Skill UI

Deploy NextDNS as a zero trust DNS filter that encrypts queries (DoH/DoT/QUIC), leverages threat intelligence, blocks trackers, and enforces allow/deny lists across endpoints to harden enterprise networks.

Performs comprehensive API discovery across an organization using passive traffic analysis, active scanning, DNS enumeration, JavaScript scraping, and cloud inventory to catalog documented, shadow, zombie, and deprecated endpoints for security assessments.

Guide to detect and exploit blind Server-Side Request Forgery risks via out-of-band callbacks, DNS/timing analysis, and cloud metadata enumeration when assessing webhooks, document processors, or internal services.

Walks through authorized reconnaissance to enumerate DNS records, attempt zone transfers, brute-force subdomains, and map infrastructure so you can identify misconfigurations and exposed assets before targeting services or mail servers.

Automates tshark and pyshark to parse PCAPs for protocol stats, suspicious flows, DNS anomalies, and IOC extraction during security assessments or incident response drills.

Automate OSINT collection via the SpiderFoot REST API and CLI to profile domains, IPs, emails, leaked credentials, and DNS records across 200+ sources, parse structured results, and deliver intelligence reports for security assessments and response.

This tool is designed for security professionals to test for Server-Side Request Forgery (SSRF) vulnerabilities. It systematically probes user-controllable URL parameters to identify access to internal network services, cloud metadata endpoints (AWS/GCP/Azure), and restricted local resources. It supports various payload techniques, including protocol handlers (gopher, file), IP encoding, and DNS rebinding, making it essential for thorough security assessments and penetration testing.

Use ProjectDiscovery’s Subfinder to passively enumerate target domains’ subdomains, configure API sources, and stream results to httpx/dnsx/nuclei for validation, rate control, and attack-surface mapping during penetration tests or bug bounty reconnaissance.

This guide details a comprehensive methodology for penetration testing desktop (thick client) applications. It covers static and dynamic analysis, focusing on identifying vulnerabilities such as hardcoded credentials, insecure local storage, DLL hijacking, memory manipulation, and API communication flaws. Tools like dnSpy, Procmon, and Burp Suite are utilized for in-depth security auditing of enterprise and banking software.

Register ICANN domains via a REST API with crypto payments so AI agents can autonomously check availability, pay in USDC/USDT/ETH/BTC, and retrieve DNS management credentials.

Detects and exploits ransomware kill switch mechanisms via mutex, domain, registry, and file checks, enabling proactive vaccination and DNS monitoring to stop execution before encryption.

A comprehensive automation toolkit designed to manage the entire Vercel deployment lifecycle and associated infrastructure. Users can programmatically monitor, trigger, and manage deployments, configure custom domains and DNS records, manage environment variables across multiple targets, and oversee project settings and project listings. Essential for implementing robust CI/CD pipelines and managing cloud infrastructure.