Skill UI

This comprehensive toolkit provides deep static analysis capabilities for suspicious PDF documents. Using tools like PDFiD, pdf-parser, and peepdf, it identifies embedded malicious structures—including JavaScript code, shellcode, auto-actions, and exploit kits—without opening or rendering the file. It is essential for security analysts conducting threat triage, forensic investigation, and assessing potential attack vectors from suspicious attachments.

This skill provides a comprehensive guide to implementing application whitelisting using Windows AppLocker. It drastically restricts unauthorized software execution (malware, shadow IT) on Windows endpoints by enforcing strict application control policies. Use this method to meet critical compliance requirements (such as PCI DSS or NIST standards), block common attack vectors like LOLBins, and significantly reduce the overall attack surface in high-security environments.

This skill guides the deployment and configuration of Data Loss Prevention (DLP) controls directly on endpoints. It detects and prevents the unauthorized exfiltration of sensitive data (PII, PHI, PCI) via common vectors like email, USB drives, cloud storage uploads, and printing. Use this when establishing compliance policies (HIPAA, GDPR) or securing data against internal data movement risks.

A comprehensive tool for auditing container security posture by detecting potential escape vectors. It analyzes Kubernetes Pod specs for dangerous configurations, such as running in privileged mode, dangerous capability assignments (like CAP_SYS_ADMIN), host namespace sharing, and writable hostPath mounts. Ideal for security assessments and incident response to prevent container breakout.

This skill covers advanced techniques used in red teaming and penetration testing to elevate privileges from a low-level user to root access on a compromised Linux system. It details how to enumerate and exploit various vectors, including SUID/SGID binaries, misconfigured sudo rules, kernel vulnerabilities (e.g., Dirty Pipe), Cron job abuse, and abusing system services. Essential for comprehensive security assessments.

Provides comprehensive guidance on determining the optimal scaling strategy for Qdrant vector databases. Covers when to transition from vertical to horizontal scaling, how to select the right number of nodes and shards, and best practices for setting replication factors to ensure zero-downtime operation and fault tolerance. Also details proper shard management and common scaling pitfalls to avoid.

A comprehensive guide for diagnosing production performance issues in Qdrant vector databases. Learn how to systematically check the optimizer status, analyze high memory usage (OOM crashes), and troubleshoot slow query latencies using key metrics and dedicated API endpoints. Essential for maintaining optimal operational health.

Provides comprehensive guidance on upgrading your Qdrant vector database version while ensuring data integrity and maintaining application availability. It covers compatibility rules for major/minor versions, recommends step-by-step migration plans, and details how to perform zero-downtime rolling upgrades using replication factors.

This guide provides comprehensive guidance on scaling Qdrant, a vector database. It helps users diagnose performance bottlenecks and determine the optimal horizontal or vertical scaling strategy. Strategies are categorized based on specific needs: increasing data volume, improving query throughput (QPS), minimizing query latency, or managing high query result volumes.

This comprehensive guide provides advanced strategies for optimizing and scaling Qdrant vector database throughput (QPS). It covers performance tuning techniques, such as optimizing segment size, enabling quantization, and using batch search. Furthermore, it details horizontal scaling methods using read replicas and addressing disk I/O bottlenecks, ensuring high performance for large-scale, high-concurrency retrieval applications.

This expert playbook details advanced attack vectors specific to the HTTP/2 protocol. It covers sophisticated techniques such as h2c smuggling, exploiting pseudo-header discrepancies, HPACK compression vulnerabilities, and abusing stream multiplexing. Use this skill for professional penetration testing and security auditing of H2 services, especially for bypassing proxy-level controls and WAFs.

A comprehensive playbook for advanced mobile security assessments of iOS applications. Covers both jailbroken and non-jailbroken environments, focusing on critical attack vectors such as keychain extraction, URL scheme hijacking, Universal Links exploitation via AASA misconfigurations, runtime memory manipulation (Frida/Objection), and binary protection analysis.