Skill UI

Guides authorized practitioners through Nmap, Masscan, Nessus, OpenVAS, Burp Suite, and OWASP ZAP for network discovery, vulnerability assessment, web application testing, wireless security, and compliance reporting across diverse environments.

A comprehensive tool designed to build powerful, self-contained frontend artifacts for AI platforms. It utilizes a modern stack including React, TypeScript, Tailwind CSS, and Vite. The core functionality is bundling the entire application into a single, portable HTML file, making it easy to share complex, interactive web UIs directly within conversational environments.

A robust Python client wrapper for interacting with the Zotero Web API v3. This skill allows users to programmatically manage academic references, including retrieving, creating, updating, and deleting items, collections, tags, and attachments. Ideal for academic researchers building automated workflows, bulk exporting citations (e.g., BibTeX), or integrating Zotero data into larger research applications.

Provides a Perl-centric security checklist covering taint mode, strict input validation, safe regex, file/command handling, and DBI parameterization to harden web and CLI applications before processing untrusted data.

Comprehensive Kotlin-based Ktor server blueprint covering routing DSL, serialization, authentication, DI, WebSockets, and testing best practices for building resilient HTTP services.

Deploy RASP agents for Java and Python web apps to detect and block OWASP Top 10 attacks from inside the runtime, tune detection policies, baseline behavior, and forward telemetry to SIEM for comprehensive audit and response.

Techniques for bypassing Web Application Firewalls using encoding, HTTP tricks, payload splitting, and SQLMap tamper scripts to deliver SQLi and XSS payloads during penetration tests and red-team engagements.

Guides systematic OWASP WSTG web app penetration tests using Burp Suite plus manual techniques to uncover authentication, authorization, input validation, session, and business logic vulnerabilities for compliance and preproduction assurance.

Step-by-step Nikto guidance covering basic and advanced scans, tuning options, report exports, and integrations so security teams can validate web servers, SSL settings, and CVEs during vulnerability assessments.

This tool provides a structured methodology for triaging raw vulnerability findings generated by DAST and SAST scanners. It utilizes the OWASP risk rating methodology to validate true positives, filter out false positives, and calculate a comprehensive risk score (Risk = Likelihood x Impact). This process significantly reduces alert fatigue and ensures development teams prioritize remediation efforts on the most critical and exploitable vulnerabilities.

Systematically test web applications for broken access control by mapping endpoints, configuring Burp Authorize, and exercising vertical/horizontal privilege escalation via API requests to surface unauthorized behaviors during penetration tests.

Manual penetration testing focused on business logic vulnerabilities in web applications, covering price manipulation, workflow bypasses, privilege escalation, and race conditions when automated scanners miss critical flaws.