Skill UI

Guides administrators through configuring TLS 1.3 on nginx, Apache, and Python apps, validating cipher suites, enabling 0-RTT precautions, disabling legacy TLS, and testing with OpenSSL/testssl for hardened secure communications.

Exploit misconfigured Active Directory Certificate Services ESC1 templates to request certificates as privileged users, then escalate to Domain Admin during authorized red team or pentest work. Includes enumeration, certificate requests, PKINIT authentication, and follow-on domain access.

Automates testing APIs for Broken Function Level Authorization by mapping admin endpoints, manipulating HTTP methods, and validating access controls to expose privilege escalation risks.

Exploit the noPac chain (CVE-2021-42278/42287) to elevate a standard Active Directory user to Domain Admin by spoofing machine accounts, abusing Kerberos PAC confusion, and automating the DCSync workflow during authorized red-team engagements.

Guides admins through hardening Google Workspace via console configuration, phishing-resistant MFA, DLP, OAuth controls, email authentication, and sharing restrictions to secure enterprise cloud office environments.

Guides administrators through designing and implementing Privileged Access Workstations (PAWs) with hardened devices, just-in-time access, Intune/GPO compliance, and CyberArk or BeyondTrust integration for secure sensitive operations.

Guides teams through tightening Kubernetes RBAC by removing excess ClusterRoleBindings, favoring namespace-scoped permissions, assigning dedicated service accounts, blocking elevated verbs, and integrating OIDC to enforce least privilege and auditability.

Guide for conducting focused Active Directory penetration tests: enumerate domain objects, analyze attack paths with BloodHound, abuse Kerberos, exploit ADCS/DCSync, and demonstrate privilege escalation to Domain Admin.

Guides authorized testers through enumerating IAM permissions, scanning for escalation techniques with Pacu, mapping privilege graphs via Principal Mapper, and auditing cross-account trust policies to prevent unauthorized admin escalation.

This skill provides a methodology and code framework to test APIs for Mass Assignment (Over-posting) vulnerabilities. It simulates malicious client requests by identifying writable endpoints and injecting unauthorized or privileged fields (e.g., role, isAdmin, balance) into the request body. The goal is to detect if the server blindly binds all client-supplied parameters to the data model without proper allowlisting or validation, potentially allowing unauthorized privilege escalation or data modification. This is crucial for adherence to OWASP API security standards.

A comprehensive guide for deploying, configuring, and maintaining the OpenViking server in production environments. It covers service configuration management, environment setup using `uv` for virtual environments, reliable startup procedures using `nohup`, graceful shutdown methods, and critical data cleanup workflows. This resource is essential for DevOps engineers and system administrators managing OpenViking services.

Persona for IT administrators to monitor Workspace security, configure Drive sharing policies, and run workflows for standup reporting and audit review while emphasizing dry-run checks and auth-status verification.