Skill UI

A comprehensive guide for implementing ISO 14971:2019 risk management across the entire medical device lifecycle. Covers planning, hazard identification, risk analysis (FMEA, FTA), risk evaluation, risk control, and post-market surveillance. Essential for achieving regulatory compliance in medical device development.

This comprehensive guide provides advanced troubleshooting workflows for complex, microservices-based environments running on Kubernetes. It covers diagnosing issues like CrashLoopBackOff, cascade failures, resource pressure (CPU/Memory), and detailed Redis state analysis, ensuring systematic root cause identification across multiple services.

A comprehensive framework for assessing network security posture. This skill guides the tester through the entire penetration testing lifecycle, from reconnaissance and host discovery (using tools like Nmap) to service enumeration, vulnerability identification (CVEs), and controlled exploitation (Metasploit). It is essential for validating firewall rules, ensuring compliance (e.g., PCI-DSS), and stress-testing critical infrastructure security.

This tool facilitates interactive dynamic malware analysis using the ANY.RUN cloud sandbox. It allows analysts to detonate suspicious samples, observe real-time execution behavior, and manually interact with prompts (like dialogs or CAPTCHAs). Key outputs include detailed process trees, network traffic analysis (C2 communication), and identification of all Indicators of Compromise (IOCs), mapping observed behaviors to MITRE ATT&CK. Essential for rapid, sophisticated behavioral analysis without maintaining local sandbox infrastructure.

This skill teaches authorized users how to perform comprehensive password hash cracking using Hashcat. It covers various attack methodologies, including dictionary, brute-force, and rule-based attacks, and identification of common hash types (e.g., MD5, NTLM, bcrypt). The primary use case is for conducting controlled security assessments and penetration testing to evaluate password strength and compliance with current security policies. Always used under explicit authorization.

A comprehensive methodology for discovering potential software vulnerabilities. It outlines advanced techniques including static analysis, dynamic analysis, fuzzing, taint tracking, and modern attack surface mapping (e.g., kernel, drivers). Ideal for professional code audits, bug bounty hunting, and building robust vulnerability research pipelines.

A comprehensive playbook detailing identification and bypass techniques for major binary protections, including ASLR, PIE, NX/DEP, RELRO, and stack canaries. This guide is essential for understanding how to exploit modern, difficult-to-break systems in advanced security research and CTF competitions.

A specialized downstream skill for deep security analysis of JSON Web Tokens (JWT), JWS, and JWE. It guides the identification of vulnerabilities where token components (headers, claims, keying) lead to unauthorized identity assumption or privilege escalation. Use this to trace the full path from token supply to final application acceptance.

A specialized framework for conducting non-Wi-Fi RF/SDR security research in controlled, authorized laboratory environments. Focuses on passive signal identification, protocol analysis (e.g., remote controls, ADS-B), and feasibility studies. Emphasizes strict legal compliance, requiring analysis to be performed only in shielded labs with explicit authorization, and defaults to receiving-only mode.