Skill UI

ScoutSuite runs agentless queries against AWS APIs to enumerate resources, highlight misconfigurations, and output interactive HTML reports so teams can prioritize remediation and integrate scans into CI/CD pipelines.

Use Hashcat to assess password strength via dictionary, brute-force, rule-based, and hybrid attacks; analyze cracking results, benchmark GPU throughput, and deliver compliance-ready reports during authorized audits.

Automates CIS Kubernetes Benchmark audits with kube-bench, verifying control plane, worker nodes, etcd, and policy settings while producing actionable pass/fail/warn reports for Kubernetes compliance and DevOps pipelines.

Walk through SSRF detection by probing metadata endpoints, internal services, and protocol handlers via controllable URL inputs, analyzing responses for disclosure, and producing vulnerability reports for authorized penetration tests.

Trivy scans Docker images for OS, language, configuration, secret, and license vulnerabilities, emits SARIF/CycloneDX/SPDX/JSON reports, and enforces policies via .trivyignore while integrating into GitHub Actions or GitLab CI pipelines to keep containers secure.