Skill UI

Simulates VLAN hopping attacks via switch spoofing, DTP negotiation, double tagging, and VTP injection on authorized networks to verify VLAN segmentation, trunk security, and monitoring readiness before deploying defenses.

Automates mass-assignment checks by injecting privileged properties (role, balance, pricing, permissions) into writable JSON/XML API endpoints so security teams can verify OWASP API3 Broken Object Property Level Authorization defenses and spot auto-binding vulnerabilities.

Walks security testers through discovering open redirect parameters, applying bypass techniques, chaining with other flaws, and automating checks to harden web login, OAuth, and phishing-resistant flows.

Guides SOC Tier 1 analysts through Splunk ES Incident Review to classify alert severity, investigate notable events with SPL, correlate telemetry, and document disposition decisions before escalating or closing incidents.

Structured guide to triage security alerts by enriching data, classifying incident type, scoring severity, and launching the proper IR playbooks plus team notifications so SOC analysts resolve threats faster.

Defines an IEC 62443-compliant conduit and workflow for OT remote access, combining DMZ jump servers, MFA gateways, session recording, and approval flows so vendors and engineers manage ICS without touching OT networks directly.