Skill UI

Automate the rotation of sensitive credentials, including RDS database passwords, API keys, and OAuth tokens, using AWS Secrets Manager and Lambda. This skill ensures secure credential lifecycle management, helping maintain system security and compliance by automatically updating credentials for various AWS and third-party services.

This guide details methods for detecting and mitigating OAuth token theft and replay attacks in cloud environments, specifically targeting Microsoft Entra ID (Azure AD). It covers protection against access token theft, Primary Refresh Token (PRT) abuse, and pass-the-cookie attacks. Users can leverage Conditional Access and Token Protection features to cryptographically bind tokens to devices, significantly enhancing cloud identity security and preventing session hijacking.

A comprehensive guide to securing Software as a Service (SaaS) applications (e.g., Microsoft 365, Salesforce) using Zero Trust principles. This skill covers deploying CASB/SSPM solutions, enforcing conditional access policies (MFA, device compliance), governing OAuth permissions, and applying session-level DLP controls to prevent data exfiltration in multi-cloud environments. Ideal for security architects and engineers.

A comprehensive security script designed to test REST API authentication mechanisms for common vulnerabilities. It assesses broken token validation, missing authentication on critical endpoints, weak password policies, and session management flaws. The tool specifically evaluates JWT implementation, API key handling, and adherence to OWASP API Security Top 10, helping identify authentication bypasses before production deployment.

This guide details the operational workflow for namespace-scoped tenants within KubeSphere DevOps. It outlines how users without cluster-admin privileges can securely perform DevOps operations by strictly utilizing KubeSphere's dedicated APIs (`/kapis/`) and authenticating via OAuth tokens, ensuring strict resource isolation and access control within their designated namespace.

This guide outlines best practices for configuring and securing Adobe API access across Development, Staging, and Production environments. It details the use of separate Developer Console projects, implementing least-privilege OAuth scopes, and integrating robust secret management solutions (GCP Secret Manager, AWS Secrets Manager, HashiCorp Vault) into CI/CD pipelines for secure, scalable deployments.

This comprehensive checklist guides thorough security testing of OAuth 2.0 and OpenID Connect (OIDC) protocols. It covers advanced vulnerabilities such as authorization code interception, PKCE bypass, CSRF flaws, and improper scope validation. The methodology emphasizes modern industry standards like FAPI (DPoP, JAR, PAR), making it essential for penetration testers and security researchers assessing web application integrity and API security.

A comprehensive guide detailing detection and defense strategies against OAuth token theft, session hijacking, and token replay in Microsoft Entra ID (Azure AD). It covers advanced attacks like Primary Refresh Token (PRT) abuse and Adversary-in-the-Middle (AitM) phishing, and provides actionable steps for configuring Conditional Access and Token Protection policies.

This tool automates the OAuth 2.0 scope minimization review process. It identifies over-permissioned third-party application integrations, excessive API scopes, and risky OAuth consent patterns across identity providers. It is crucial for security audits, compliance (GDPR, SOC 2), and enforcing the least-privilege principle for cross-boundary data access.

This specialized skill is designed for deep forensic analysis in complex Windows environments, crucial for CTF and red teaming. It traces identity flows, including Active Directory (AD) origins, Kerberos ticket lifecycles, and OAuth authorization claims. Use it to correlate host artifacts (LSA, DPAPI, Sysmon) with identity evidence to map complete lateral movement and privilege escalation chains.

This advanced skill specializes in analyzing complex mail-related abuse scenarios, including OAuth consent flows, forwarding rule exploitation, shared mailbox access, and transport rule manipulation. It is used in forensic investigations to trace message artifacts, identify persistence mechanisms, and prove privilege escalation or data exfiltration following a compromise.