Skill UI

CAPE is an open-source sandbox derived from Cuckoo, designed for automated dynamic malware analysis. It features advanced behavioral instrumentation, capturing system changes, network traffic (PCAP), and specialized parsers to extract malware configurations (e.g., Emotet, Cobalt Strike). Use this skill for incident response, security assessments, and validating security controls against complex payloads and evasion techniques.

This skill enables sophisticated runtime dynamic analysis of Android applications using industry-standard tools like Frida and Objection. It is used to observe application behavior, intercept API calls, monitor network traffic, and bypass client-side security protections (e.g., root detection, anti-debugging). Essential for identifying vulnerabilities and analyzing obfuscated code that static analysis cannot reach.

This expert playbook details advanced techniques for bypassing SSL pinning mechanisms (Certificate, Public Key, SPKI) on mobile applications running on Android and iOS. It provides practical methods using tools like Frida and Objection, covering various frameworks (Flutter, React Native, Xamarin) and multiple pinning types to enable the interception and analysis of encrypted HTTPS traffic.

Direct access to Google's SEO APIs including Search Console, PageSpeed Insights, CrUX field data, Indexing API, and GA4 organic traffic. Provides real-time field data for Core Web Vitals, indexation status, search performance, and organic traffic trends. Use for SEO analysis, website performance monitoring, and search optimization.

This comprehensive guide outlines a structured methodology for conducting authorized security testing on desktop thick clients (Win/macOS/Linux). It covers critical attack vectors, including local storage analysis, Inter-Process Communication (IPC) vulnerabilities, network traffic interception, client-side trust boundaries, and advanced reverse engineering techniques using tools like IDA and Ghidra.

This skill enables authorized reverse engineering of custom binary protocols, Protobuf/gRPC schemas, and WebSocket frames using PCAP data. It helps recover undocumented wire protocols, decode structured traffic, and reconstruct state machines for security analysis and debugging purposes.

This skill enables authorized security testing of desktop thick clients. It focuses on local storage, update channels, IPC, traffic interception, and client-side trust-boundary review. Techniques include reverse engineering, network analysis, and vulnerability assessment for C/S architectures like Electron or .NET.