Skill UI

This skill provides comprehensive guidance and established patterns for managing and maintaining Windows 11 operating systems. It is designed to assist users in performing routine system updates, troubleshooting issues, and general system administration tasks within a Windows 11 environment, ensuring system stability and optimal performance.

A comprehensive runbook providing standard operating procedures for handling Granola service disruptions, ranging from minor recording failures and sync errors to full organizational outages. It guides users and IT admins through triage (P1-P4 severity), detailed remediation steps, and escalation paths to ensure business continuity.

This guide details setting up enterprise-grade access control for Langfuse. Learn how to configure role-based permissions (Owner, Admin, Member), implement scoped API keys, integrate SSO (SAML/OIDC), and set up comprehensive audit logging. It is essential for managing multi-team isolation and ensuring compliance in production environments.

This skill empowers users to manage and monitor critical SSL/TLS certificates using the built-in certificate manager. It provides capabilities to check certificate expiration dates, automate the renewal process for expired credentials, and list all installed certificates. It is essential for system administrators and developers maintaining secure, uninterrupted network connections and ensuring compliance.

This skill provides comprehensive expertise for senior database administrators to optimize and manage PostgreSQL databases at an advanced level. Use it for deep query analysis via EXPLAIN ANALYZE, implementing advanced features like JSONB indexing, configuring streaming or logical replication, and maintaining database health through VACUUM tuning and monitoring pg_stat views. Ideal for building highly available, high-performance, and resilient system architectures.

This guide details the exploitation of the Active Directory Certificate Services (AD CS) ESC1 vulnerability. By leveraging misconfigurations, an attacker can request certificates impersonating high-privileged users (e.g., Domain Admins). The workflow covers AD enumeration, forging certificates with arbitrary Subject Alternative Names (SANs), authenticating via PKINIT, and ultimately escalating domain privileges using tools like mimikatz. Essential for authorized red team and penetration testing.

This script automates the detection and exploitation of Broken Function Level Authorization (BFLA) in APIs, following OWASP API Top 10 guidelines. It simulates low-privilege users attempting to access or modify restricted administrative endpoints (e.g., user management, system settings) using techniques like role switching, path manipulation, and parameter tampering. Essential for assessing vertical privilege escalation risks and verifying robust Role-Based Access Control (RBAC).

This guide details the exploitation chain for noPac, combining CVE-2021-42278 (sAMAccountName spoofing) and CVE-2021-42287 (KDC PAC confusion). It demonstrates how an attacker can escalate from a standard domain user to Domain Admin by manipulating Active Directory tickets and performing DCSync. Primarily used in authorized red-teaming and penetration testing to validate domain security.

A comprehensive guide detailing the methodology for identifying and exploiting Server-Side Request Forgery (SSRF). This technique is critical in authorized penetration testing, allowing attackers to pivot from public-facing applications to internal resources. Use cases include stealing cloud provider metadata (AWS, GCP), scanning private IP ranges, and accessing internal APIs and admin panels.

This guide provides comprehensive security hardening procedures for enterprise Google Workspace environments. It covers advanced topics such as enforcing phishing-resistant Multi-Factor Authentication (MFA), configuring email authentication (DMARC/SPF/DKIM), implementing Data Loss Prevention (DLP), and securing super admin accounts using Advanced Protection Program enrollment. Ideal for achieving high compliance and defending against BEC and phishing attacks.

Deploy SailPoint IdentityNow or IdentityIQ to establish robust identity governance and access administration. This comprehensive solution manages the entire identity lifecycle, facilitates access request workflows, conducts certification campaigns, performs role mining, and enforces Separation of Duties (SOD) policies, ensuring continuous compliance reporting for enterprise IAM environments.

This guide outlines best practices for hardening Kubernetes Role-Based Access Control (RBAC). It focuses on implementing least-privilege principles by auditing and removing excessive cluster-admin bindings, scoping roles to namespaces, separating service accounts, and integrating external OIDC providers. Use this when improving cluster security posture, meeting compliance standards, or mitigating privilege escalation risks.