Skill UI

A comprehensive guide for safely migrating monolithic or aging codebases. It details incremental modernization strategies, dependency mapping, and the implementation of the Strangler Fig pattern. Learn how to build safety nets using characterization tests, manage rollouts with feature flags, and achieve zero-downtime refactoring to reduce technical debt without business disruption.

An expert guide detailing the SuperScalar protocol and Bitcoin Lightning channel factories. It explains scalable onboarding mechanisms using shared UTXOs, advanced cryptographic structures like Decker-Wattenhofer trees, and MuSig2. This knowledge is vital for understanding how Bitcoin can scale significantly without requiring disruptive soft forks.

This skill provides comprehensive methods for collecting and synthesizing Open-Source Intelligence (OSINT) regarding threat actors, malicious infrastructure, and attack campaigns. It utilizes public data sources, passive reconnaissance tools (like WHOIS, Certificate Transparency), and specialized platforms (Maltego, Shodan, SpiderFoot) to map adversary context and perform pre-engagement intelligence gathering for authorized red team assessments. Emphasis is placed on passive collection techniques to ensure legality and operational security.

A comprehensive guide for deploying Cisco Duo Multi-Factor Authentication across diverse enterprise access points, including VPN, RDP, SSH, and web applications. This skill details advanced security practices, covering adaptive access policies, phishing-resistant authentication (WebAuthn/FIDO2), device health checks, and establishing robust identity and access management controls aligned with industry compliance standards.

This guide provides comprehensive security hardening procedures for enterprise Google Workspace environments. It covers advanced topics such as enforcing phishing-resistant Multi-Factor Authentication (MFA), configuring email authentication (DMARC/SPF/DKIM), implementing Data Loss Prevention (DLP), and securing super admin accounts using Advanced Protection Program enrollment. Ideal for achieving high compliance and defending against BEC and phishing attacks.

A comprehensive guide to detecting and mitigating advanced Adversary-in-the-Middle (AiTM) phishing attacks, which bypass Multi-Factor Authentication (MFA) using reverse proxies (e.g., Evilginx, EvilProxy). Learn defensive strategies including implementing FIDO2, configuring Conditional Access policies, and monitoring session hijacking indicators in SIEM/Web Proxies.

This skill provides advanced techniques and code examples for monitoring, mapping, and pivoting across adversary-controlled infrastructure. It leverages Passive DNS, Certificate Transparency logs, Shodan/Censys scanning, and network fingerprinting (JARM/JA3S) to discover C2 servers, phishing domains, and exploitable assets over time, which is crucial for advanced security operations and threat intelligence gathering.

This guide provides a detailed template and directive for generating machine-readable, deterministic implementation plans. It is designed for complex software development tasks, such as adding new features, refactoring existing code, or designing system architecture. The output ensures that all steps are atomic, measurable, and structured for autonomous execution by AI agents or human teams, minimizing ambiguity and dependency.

Provides comprehensive guidance on determining the optimal scaling strategy for Qdrant vector databases. Covers when to transition from vertical to horizontal scaling, how to select the right number of nodes and shards, and best practices for setting replication factors to ensure zero-downtime operation and fault tolerance. Also details proper shard management and common scaling pitfalls to avoid.

Provides comprehensive guidance on upgrading your Qdrant vector database version while ensuring data integrity and maintaining application availability. It covers compatibility rules for major/minor versions, recommends step-by-step migration plans, and details how to perform zero-downtime rolling upgrades using replication factors.

A comprehensive guide for cryptanalysts detailing advanced attack vectors against RSA cryptography. This playbook covers factorization methods, small exponent exploits (e.g., Hastad Broadcast), lattice-based attacks (Wiener's, Boneh-Durfee), and methods exploiting protocol weaknesses like padding oracles. Essential for CTF challenges and authorized security assessments.

A comprehensive guide for defense contractors handling Controlled Unclassified Information (CUI). It covers preparing for CMMC Level 2 certification, implementing 110 NIST SP 800-171 controls, calculating the SPRS score using DoD methodology, and managing the POA&M and SSP. Essential for DFARS compliance and external assessments.