Skill UI

This skill provides a comprehensive guide for identifying and exploiting insecure local data storage vulnerabilities in Android and iOS applications. It covers analyzing plaintext credentials, unencrypted SQLite databases, insecure SharedPreferences, and improper keychain/keystore usage. Essential for performing robust mobile penetration testing focused on OWASP M9.

LaZagne is an open-source post-exploitation tool utilized by red teams to harvest stored credentials from compromised endpoints. It supports Windows, Linux, and macOS, extracting passwords from browsers (Chrome, Edge), databases (MySQL, SQLite), system vaults (DPAPI, LSA), and various applications. It is crucial for privilege escalation and lateral movement during authorized security assessments.

Provides comprehensive, enterprise-level monitoring for all Power Automate flows across an entire tenant. Using a cached store, it tracks failure rates, run health trends, asset inventory (makers, apps, connections), and compliance reports without hitting API rate limits. Ideal for governance teams needing an aggregated view of platform health and root-cause analysis.

This guide provides comprehensive details on the OpenPitrix application management system within KubeSphere. It covers the entire application lifecycle, including managing app repositories (Repo), uploading and versioning templates (Application/ApplicationVersion), conducting review processes, and finally deploying/upgrading applications (ApplicationRelease). Use this skill when troubleshooting App Store interactions, understanding KubeSphere's backend APIs, or managing deployed workloads.

This guide details the architecture and implementation of a ransomware-resilient backup strategy, adhering to the extended 3-2-1-1-0 methodology. It covers critical steps including defining RPO/RTO, establishing immutable/air-gapped copies, isolating backup credentials from the production domain, and automating periodic restore testing. Use this framework to ensure business continuity against sophisticated cyberattacks.