Skill UI

This guide outlines the methodology for conducting hardware security research on embedded systems. It covers physical interface analysis (UART, JTAG, SWD), debug pad triage, secure boot evaluation, and offline firmware extraction. It emphasizes systematic, non-destructive testing protocols and responsible handling of physical devices.

A specialized downstream skill designed for solving encrypted ZIP/PKZIP challenges, particularly those using the legacy ZipCrypto method in CTF competitions. This workflow utilizes known-plaintext attacks (via tools like bkcrack) to recover internal encryption keys, enabling decryption and extraction without resorting to brute-force password guessing. Use this when a predictable plaintext fixture is available.

A comprehensive methodology for offensive security, detailing how to systematically extract secrets from Continuous Integration/Continuous Deployment (CI/CD) pipelines. Techniques covered include dumping environment variables, exploiting misconfigurations in HashiCorp Vault, AWS Secrets Manager, and cloud platform tokens (GitHub, GitLab, etc.). It also guides attackers on OIDC federation abuse, build log analysis, and advanced exfiltration methods, mapping to MITRE ATT&CK T1552.

Expert firmware analyst for authorized embedded systems and IoT security assessments, covering firmware acquisition, extraction, emulation isolation, filesystem review, binary analysis, and vulnerability identification.

Performs end-to-end firmware penetration testing on IoT and router images following the OWASP FSTM nine-stage flow: extraction, EMBA static analysis, Firmadyne/QEMU emulation, AFL++ fuzzing and exploitation, for authorized labs only.