Skill UI

This comprehensive guide outlines best practices for optimizing vector indexes for production systems. It covers critical techniques such as tuning HNSW parameters, implementing quantization strategies, and optimizing memory usage. Use this when you need to balance search latency, recall, and scalability for large-scale vector databases.

Provides Wycheproof test vectors for validating cryptographic implementations against known attacks and edge cases, making it ideal for CI regression sweeps and third-party crypto audits.

Guides systematic detection and exploitation of cross-site scripting and HTML injection flaws, covering stored/reflected/DOM vectors, payload crafting, and remediation advice for web security assessments.

A comprehensive guide to implementing custom visual effects in Three.js using shaders. Learn how to work with GLSL, utilize ShaderMaterial, manage uniforms (scalars, vectors, matrices, textures), and manipulate vertex and fragment data. Covers advanced patterns like texture sampling, vertex displacement, and custom lighting effects.

This comprehensive skill guides users through designing and executing advanced social engineering penetration tests. It covers simulating real-world attacks, including phishing (email), vishing (voice), smishing (SMS), and physical pretexting. The goal is to measure an organization's human security resilience, identify training gaps, and test security controls across multiple vectors using tools like GoPhish and SET.

This skill guides the secure implementation of AES-256 in GCM mode (FIPS 197) for protecting files and data stores at rest. It covers best practices for key derivation from passwords (using PBKDF2/Argon2), proper management of initialization vectors (IVs)/nonces, and applying authenticated encryption (AEAD) to detect tampering. Use this when establishing robust security controls or performing security assessments.

This skill utilizes Impacket to perform comprehensive audits and simulated attacks on Active Directory forest trust relationships. It enumerates trust boundaries, analyzes SID filtering configurations, detects SID history abuse vectors, and assesses inter-realm Kerberos ticket risks. Ideal for red-teaming multi-forest environments or performing deep security audits to find cross-forest privilege escalation paths.

This skill guides the comprehensive process of crash triage, enabling the assessment of vulnerability exploitability. It covers advanced techniques using debuggers (WinDbg/GDB), sanitizers (ASAN/MSAN), and interpreting low-level data like stack traces and register dumps. It is essential for vulnerability researchers analyzing crash dumps or fuzzer-generated failures to identify root causes and potential attack vectors.

A comprehensive checklist detailing advanced attack methodologies for JSON Web Tokens (JWT). Covers critical misconfigurations such as algorithm confusion (alg:none, RS256→HS256), weak secret brute forcing, header injection (kid, jku, jwk), cache poisoning, and improper validation. Also provides specific vectors for extracting JWTs from mobile environments (Android/iOS). Ideal for penetration testers conducting deep security assessments on authentication systems.

This skill provides a comprehensive, structured methodology and checklist for identifying Remote Code Execution (RCE) vulnerabilities across various web applications. It covers advanced attack vectors such as OS command injection, Server-Side Template Injection (SSTI), insecure deserialization, file upload flaws, and XXE. Use this guide during web application penetration testing or bug bounty hunting to systematically discover arbitrary code execution paths.

A deep-dive curriculum into core memory corruption vulnerability classes, covering topics like stack/heap buffer overflows, Use-After-Free (UAF), integer overflows, and format strings. This guide uses real-world CVE case studies (e.g., QNAP, Chrome) to illustrate attack vectors, impact analysis, and modern mitigation techniques. Ideal for cybersecurity professionals, penetration testers, and students learning exploit development.

A comprehensive guide for diagnosing and reducing high memory consumption in Qdrant. This resource is crucial when dealing with reports of 'memory leak', 'out of memory', or excessive RAM growth. It details how Qdrant manages resident memory and OS page cache, and provides advanced techniques such as quantization, using float16/int8 data types, and strategically storing components on disk (like HNSW indexes or sparse vectors) to minimize the memory footprint and ensure stable, scalable operation.