Skill UI

This comprehensive guide details the methodology for detecting and exploiting Blind Server-Side Request Forgery (SSRF) vulnerabilities. It covers crucial techniques including out-of-band (OOB) detection, internal network enumeration (port scanning, IP scanning), accessing cloud metadata endpoints (AWS, GCP, Azure), and bypassing common security filters using various encoding and parsing confusion methods. Ideal for penetration testing and cloud security assessments.

This comprehensive guide outlines a structured workflow for conducting digital forensics investigations across major cloud providers, including AWS, Azure, and GCP. It covers critical steps such as evidence preservation (snapshots, metadata capture), systematic log collection (CloudTrail, Activity Logs, Audit Logs, VPC Flow Logs), and advanced analysis techniques to trace unauthorized accesses and identify root causes of security breaches.

LaZagne is an open-source post-exploitation tool utilized by red teams to harvest stored credentials from compromised endpoints. It supports Windows, Linux, and macOS, extracting passwords from browsers (Chrome, Edge), databases (MySQL, SQLite), system vaults (DPAPI, LSA), and various applications. It is crucial for privilege escalation and lateral movement during authorized security assessments.

This guide provides a comprehensive methodology for assessing the security posture of Kubernetes etcd clusters. It covers critical areas including encryption at rest (for secrets), TLS transport security, access control validation, secure backup procedures, and network isolation checks, ensuring cluster data integrity and confidentiality.

Open Source Intelligence (OSINT) is the critical first phase of red team engagements. This guide details how to systematically collect publicly available data about a target organization. It covers mapping network assets (domains, IPs), identifying personnel for social engineering, discovering credential leaks, and mapping the entire technology stack. Use this skill during authorized security assessments to build comprehensive attack surface maps and initial access strategies.

This skill provides comprehensive capability to discover and inventory all privileged accounts across an enterprise infrastructure. It covers domain admins, local admins, service accounts, database roles, and cloud IAM roles. It is essential for security assessments, incident response, and compliance auditing, helping to establish a complete baseline for Privileged Access Management (PAM).

A comprehensive skill for auditing service accounts across complex enterprise environments, including Active Directory, major cloud platforms (AWS, Azure, GCP), and databases. It identifies risks such as orphaned accounts, over-privileged access, and non-compliant credentials, ensuring adherence to industry standards like SOX, PCI DSS, and HIPAA. Used during security assessments and compliance reviews.

This skill provides comprehensive procedures for identifying and remediating Amazon S3 bucket misconfigurations. It covers enabling Block Public Access settings, auditing policies and ACLs, enforcing default encryption (KMS/AES), and utilizing AWS Config/Lambda for automated remediation. It is essential for maintaining data compliance and responding to security incidents.

This skill provides comprehensive guidance on hardening and securing critical process historian servers (e.g., OSIsoft PI, Honeywell PHD) operating within Operational Technology (OT) environments. It covers best practices for network placement across the Purdue Model, implementing robust access controls, establishing secure data replication architectures through DMZs (using data diodes), preventing SQL injection, and maintaining data integrity for safety-critical and regulatory reporting purposes. It is essential for minimizing cyber risks in industrial control systems.

This guide outlines the implementation of Remote Browser Isolation (RBI) as a core component of a Zero Trust architecture. It details policies for URL risk classification, Data Loss Prevention (DLP) controls, and Content Disarm and Reconstruction (CDR). This is essential for hardening web access, protecting against zero-day exploits, phishing, and preventing data exfiltration from untrusted web content.

A comprehensive guide to implementing Role-Based Access Control (RBAC) in ClickHouse. Learn how to manage user authentication, define hierarchical roles, enforce row-level security (RLS) for tenant isolation, restrict data access via column-level grants, and manage resource consumption using quotas and settings profiles. Essential for multi-tenant SaaS and secure data analytics platforms.

This skill guides the secure configuration of Figma API access across development, staging, and production environments. It details best practices for managing separate API tokens (PATs), file keys, and cache settings. The focus is on implementing robust environment guards and utilizing secret management solutions to prevent cross-environment data leakage and accidental operations.