Skill UI

This powerful tool parses Software Bill of Materials (SBOM) in CycloneDX and SPDX formats. It correlates identified components against the NVD CVE database via API, building dependency graphs and calculating risk scores. It is essential for assessing third-party risk, identifying transitive vulnerability paths, and generating comprehensive compliance reports for supply chain security.

A deep-dive curriculum into core memory corruption vulnerability classes, covering topics like stack/heap buffer overflows, Use-After-Free (UAF), integer overflows, and format strings. This guide uses real-world CVE case studies (e.g., QNAP, Chrome) to illustrate attack vectors, impact analysis, and modern mitigation techniques. Ideal for cybersecurity professionals, penetration testers, and students learning exploit development.

An expert guide covering advanced exploitation techniques for Expression Language (EL) injection across multiple Java frameworks, including Spring (SpEL), Struts2 (OGNL), and JSP/JSF (Java EL). Details detection methods, sandbox bypasses, and real-world CVE chains for Remote Code Execution (RCE).

A comprehensive playbook detailing advanced JNDI injection techniques. Covers the abuse of JNDI lookups via RMI and LDAP, focusing on critical vulnerabilities like Log4Shell (CVE-2021-44228), deserialization gadgets, and post-8u191 bypass methods. Essential for deep-dive security testing and vulnerability research.

This skill performs a comprehensive audit of project dependencies, identifying critical security vulnerabilities (CVEs), analyzing license compliance against established policies, and detecting outdated or risky packages. It produces an actionable report including an overall dependency health score and a prioritized, time-bound remediation plan, ensuring the software supply chain is secure and legally compliant.

Exploits privileged pods, host mounts, runC CVEs, and exposed Docker sockets to break out of a container and reach the underlying host during an authorized container-security assessment. Use when executing an approved breakout test, demonstrating the real impact of a privileged or hostPath workload, or validating that escape mitigations actually hold. Keywords: container breakout, privileged, hostPath, docker.sock, runC CVE-2019-5736, CVE-2024-21626, release_agent, nsenter. Do not use for defensive detection of these techniques - use detecting-container-escape-attempts.

This comprehensive guide covers the process of creating, analyzing, and securing Software Bills of Materials (SBOMs). It utilizes Syft to generate standards-compliant SBOMs (CycloneDX or SPDX) from container images and filesystems. The workflow details correlating these SBOMs with known CVEs using Grype for vulnerability analysis, and subsequently signing the artifacts with Cosign. This process is crucial for establishing supply chain trust, ensuring dependency visibility, and integrating vulnerability gating into CI/CD pipelines.

Trivy is an open-source, comprehensive security scanner designed for DevSecOps. It assesses container images, Infrastructure-as-Code (Terraform, K8s), filesystems, and SBOMs for vulnerabilities (CVEs), misconfigurations, hardcoded secrets, and license compliance. It is essential for implementing 'shift-left' security gates in CI/CD pipelines, ensuring that code and infrastructure are secure before deployment.

This comprehensive tool scans all project dependencies against databases of known CVEs (Common Vulnerabilities and Exposures) and security vulnerabilities. It is essential for conducting thorough security audits of third-party packages, ensuring code quality before major releases, or responding to specific security advisories. It provides actionable reports categorized by severity.

A comprehensive, multi-phase security scanner designed to audit development environments (Claude Code setup). It checks MCP servers, installed skills, agents, and hooks against known threat databases, malicious patterns, and supply chain vulnerabilities. Key checks include CVE screening, prompt injection detection, and unauthorized network access patterns.

A comprehensive firmware and IoT penetration testing skill following OWASP FSTM. Covers firmware acquisition, static analysis, file system extraction with binwalk/unblob, automated EMBA scanning, system emulation via Firmadyne/QEMU, dynamic debugging, and binary exploitation for ARM/MIPS devices. Ideal for auditing routers, cameras, smart home devices, reproducing IoT CVEs, and discovering embedded 0-days.

A comprehensive guide detailing systematic techniques for breaking out of container isolation (Docker, Podman, containerd) into the underlying host operating system. Covers exploiting misconfigurations, abusing privileged modes, manipulating Linux capabilities (CAP_SYS_ADMIN), utilizing namespaces (nsenter), and exploiting known container runtimes CVEs. Essential for penetration testing and security red teaming engagements.