Skill UI

Automate forensic capture of Google Drive, OneDrive, Dropbox, and Box data by using service APIs alongside endpoint sync artifact analysis to gather admissible evidence for incident response and auditing exercises.

Use GCPBucketBrute alongside gcloud IAM inspection to enumerate storage buckets, evaluate IAM bindings, and hunt privilege escalation paths during GCP security assessments.

Guides security teams through Forseti, SCC, and gcloud workflows to audit IAM policies, firewall rules, bucket permissions, and CIS benchmark compliance across GCP organizations with optional ScoutSuite comparison and BigQuery exports for analysis.

Guide for integrating Hardware Security Modules via PKCS#11—covering slot/token discovery, key creation, signing, verification, and compliance reporting with python-pkcs11, AWS CloudHSM, and YubiHSM2 in security assessments or audits.

Performs comprehensive IoT device security assessments, combining hardware interface testing, firmware extraction, runtime exploitation, and network/cloud/mobile analysis to find vulnerabilities before deployment or for product reviews.

A guided workflow for auditing AWS Lambda, Azure Functions, and GCP Cloud Functions to catch permissive execution roles, exposed secrets, and missing runtime protections before deployment.

Audits service accounts across Active Directory, cloud platforms, databases, and applications to spot orphaned, over-privileged, or non-compliant identities, assess rotations, and document dependencies for remediation.

Automates scheduled rotation of service account credentials across AD, cloud IAM, and application stores, updating all consumers, verifying health, and retiring old secrets to reduce compromise risk.

This tool is designed for security professionals to test for Server-Side Request Forgery (SSRF) vulnerabilities. It systematically probes user-controllable URL parameters to identify access to internal network services, cloud metadata endpoints (AWS/GCP/Azure), and restricted local resources. It supports various payload techniques, including protocol handlers (gopher, file), IP encoding, and DNS rebinding, making it essential for thorough security assessments and penetration testing.

Guides cloud security teams through setting up Microsoft Defender for Cloud to protect Azure workloads, extend CNAPP coverage to AWS/GCP, manage Secure Score, and monitor threats centrally via the unified Defender portal.

Hardens managed EKS, AKS, and GKE clusters by enforcing Pod Security Standards, network policies, RBAC scoping, image admission controls, workload identity, and runtime monitoring for cloud-specific IAM integrations.

Harden serverless compute on AWS Lambda, Azure Functions, and Google Cloud Functions by enforcing least-privilege IAM roles, moving secrets into vaults, scanning dependencies, validating inputs, securing function URLs, and monitoring runtimes so injections, credential theft, and supply-chain threats are caught before deployment.