves deliberately degrading or disabling security controls (like WAF, firewalls, or log pipelines) in a controlled environment to rigorously verify the detection, alerting, and response capabilities of the Security Operations Center (SOC). Users learn to use tools like boto3 and Python to simulate failure scenarios and assess system resilience and compliance posture.

Semgrep is an open-source static analysis tool used to find bugs, detect vulnerabilities, and enforce coding standards. This guide covers writing custom rules in YAML format to implement advanced SAST checks, such as detecting SQL injection, hardcoded secrets, or tracking tainted user input. It is essential for building robust DevSecOps pipelines and ensuring compliance.

This guide details how to implement sophisticated Security Orchestration, Automation, and Response (SOAR) playbooks using Palo Alto Cortex XSOAR. It demonstrates full lifecycle automation, such as phishing incident investigation, requiring enrichment of URLs, IPs, and files, followed by automated containment actions (e.g., blocking senders, purging mailboxes). Mastering this allows SOC teams to drastically reduce Mean Time To Respond (MTTR) by automating detection, analysis, and remediation steps across multiple security tools.

This skill guides developers through integrating Static Application Security Testing (SAST) tools like CodeQL and Semgrep into GitHub Actions CI/CD pipelines. It covers automating code scanning on pull requests and pushes, tuning rules to reduce false positives, uploading SARIF results, and establishing quality gates to prevent vulnerable code from merging into production.

This guide provides a comprehensive workflow for Test-Driven Development (TDD) within Laravel applications. It covers best practices for writing unit, feature, and integration tests using modern tools like Pest and PHPUnit. Learn how to manage database states, mock external services, and achieve high code coverage efficiently.

This tool simulates advanced security testing to identify vulnerabilities in API rate limiting. It bypasses throttling controls by manipulating request headers (like X-Forwarded-For spoofing), varying source IP addresses, and manipulating endpoint paths. Essential for assessing API resilience against brute-force attacks, credential stuffing, and resource exhaustion, aligning with OWASP API Security guidelines.

Perform comprehensive and structured API security testing using Postman. This skill covers testing for OWASP API Security Top 10 vulnerabilities, including authentication bypass, authorization flaws (BOLA), injection, and data exposure. It guides users through setting up multi-role environments, writing automated test scripts for regression testing, and integrating the workflow with CI/CD tools like Newman and OWASP ZAP.

A comprehensive guide for analyzing binary exploitation techniques, covering buffer overflows, ROP chains, and memory corruption vulnerabilities. It details the use of specialized tools like pwntools, checksec, and ROPgadget for identifying and developing exploits in ELF binaries during authorized security assessments and CTF challenges. Focuses on advanced offensive security practices.

Provides a workflow for authorized penetration testing across AWS, Azure, and GCP to discover IAM, storage, serverless, and compute weaknesses, leveraging Pacu, ScoutSuite, Prowler, and cloud-native tools.

This guide provides a comprehensive methodology for performing directory traversal and path traversal testing on web applications. It covers identifying file path parameters, executing basic payloads (Linux/Windows), bypassing common security filters using encoding (URL, double, UTF-8), and automating the process with tools like ffuf and dotdotpwn. It also details advanced steps for local file inclusion (LFI) and potential escalation to Remote Code Execution (RCE) via log poisoning.

This guide details how to perform coverage-guided fuzzing on compiled binaries using AFL++ (American Fuzzy Lop Plus Plus). It covers the entire workflow: instrumenting targets, managing input corpora, running parallel fuzzing campaigns, and triaging complex crashes using tools like CASR or GDB. Ideal for security assessment, crash discovery, and validating application security controls.

This comprehensive guide details a multi-step workflow for detecting and extracting covert data hidden within images, audio, and video files. It covers initial metadata analysis, running advanced steganalysis tools (like zsteg, binwalk, stegoveritas), and performing low-level analysis such as Least Significant Bit (LSB) analysis to uncover hidden communication channels used in digital forensics and cybersecurity investigations.