Skill UI

A comprehensive guide for performing reverse engineering using Ghidra. This skill is essential for scenarios where commercial tools like IDA are unavailable, or when performing large-scale, automated headless analysis. It covers the entire workflow, from project setup and function decompilation to advanced headless scripting and integration with other exploit tools.

This guide outlines the methodology for conducting hardware security research on embedded systems. It covers physical interface analysis (UART, JTAG, SWD), debug pad triage, secure boot evaluation, and offline firmware extraction. It emphasizes systematic, non-destructive testing protocols and responsible handling of physical devices.

A specialized downstream skill designed for solving encrypted ZIP/PKZIP challenges, particularly those using the legacy ZipCrypto method in CTF competitions. This workflow utilizes known-plaintext attacks (via tools like bkcrack) to recover internal encryption keys, enabling decryption and extraction without resorting to brute-force password guessing. Use this when a predictable plaintext fixture is available.

A comprehensive methodology for offensive security, detailing how to systematically extract secrets from Continuous Integration/Continuous Deployment (CI/CD) pipelines. Techniques covered include dumping environment variables, exploiting misconfigurations in HashiCorp Vault, AWS Secrets Manager, and cloud platform tokens (GitHub, GitLab, etc.). It also guides attackers on OIDC federation abuse, build log analysis, and advanced exfiltration methods, mapping to MITRE ATT&CK T1552.

A comprehensive skill set for performing offensive security assessments on TLS/SSL implementations. This includes identifying cryptographic weaknesses (like POODLE, DROWN, Heartbleed), testing for protocol downgrades, analyzing weak cipher suites, and bypassing security controls such as certificate pinning and improper validation. Essential for penetration testers and security engineers to audit network service integrity.

This internal deterministic quality gate is used before meta-short-drama final publication. It rigorously verifies the media content's integrity by checking real-provider image/video receipts, confirming paid submission dispositions, and utilizing ffprobe to validate decodability and expected final durations. The tool is designed to sanitize all sensitive data, ensuring only bounded, auditable information is passed to the next stage.

This skill outlines a highly rigorous, receipt-driven workflow for managing defects and implementing code corrections. It guides public collaboration by enforcing strict controls over change authority, ensuring comprehensive lineage tracking, and mandating evidence-based validation. Key steps include CodeGraph impact mapping, black-box testing, and adherence to strict change budgets, ensuring every deployed change is fully traceable and robust.

Design custom laboratory hardware components using parametric Python models with build123d. Export fabrication-ready files like STEP, STL, and DXF for microfluidic chips, mounts, and adapters. Ensure precise interface dimensions against standards for compatibility with lab equipment. Use for physical parts mating with standardized labware, optical tables, or manufacturing processes.