Skill UI

This skill automates the execution of red team phishing campaigns using the Python gophish library. It enables users to create sophisticated email templates with tracking pixels, configure SMTP profiles, import target lists from CSV, and launch full-scale simulations. The system tracks key metrics, including open rates, click rates, and submitted credentials, providing essential data for security awareness training and vulnerability assessments.

This tool is designed for security professionals to test for Server-Side Request Forgery (SSRF) vulnerabilities. It systematically probes user-controllable URL parameters to identify access to internal network services, cloud metadata endpoints (AWS/GCP/Azure), and restricted local resources. It supports various payload techniques, including protocol handlers (gopher, file), IP encoding, and DNS rebinding, making it essential for thorough security assessments and penetration testing.

Simulates and detects software supply chain attacks by checking typosquatting risks with Levenshtein distance, probing dependency confusion across registries, verifying package hashes, and running pip-audit vulnerability scans for security assessments.

Performs sector-specific threat landscape assessments by analyzing targeting patterns, attack vectors, TTPs, and vulnerability trends so security teams can prioritize risk management, investment, and reporting for verticals such as finance, healthcare, energy, and government.

Performs authenticated and unauthenticated Nessus scans to find vulnerabilities, misconfigurations, default credentials, missing patches, and compliance issues while correlating CVEs and CVSS to prioritize remediation across networks, servers, and applications.

Step-by-step Nikto guidance covering basic and advanced scans, tuning options, report exports, and integrations so security teams can validate web servers, SSL settings, and CVEs during vulnerability assessments.

This tool provides a structured methodology for triaging raw vulnerability findings generated by DAST and SAST scanners. It utilizes the OWASP risk rating methodology to validate true positives, filter out false positives, and calculate a comprehensive risk score (Risk = Likelihood x Impact). This process significantly reduces alert fatigue and ensures development teams prioritize remediation efforts on the most critical and exploitable vulnerabilities.

Guides analysts through CVSS v4 scoring, vector parsing, and contextual factors (EPSS, CISA KEV, asset criticality) to prioritize vulnerabilities, adjust environmental scores, and blend threat telemetry for effective remediation planning.

Use Anchore Grype to scan container images, archives, and SBOMs for known CVEs, enforce severity thresholds, and integrate results into CI/CD pipelines for consistent container security posture.

Guide to configure and run Nessus scans across servers, workstations, and network devices, covering policy creation, credentialed and unauthenticated checks, REST automation, and result analysis for continual vulnerability management.

Checks Android IPC through intents to find vulnerabilities such as intent injection, unauthorized component access, broadcast sniffing, pending intent hijacking, and content provider leaks by enumerating exported components and exercising them via Drozer, Frida, and ADB.

This skill provides a methodology and code framework to test APIs for Mass Assignment (Over-posting) vulnerabilities. It simulates malicious client requests by identifying writable endpoints and injecting unauthorized or privileged fields (e.g., role, isAdmin, balance) into the request body. The goal is to detect if the server blindly binds all client-supplied parameters to the data model without proper allowlisting or validation, potentially allowing unauthorized privilege escalation or data modification. This is crucial for adherence to OWASP API security standards.