Skill UI

This skill details the process of reverse engineering Go-compiled malware using Ghidra. It involves parsing Go-specific metadata structures like buildinfo and pclntab to recover stripped or obfuscated function names. Users can also extract embedded module paths and dependency strings, providing critical insight into the malware's capabilities and third-party dependencies.

A comprehensive guide for deep packet inspection and network forensics using Wireshark and tshark. This skill is critical for incident response, where it allows users to capture, filter, and analyze network packet data to identify malicious command-and-control traffic, diagnose complex protocol issues, extract indicators of compromise (IOCs), and reconstruct data exfiltration paths. Use it for validating security rules and understanding network anomalies.

This utility provides comprehensive security auditing for Kubernetes Role-Based Access Control (RBAC) configurations. It identifies overly permissive roles, dangerous wildcard permissions (*), critical ClusterRoleBindings, and potential privilege escalation paths. By integrating tools like rbac-tool, KubiScan, and Kubeaudit, it helps users enforce the principle of least privilege, crucial for compliance and security assessments on EKS, GKE, and AKS clusters.

Executes authorized, advanced attack simulations against Active Directory environments to identify critical misconfigurations, weak credentials, and exploitable trust relationships. Utilizing industry tools like BloodHound, Mimikatz, and Impacket, this process simulates complex attacks such as Kerberoasting, Golden Ticket forging, and domain compromise path analysis, helping organizations validate their security posture against real-world threats.

This skill guides comprehensive Active Directory (AD) security assessment using industry-standard tools like PingCastle, BloodHound, and Purple Knight. It helps identify critical misconfigurations, excessive privileges, weak Kerberos settings, and potential lateral movement paths. Ideal for penetration testing, security audits, and incident response to proactively secure enterprise identity management systems.

A specialized, read-only tool designed for penetration testing and red teaming. It performs comprehensive enumeration across AWS and Azure, allowing users to build a deep situational awareness of an environment. Key functions include identifying internet-exposed endpoints, retrieving sensitive secrets, and mapping critical trust relationships (like sts:AssumeRole) necessary for planning lateral movement or privilege escalation.

A comprehensive project management guide detailing the entire lifecycle of a high-stakes sensing systems research submission. It provides a detailed backward planning timeline, covering critical milestones from initial venue and track selection, hardware freezing, field deployment logistics, double-blind review, and final submission to major conferences like SenSys. It emphasizes managing the critical path of field work and data artifacts.

This guide maps out the complex, multi-year pipeline for submitting research papers to top-tier computer architecture conferences (e.g., MICRO, ISCA, ASPLOS, HPCA). It details the entire lifecycle, from initial abstract submission and revision through simulation, implementation, and final symposium presentation. It critically emphasizes that the evaluation schedule—the compute-bound sweep queues and simulation cycles—is the most critical path and primary bottleneck for academic research.

A comprehensive, authorized methodology for security assessments covering cloud platforms, container runtimes, and Kubernetes clusters. It guides users through checking critical areas such as IAM privilege escalation, metadata SSRF, container escape paths, and granular RBAC misconfigurations, ensuring testing is systematic and non-destructive.