Skill UI

A comprehensive guide detailing offensive techniques for attacking Microsoft Active Directory environments. Covers the full red team kill chain: from initial reconnaissance (using BloodHound/PowerView) and credential harvesting (Kerberoasting, AS-REP Roasting) to advanced lateral movement and privilege escalation via Kerberos ticket forging (Golden/Silver Tickets). Essential for penetration testers and authorized red team operations.

This skill automates the validation of AWS environments against critical industry compliance benchmarks. It performs detailed checks for CIS AWS Foundations, PCI-DSS, HIPAA, and SOC 2 standards, covering key areas like Identity and Access Management (IAM), logging, data protection, and network security. Essential for preparing for regulatory audits and maintaining continuous secure operations.

This skill provides comprehensive guidance and established patterns for managing and maintaining Windows 11 operating systems. It is designed to assist users in performing routine system updates, troubleshooting issues, and general system administration tasks within a Windows 11 environment, ensuring system stability and optimal performance.

Conduct comprehensive, offensive security assessments across major cloud environments, including Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP). This skill simulates real-world attacks, covering reconnaissance, authentication bypass, resource enumeration, privilege escalation, and data extraction to identify critical misconfigurations and vulnerabilities in cloud infrastructure.

Manages environment variables and secret hygiene across local and production workflows, offering audit-ready scans, severity-based findings, rotation guidance, and CI-friendly outputs to keep credentials safe before commits or deployments.

This comprehensive guide provides advanced troubleshooting workflows for complex, microservices-based environments running on Kubernetes. It covers diagnosing issues like CrashLoopBackOff, cascade failures, resource pressure (CPU/Memory), and detailed Redis state analysis, ensuring systematic root cause identification across multiple services.

This skill provides a comprehensive methodology for simulating privilege escalation attacks on compromised Linux and Windows environments. It guides the user through identifying vectors—including SUID abuse, misconfigured services, kernel vulnerabilities, cron job exploitation, and credential harvesting—to elevate initial low-privilege access to root or SYSTEM control. It is crucial for deep-dive penetration testing and assessing system security hardening.

A comprehensive playbook detailing structured recovery steps for ransomware incidents, adhering to NIST and CISA frameworks. The workflow guides users through environment isolation, forensic evidence preservation, Active Directory restoration (including krbtgt reset), backup integrity validation, and phased system rebuilding. Essential for defined disaster recovery and post-incident restoration.

This guide details the comprehensive process of securing a container registry using Harbor. Learn how to implement advanced security features such as integrated vulnerability scanning (Trivy), image signing (Cosign/Notary), Role-Based Access Control (RBAC), and content trust policies. The workflow covers deployment, policy enforcement, and integrating external authentication like OIDC, ensuring compliant and secure image provenance for Kubernetes environments.

Defines a secure remote access workflow for OT/ICS environments, detailing jump server architecture, MFA, vendor controls, session recording, and compliance with IEC 62443 and NERC CIP-005-7 so operators and engineers can replace insecure VPN tunnels.

This skill analyzes Azure resource groups in depth, identifying all resources, their configurations, and complex interdependencies. It maps relationships—including network connections, data flows, and managed identities—to generate comprehensive, detailed Mermaid architecture diagrams. Use this when you need a clear, structured visualization and full documentation of an Azure environment's topology.

This guide provides comprehensive best practices for creating optimized, secure, and efficient multi-stage Dockerfiles. Learn how to separate build environments (builder stage) from minimal runtime environments, significantly reducing image size and attack surface. Topics covered include layer caching optimization, security hardening (non-root users), and using minimal base images for reproducible builds.