Skill UI

Scans Cairo/StarkNet smart contracts for six critical issues spanning felt252 arithmetic, messaging, access control, and signature replay, reporting severity and fixes to support audits, bridge reviews, and pre-launch security checks.

Guide to mastering essential security scanning tools for network discovery, vulnerability assessment, web application testing, wireless checks, and compliance reporting, covering selection, configuration, and practical workflows.

A comprehensive, multi-phase workflow designed for conducting deep security audits across modern web applications and APIs. This bundle guides users through the entire security lifecycle, including reconnaissance, vulnerability scanning (SAST/DAST), specific testing for OWASP Top 10 and injection flaws, specialized API fuzzing, full-scope penetration testing, security hardening, and final risk reporting. Ideal for compliance checks and proactive security enhancement.

Guides authorized practitioners through Nmap, Masscan, Nessus, OpenVAS, Burp Suite, and OWASP ZAP for network discovery, vulnerability assessment, web application testing, wireless security, and compliance reporting across diverse environments.

Guides SSH service security assessments from discovery, enumeration, credential attacks and key testing to tunneling, vulnerability exploitation, and reporting deliverables.

Scans FunC-based TON smart contracts for boolean, Jetton, and gas handling vulnerabilities, reporting critical issues with file references and offering remediation guidance for auditors and secure dApp launches.

Guides authorized practitioners through Nmap, Masscan, Nessus, OpenVAS, Burp Suite, and OWASP ZAP for network discovery, vulnerability assessment, web application testing, wireless security, and compliance reporting across diverse environments.

DefectDojo is an open-source platform for comprehensive vulnerability management. It aggregates findings from over 200 security scanners (e.g., Nessus, ZAP), automatically deduplicates results, and provides detailed dashboards for tracking remediation progress. It integrates seamlessly with CI/CD pipelines, Jira for ticketing, and Slack for notifications, making it ideal for automated security reporting and compliance tracking in a DevSecOps environment.

This comprehensive guide details the professional process of detecting and exploiting SQL injection vulnerabilities using the powerful sqlmap tool. It covers the entire workflow, from initial vulnerability identification and basic scanning to database enumeration, data dumping, advanced exploitation (like file reading and OS command execution), and WAF bypass techniques, ensuring thorough penetration testing reporting.

This skill uses the python-gvm library to programmatically deploy and operate Greenbone/OpenVAS vulnerability management. It connects via the Greenbone Management Protocol (GMP) to create scan targets, execute vulnerability scans, and parse complex XML reports into structured, actionable JSON findings. Ideal for automating security assessments, compliance checks, and detailed vulnerability reporting.

This guide details how to integrate Static Application Security Testing (SAST) tools like CodeQL and Semgrep into your CI/CD pipelines using GitHub Actions. It covers setting up automated vulnerability detection on pull requests, tuning rules to minimize false positives, uploading SARIF results for centralized security reporting, and enforcing quality gates to prevent vulnerable code from merging into protected branches. Essential for DevSecOps and compliance (SOC 2, PCI DSS).

Guides learners through reconnaissance, scanning, vulnerability analysis, exploitation, and reporting phases of authorized penetration testing, pairing command examples with tool choices and professional deliverables.