Skill UI

A rigorous, multi-phase auditing skill designed for blockchain protocols. It verifies whether the implemented smart contract code strictly adheres to the detailed specifications provided in whitepapers, design documents, or technical specifications. It performs exhaustive, line-by-line semantic analysis to identify gaps, inconsistencies, and deviations across logic, invariants, and security guarantees, making it essential for formal compliance checking in decentralized systems.

Guides designing IEC 62443-3-2 compliant OT security zones and conduits, covering risk-based partitioning, Security Level targets, conduit controls, microsegmentation with industrial firewalls, and validating the zone architecture through traffic analysis and testing.

This guide details the implementation of robust web application logging using ModSecurity WAF and the OWASP Core Rule Set (CRS). It covers configuring audit logging, tuning rules to minimize false positives, and analyzing logs for advanced attack detection. The process ensures that security controls are established, providing critical forensic data for SIEM integration and compliance.

GoPhish is an open-source framework designed for security teams to conduct authorized phishing awareness campaigns. This skill guides users through the entire process: deploying GoPhish, setting up realistic phishing scenarios (templates, landing pages), executing the campaign, and analyzing results to measure and improve organizational resilience against social engineering attacks. It is crucial for proactive security testing and incident response validation.

This skill provides a comprehensive methodology for simulating privilege escalation attacks on compromised Linux and Windows environments. It guides the user through identifying vectors—including SUID abuse, misconfigured services, kernel vulnerabilities, cron job exploitation, and credential harvesting—to elevate initial low-privilege access to root or SYSTEM control. It is crucial for deep-dive penetration testing and assessing system security hardening.

This guide details advanced techniques used in red teaming and penetration testing to elevate user privileges from a low-level account to root access on a compromised Linux system. It covers exploiting misconfigurations, vulnerable services (like SUID/SGID binaries), improper sudo rules, kernel vulnerabilities (e.g., Dirty Pipe), and abuse of system services like Cron jobs and Systemd. Essential for authorized security assessments.

A comprehensive playbook detailing structured recovery steps for ransomware incidents, adhering to NIST and CISA frameworks. The workflow guides users through environment isolation, forensic evidence preservation, Active Directory restoration (including krbtgt reset), backup integrity validation, and phased system rebuilding. Essential for defined disaster recovery and post-incident restoration.

A comprehensive guide to advanced network reconnaissance using Nmap. This skill covers multi-stage asset discovery, deep service enumeration, vulnerability scanning via the Nmap Scripting Engine (NSE), and advanced evasion techniques (e.g., fragmentation, decoys). It is designed for authorized penetration testing and thorough assessment of enterprise infrastructure.

A comprehensive guide to securing AWS Lambda execution roles. It details implementing least-privilege IAM policies, utilizing permission boundaries, and restricting resource-based policies. The workflow includes auditing existing permissions using AWS CLI, analyzing actual API usage with CloudTrail and IAM Access Analyzer, and programmatically creating highly scoped policies to minimize the security attack surface.

This guide details the comprehensive process of securing a container registry using Harbor. Learn how to implement advanced security features such as integrated vulnerability scanning (Trivy), image signing (Cosign/Notary), Role-Based Access Control (RBAC), and content trust policies. The workflow covers deployment, policy enforcement, and integrating external authentication like OIDC, ensuring compliant and secure image provenance for Kubernetes environments.

Defines a secure remote access workflow for OT/ICS environments, detailing jump server architecture, MFA, vendor controls, session recording, and compliance with IEC 62443 and NERC CIP-005-7 so operators and engineers can replace insecure VPN tunnels.

Guides building an IEC 62443-conformant conduit architecture to gate remote OT access via jump servers, MFA, approval workflows, session recording, and time-limited vendor/engineer sessions.