Skill UI

Comprehensive patterns and best practices for deploying and managing microservices using the Linkerd service mesh on Kubernetes. Covers automatic mTLS, sophisticated traffic splitting for canary deployments, setting Service Profiles for enhanced resilience (retries/timeouts), and defining robust authorization policies.

A specialized tool designed for incident responders and threat hunters. It extracts critical configuration data—such as C2 server addresses, malleable profiles, watermarks, and communication settings—from Cobalt Strike beacon payloads found in PE files or memory dumps. This analysis is crucial for mapping attacker infrastructure and improving defensive detection rules.

This tool parses and analyzes Cobalt Strike Malleable C2 profiles, extracting critical network indicators such as HTTP/DNS transforms, URIs, headers, jitter, and sleep cycles. It is essential for reverse-engineering captured profiles or building robust network detection signatures for threat hunting and incident response.

This guide outlines the process of passive external reconnaissance using Open Source Intelligence (OSINT) techniques. Users can map an organization's digital footprint by gathering comprehensive data, including DNS records, subdomains, certificate transparency logs, social media profiles, and leaked credentials. It is critical for the planning phase of penetration testing, asset mapping, or preparing for social engineering, all without actively interacting with target systems.

This skill guides the creation of a foundational red team engagement plan. It covers defining the scope, establishing detailed Rules of Engagement (ROE), selecting MITRE ATT&CK-aligned threat profiles, and defining operational timelines. It is essential for conducting large-scale, assumed-breach, or objective-based offensive security testing.

This guide provides comprehensive steps to harden Docker containers and associated runtime environments based on the CIS Docker Benchmark v1.8.0. It covers implementing least-privilege principles, such as running as non-root users, dropping capabilities, using read-only filesystems, and applying seccomp/AppArmor profiles. Use this when preparing containers for production deployment or conducting security audits to minimize the attack surface.

This skill guides users through implementing and managing Kubernetes Pod Security Standards (PSS) using the Pod Security Admission (PSA) controller. Learn how to assign security profiles (Privileged, Baseline, Restricted) to namespaces, audit existing workloads for compliance, plan migrations from deprecated PSPs, and adjust securityContext settings to meet high hardening and compliance requirements.

This guide details how to use GoPhish, an open-source framework, to conduct authorized phishing simulations. You will learn the complete lifecycle, from deploying the tool and configuring SMTP profiles, to creating realistic email templates and cloning secure landing pages. The skill culminates in analyzing campaign results to assess organizational security posture and improve employee resilience against social engineering attacks.

A comprehensive guide to implementing Role-Based Access Control (RBAC) in ClickHouse. Learn how to manage user authentication, define hierarchical roles, enforce row-level security (RLS) for tenant isolation, restrict data access via column-level grants, and manage resource consumption using quotas and settings profiles. Essential for multi-tenant SaaS and secure data analytics platforms.