Skill UI

A comprehensive guide to implementing and validating Transport Layer Security (TLS) 1.3. This skill covers configuring modern cipher suites, key exchange groups, and enforcing perfect forward secrecy (PFS). Use this when deploying secure communication protocols, hardening network services, meeting compliance standards, or performing deep security assessments on web servers and applications.

This guide details the implementation of a robust, ransomware-resilient backup architecture following the extended 3-2-1-1-0 rule. It covers critical steps such as classifying assets, defining RPO/RTO, implementing immutable or air-gapped storage, and isolating backup credentials from the production domain. Use this knowledge to design a multilayered defense against data loss and ensure reliable recovery points.

This skill simulates advanced Layer 2 network attacks, including VLAN hopping, using techniques like switch spoofing (DTP) and 802.1Q double tagging. It is designed exclusively for authorized penetration testing environments to validate network segmentation, test trunk port hardening, and assess the risk of unauthorized VLAN access across the network infrastructure.