Skill UI

This component is an essential extension for KubeSphere Observability Platform, designed for comprehensive collection, processing, and storage of Kubernetes and KubeSphere audit events. It supports various sinks, including OpenSearch and Doris, and provides an API for querying historical audit data, ensuring robust auditing capabilities for platform operations.

This extension component is integral to the KubeSphere Observability Platform. It provides robust mechanisms for collecting, processing, and storing Kubernetes events using the kube-events-exporter. Users can leverage the detailed event query API to gain deep insights into cluster activity, making it essential for comprehensive system monitoring and observability setup.

A comprehensive guide for simulating a full Software Development Life Cycle (SDLC) using specialized AI roles. It defines protocols for managing cross-functional teams (Dev, QA, DevOps, Product), covering sprint planning, codebase management, bug tracking, and deployment, ensuring context survival across multiple chat sessions.

A comprehensive guide for connecting resource-constrained microcontrollers (like Arduino) to Azure IoT Hub and IoT Edge. It provides structured patterns for secure provisioning, handling intermittent networks (store-and-forward), robust telemetry transmission (MQTT over TLS), and implementing local edge decision-making for industrial and field deployments.

Covers offensive workflows for Zigbee, Thread, and Matter mesh networks, including 802.15.4 sniffing, commissioning abuse, key capture, replay/injection, and control-command exploitation in smart-home deployments.

A comprehensive playbook detailing identification and bypass techniques for major binary protections, including ASLR, PIE, NX/DEP, RELRO, and stack canaries. This guide is essential for understanding how to exploit modern, difficult-to-break systems in advanced security research and CTF competitions.

A comprehensive playbook detailing how web applications can be vulnerable to attacks by manipulating the HTTP Host header. Covers critical techniques such as password reset poisoning, Web Cache Poisoning, Server-Side Request Forgery (SSRF), and Virtual Host bypass. Essential reading for penetration testers and security researchers.

A comprehensive playbook for advanced mobile security assessments of iOS applications. Covers both jailbroken and non-jailbroken environments, focusing on critical attack vectors such as keychain extraction, URL scheme hijacking, Universal Links exploitation via AASA misconfigurations, runtime memory manipulation (Frida/Objection), and binary protection analysis.

A comprehensive playbook detailing advanced techniques for attacking Kubernetes clusters. Covers API server access, RBAC privilege escalation, service account token abuse, etcd secrets extraction, Kubelet exploitation, and various container escapes. This guide is essential for security professionals and red teams performing deep security assessments on cloud-native infrastructure.

A comprehensive guide for managing and operating the KubeSphere network extension. This skill provides detailed instructions on installing, upgrading, enabling, or disabling the network extension, managing Calico IPPool resources, configuring NetworkPolicies, and troubleshooting network isolation flows within a Kubernetes cluster environment. Essential for platform engineers and DevOps teams.

A comprehensive guide detailing various 802.11 management frame attacks, including deauthentication and disassociation. It covers targeted single-client deauth for handshake capture, broadcast DoS attacks, and advanced action-frame exploitation to bypass PMF (802.11w). Essential for professional penetration testing and wireless vulnerability assessment.

A comprehensive playbook for advanced security testing, focusing on race conditions and TOCTOU (Time-of-check to time-of-use) vulnerabilities in web applications. It guides users to exploit non-atomic, state-changing operations (e.g., coupons, balance deductions, single-use rewards) by sending highly synchronized, parallel requests (including HTTP/2 single-packet attacks). Essential for identifying weaknesses in authorization and transactional integrity.