Skill UI

This advanced skill details dual-use security techniques for analyzing protected binaries, conducting malware analysis, and performing authorized penetration testing. It strictly mandates that users confirm explicit written authorization, adhere to defined scope, and ensure legal compliance (e.g., CFAA, DMCA). Use cases include CTF competitions, academic research, and internal security auditing, emphasizing defensive recommendations and evidence preservation.

This advanced skill details dual-use security techniques for analyzing protected binaries, conducting malware analysis, and performing authorized penetration testing. It strictly mandates that users confirm explicit written authorization, adhere to defined scope, and ensure legal compliance (e.g., CFAA, DMCA). Use cases include CTF competitions, academic research, and internal security auditing, emphasizing defensive recommendations and evidence preservation.

A comprehensive playbook detailing identification and bypass techniques for major binary protections, including ASLR, PIE, NX/DEP, RELRO, and stack canaries. This guide is essential for understanding how to exploit modern, difficult-to-break systems in advanced security research and CTF competitions.

This specialized skill guides users through analyzing complex Active Directory Certificate Services (AD CS) abuse scenarios. It is essential for proving how a weakness in a template, CA policy, or issuance right can lead to unauthorized privilege acceptance (e.g., via PKINIT, Schannel). The workflow focuses on mapping the entire certificate issuance chain to the resulting accepted service path.

This specialized skill is designed for advanced security analysis, tracing the complete trust chain from cloud metadata services to accepted privilege. It is used in penetration testing or CTF environments to meticulously prove how metadata-derived credentials (such as instance identities or tokens) are issued and subsequently accepted by a cloud or control plane API, thereby exposing the decisive trust edge.

A specialized skill for analyzing the discrepancy between static Kubernetes/Compose manifests and the actual live operational state of a container runtime. It traces complex dependencies, such as secrets consumption, sidecar/init container modifications, network routing, and mounted volume paths. Use this when the core challenge involves proving how the live execution path differs from the documented intent, forming a minimal, verifiable evidence chain.

This specialized skill is designed for in-depth security and forensic analysis of Windows secrets protected by DPAPI. It maps the entire lifecycle of encrypted credentials, tracing the flow from the initial protected blob or masterkey through the context unwrapping (e.g., user logon, machine context, domain backup keys) to the specific service that finally accepts the plaintext secret. Use this to prove the decisive access edge in a complex compromise scenario.

This specialized skill is designed for deep forensic analysis in complex Windows environments, crucial for CTF and red teaming. It traces identity flows, including Active Directory (AD) origins, Kerberos ticket lifecycles, and OAuth authorization claims. Use it to correlate host artifacts (LSA, DPAPI, Sysmon) with identity evidence to map complete lateral movement and privilege escalation chains.

A specialized downstream skill for deep security analysis of JSON Web Tokens (JWT), JWS, and JWE. It guides the identification of vulnerabilities where token components (headers, claims, keying) lead to unauthorized identity assumption or privilege escalation. Use this to trace the full path from token supply to final application acceptance.

This skill is designed for deep security and behavioral analysis within the Kubernetes control plane. It specializes in tracing complex interactions, including RBAC edge cases, service-account trust paths, admission webhook behavior, resource mutation, and cluster-level state drift. Use it when diagnosing why live workloads differ from manifest declarations, or when investigating cluster-wide permission issues.

A highly specialized skill for advanced security analysis, designed to trace complex Kerberos delegation chains (including constrained, unconstrained, and RBCD). Use this skill to pinpoint the exact delegation edge, analyze ticket minting (S4U), and prove the effective privilege gained by a target service, going beyond simple domain compromise statements.

A specialized deep-dive skill for analyzing container-to-host escape vulnerabilities. This tool is used after a sandbox orchestrator establishes initial assumptions, focusing on mapping isolation boundaries (namespaces, cgroups, seccomp, capabilities). It helps prove boundary crossings, identify minimal exploit primitives, and determine if an exploit can break out of the container context to the host kernel.