Skill UI

A comprehensive skill for conducting offensive security assessments across major cloud providers, including Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP). It guides users through reconnaissance, authentication testing, resource enumeration, privilege escalation, and persistence techniques, strictly for authorized security engagements.

A comprehensive guide detailing the methodology for identifying and exploiting Server-Side Request Forgery (SSRF). This technique is critical in authorized penetration testing, allowing attackers to pivot from public-facing applications to internal resources. Use cases include stealing cloud provider metadata (AWS, GCP), scanning private IP ranges, and accessing internal APIs and admin panels.

A comprehensive guide for authorized red-team assessments using the Pacu framework. This process details how to enumerate IAM policies, scan for privilege escalation paths, test data access across services (S3, DynamoDB), and simulate lateral movement to determine the blast radius of compromised AWS credentials.

This skill provides a comprehensive framework for performing authorized penetration testing on Google Cloud Platform (GCP). It uses specialized tools like GCPBucketBrute to enumerate publicly accessible storage buckets and audits IAM policies to identify overly permissive role bindings. The process includes checking service account keys and mapping potential privilege escalation paths, generating actionable, risk-scored reports for robust cloud security posture management.

KubeStellar Console is an open-source, multi-cluster Kubernetes dashboard (CNCF project) that provides advanced operational capabilities powered by an MCP server and built-in AI agent skills. It helps manage complex deployments across edge and cloud environments, offering AI-assisted troubleshooting, performance testing, and deep integration with major CNCF projects like Argo and Istio.

An expert playbook detailing DNS rebinding techniques to bypass the Same-Origin Policy (SOP). This method is used in penetration testing to exploit client-side applications that rely on DNS resolution for origin checks, allowing attackers to trick the browser into sending requests to internal, non-publicly accessible services (like cloud metadata endpoints) while maintaining a seemingly trusted origin.

A comprehensive playbook detailing advanced techniques for attacking Kubernetes clusters. Covers API server access, RBAC privilege escalation, service account token abuse, etcd secrets extraction, Kubelet exploitation, and various container escapes. This guide is essential for security professionals and red teams performing deep security assessments on cloud-native infrastructure.

A specialized, read-only tool designed for penetration testing and red teaming. It performs comprehensive enumeration across AWS and Azure, allowing users to build a deep situational awareness of an environment. Key functions include identifying internet-exposed endpoints, retrieving sensitive secrets, and mapping critical trust relationships (like sts:AssumeRole) necessary for planning lateral movement or privilege escalation.

A comprehensive, authorized methodology for security assessments covering cloud platforms, container runtimes, and Kubernetes clusters. It guides users through checking critical areas such as IAM privilege escalation, metadata SSRF, container escape paths, and granular RBAC misconfigurations, ensuring testing is systematic and non-destructive.

This specialized skill is designed for advanced security analysis, tracing the complete trust chain from cloud metadata services to accepted privilege. It is used in penetration testing or CTF environments to meticulously prove how metadata-derived credentials (such as instance identities or tokens) are issued and subsequently accepted by a cloud or control plane API, thereby exposing the decisive trust edge.