Skill UI

Guides security testers through OWASP API Security Top 10-focused assessments of REST, GraphQL, and gRPC endpoints, covering discovery, authentication, authorization, input validation, and injection checks with tools like Burp Suite, Postman, and custom scripts.

Implements UEBA using Elasticsearch/OpenSearch to normalize authentication, file, and network logs, establish behavioral baselines, calculate anomaly scores through deviation and peer-group analysis, and correlate indicators into SOC-ready alerts for insider threat detection.

Guide for identifying and exploiting NoSQL injection flaws in MongoDB, CouchDB, and similar databases to bypass authentication, extract data, and expose risky query handling during pentests or bug bounties.

Creates section-by-section outlines for ICLR/NeurIPS/ICML submissions by extracting claims, evidence, experimental data, and reviewer insights so authors can plan method/experiment/theory sections before writing.

Guide to installing GVM/OpenVAS, configuring SSH/SMB/ESXi credentials, defining targets, and running authenticated vulnerability scans for complete host visibility in network security assessments.

Guide for using Burp Suite’s scanner, repeater, intruder, and DOM Invader to identify reflected, stored, and DOM XSS flaws during authorized web app assessments and CSP/filter evaluations.

Automates testing of OAuth 2.0 and OpenID Connect implementations for redirect URI flaws, CSRF/state issues, PKCE bypasses, token misconfigurations, and scope escalation to surface vulnerabilities before attackers can exploit them.