Skill UI

Generates comprehensive, structured documentation for microservices or internal platforms. This skill covers service identity, architecture context, APIs, SLAs, data classification, and operational runbooks, making it ideal for developer portals, service READMEs, and internal service registries. It ensures new team members can quickly understand how to use and depend on a shared service.

A powerful offensive suite for authorized red-teaming of Microsoft Entra ID (Azure AD). ROADtools combines ROADrecon for comprehensive directory enumeration (users, groups, policies, apps) and an offline GUI, with roadtx for advanced token acquisition, exchange, and Primary Refresh Token (PRT) abuse. It covers the full scope of cloud identity discovery and token-based attacks against highly regulated tenants.

This guide details using the comprehensive AADInternals PowerShell toolkit for defensive validation of Microsoft Entra ID, Azure AD, and AD FS environments. It covers unauthenticated tenant reconnaissance, acquiring access tokens for multiple Microsoft APIs, and critically, testing for federation backdoors (Golden SAML) by simulating advanced attack techniques (MITRE T1606.002). It is designed for authorized red-team assessments to map external attack surfaces and validate identity infrastructure hardening.

This specialized skill is designed for deep forensic analysis in complex Windows environments, crucial for CTF and red teaming. It traces identity flows, including Active Directory (AD) origins, Kerberos ticket lifecycles, and OAuth authorization claims. Use it to correlate host artifacts (LSA, DPAPI, Sysmon) with identity evidence to map complete lateral movement and privilege escalation chains.