Skill UI

A comprehensive guide for intercepting and analyzing HTTP/HTTPS traffic from mobile applications using Burp Suite. This skill walks through configuring proxies on Android and iOS, handling CA certificate installation, and executing advanced penetration testing techniques. It is essential for assessing API security, identifying data leakage, and finding authentication vulnerabilities in mobile client-server communications.

This comprehensive guide details the methodology for detecting and exploiting Blind Server-Side Request Forgery (SSRF) vulnerabilities. It covers crucial techniques including out-of-band (OOB) detection, internal network enumeration (port scanning, IP scanning), accessing cloud metadata endpoints (AWS, GCP, Azure), and bypassing common security filters using various encoding and parsing confusion methods. Ideal for penetration testing and cloud security assessments.

A comprehensive security auditing tool designed to assess a Kubernetes cluster's compliance posture against established CIS benchmarks. It performs deep checks on control plane components (API Server, etcd, Controller Manager), worker nodes, and Role-Based Access Control (RBAC). Use it for proactive security assessments, compliance validation, and hardening throughout the CI/CD lifecycle.

A comprehensive guide for systematically evaluating Kubernetes cluster security. It simulates advanced attacker techniques against critical components like the API server, etcd, kubelet, RBAC, and network policies, identifying misconfigurations and vulnerabilities. Essential for security auditors, penetration testers, and DevOps teams performing deep cluster security assessments.

This sophisticated tool automates the security review of serverless functions across major cloud providers, including AWS Lambda, Azure Functions, and GCP Cloud Functions. It systematically identifies critical misconfigurations such as overly permissive IAM execution roles (wildcard actions), hardcoded secrets in environment variables, and potential lack of runtime protections. Ideal for pre-production auditing and compliance checks.

A comprehensive tool for conducting deep security assessments of SSL/TLS server configurations. It uses the sslyze library to evaluate supported protocol versions (e.g., TLS 1.0-1.3), cipher suite strength, certificate chain validity, HSTS enforcement, and scan for critical vulnerabilities like Heartbleed and ROBOT. Ideal for security auditing and incident response.

A comprehensive guide detailing the use of Tenable Nessus, an industry-leading vulnerability scanner. Learn how to configure advanced scan policies, perform both authenticated and unauthenticated scans across servers, network devices, and web applications. This skill covers end-to-end processes from execution to result analysis and reporting.

This skill provides a comprehensive guide for deploying Microsoft Defender for Cloud across Azure, multi-cloud, and hybrid environments. It covers activating specific Defender plans for various workloads (servers, containers, storage), optimizing the Secure Score, establishing environment connectors for AWS/GCP, and implementing advanced controls like Just-In-Time (JIT) access for robust, centralized cloud workload protection.

This skill provides comprehensive guidance on hardening and securing critical process historian servers (e.g., OSIsoft PI, Honeywell PHD) operating within Operational Technology (OT) environments. It covers best practices for network placement across the Purdue Model, implementing robust access controls, establishing secure data replication architectures through DMZs (using data diodes), preventing SQL injection, and maintaining data integrity for safety-critical and regulatory reporting purposes. It is essential for minimizing cyber risks in industrial control systems.

This skill provides comprehensive security hardening guidelines for serverless compute platforms like AWS Lambda, Azure Functions, and Google Cloud Functions. It covers essential security pillars including enforcing least privilege IAM roles, integrating robust secrets management (e.g., AWS Secrets Manager), automating dependency vulnerability scanning within CI/CD pipelines, and implementing strict input validation to mitigate risks such as injection and credential theft. Ideal for DevSecOps practitioners and security architects.

This skill provides advanced techniques and code examples for monitoring, mapping, and pivoting across adversary-controlled infrastructure. It leverages Passive DNS, Certificate Transparency logs, Shodan/Censys scanning, and network fingerprinting (JARM/JA3S) to discover C2 servers, phishing domains, and exploitable assets over time, which is crucial for advanced security operations and threat intelligence gathering.

This guide details implementing an IEC 62443 compliant conduit architecture for secure remote access into Operational Technology (OT) environments. It mandates the use of jump servers, MFA gateways, session recording, and approval workflows within a DMZ to strictly control vendor and engineer access, eliminating direct VPN connections to critical ICS assets.