Skill UI

This comprehensive guide details advanced techniques for detecting and exploiting NoSQL injection vulnerabilities across various databases like MongoDB and CouchDB. It covers critical attack vectors, including authentication bypass using operators ($ne, $gt), blind data extraction via $regex, and executing arbitrary server-side JavaScript through the $where clause. Essential reading for penetration testers and security researchers assessing NoSQL backends.

A comprehensive guide for penetration testers detailing methods to identify and exploit misconfigurations in OAuth 2.0 and OpenID Connect (OIDC) flows. Techniques cover redirect URI manipulation, authorization code theft, token leakage via headers, and scope escalation during security assessments.

A comprehensive skill for detecting and exploiting JavaScript prototype pollution vulnerabilities in both client-side and server-side applications. It demonstrates advanced property injection techniques to achieve critical security outcomes, including Cross-Site Scripting (XSS), Remote Code Execution (RCE), and authentication/authorization bypass, especially in Node.js environments and JSON merging scenarios.

This comprehensive guide details the professional process of detecting and exploiting SQL injection vulnerabilities using the powerful sqlmap tool. It covers the entire workflow, from initial vulnerability identification and basic scanning to database enumeration, data dumping, advanced exploitation (like file reading and OS command execution), and WAF bypass techniques, ensuring thorough penetration testing reporting.

This skill focuses on identifying and exploiting type juggling vulnerabilities in PHP web applications. It demonstrates techniques such as loose comparison bypass (==), type coercion using JSON/serialized input, and leveraging magic hash collisions to circumvent authentication mechanisms, password verification, and general application logic checks in a controlled security testing environment.

This comprehensive guide outlines techniques for authorized penetration testing of real-time web applications using WebSocket connections. It covers discovering various WebSocket endpoints, testing for authentication bypass, identifying Cross-Site WebSocket Hijacking (CSWSH) vulnerabilities, and assessing message handling for injection flaws (SQLi, XSS). Essential for securing chat, trading, and live notification platforms.

This skill details the exploitation of the critical Zerologon vulnerability (CVE-2020-1472) found in the Microsoft Netlogon Remote Protocol. It allows an unauthenticated attacker to compromise a domain controller by resetting its machine account password. The guide covers the complete attack chain, including initial exploitation, credential dumping via DCSync, and subsequent privilege escalation in Active Directory environments. Used exclusively for authorized red teaming and security testing.

This script is designed for malware analysis, specifically targeting .NET-based Remote Access Trojans (RATs) like Agent Tesla. It automatically extracts embedded and obfuscated configuration data, including SMTP credentials, FTP endpoints, Telegram tokens, and C2 webhooks. It utilizes advanced techniques such as regex pattern matching, Base64 decoding, and simulating XOR/SHA256 decryption to reveal critical threat intelligence for security research.

A comprehensive guide detailing best practices for hardening Docker containers, aligning with CIS Docker Benchmark v1.8.0. It covers host configuration, minimizing attack surface, implementing least privilege, and enhancing runtime security using techniques like read-only filesystems, Seccomp, and AppArmor. Use this when deploying secure, production-grade containerized applications.

This skill detects domain fronting, an advanced technique used by attackers to mask Command and Control (C2) traffic. It analyzes proxy/web gateway logs for mismatches between the TLS SNI field and the HTTP Host header, combined with deep TLS certificate inspection using pyOpenSSL. This is crucial for security teams investigating sophisticated network threats and validating detection coverage.

This skill provides advanced threat hunting capabilities to detect NTLM relay attacks within Active Directory environments. It analyzes critical Windows Security Event 4624 logs, specifically focusing on logon type 3 using NTLMSSP authentication. The detection logic identifies suspicious patterns, including IP-to-hostname mismatches, rapid multi-host authentications, and lack of SMB signing enforcement, helping SOC analysts pinpoint unauthorized credential access attempts.

A detailed methodology for proactive threat hunting focused on identifying deep-seated persistence mechanisms within Windows operating systems. This guide covers advanced techniques such as monitoring Run keys, analyzing Winlogon modifications, detecting IFEO injection, and identifying COM object hijacking. It is crucial for incident response, purple teaming, and ensuring system integrity against advanced persistent threats (APTs).