Skill UI

A comprehensive playbook detailing advanced techniques for post-exploitation security bypass on Linux systems. Covers escaping restricted shells (rbash), evading noexec/read-only filesystems using in-memory execution (DDexec, memfd_create), and circumventing mandatory access controls like AppArmor and SELinux. Essential for penetration testing and red team operations.

An expert-level playbook detailing advanced techniques for NTLM relay and authentication coercion. Covers cross-protocol attacks targeting SMB, LDAP, HTTP, and MSSQL. Includes methods like LLMNR poisoning, PetitPotam, and advanced domain privilege escalation to bypass standard authentication controls.

A comprehensive guide detailing various 802.11 management frame attacks, including deauthentication and disassociation. It covers targeted single-client deauth for handshake capture, broadcast DoS attacks, and advanced action-frame exploitation to bypass PMF (802.11w). Essential for professional penetration testing and wireless vulnerability assessment.

A comprehensive methodology designed for authorized external reconnaissance and red-teaming operations. It covers the full attack surface mapping lifecycle, including asset discovery, confidence scoring (Tentative, Firm, Confirmed), and developing structured, evidence-based client deliverables. Essential for ethical hacking, bug bounty, and assessing an organization's external digital footprint.

This expert playbook details advanced techniques for establishing secure network tunnels and pivoting through compromised hosts. It covers various methods like SSH (Local, Remote, Dynamic, Jump), Chisel, Ligolo-ng, socat, and ProxyChains. Use this guide to bypass network restrictions, establish persistent access, and perform multi-layered lateral movement within restricted environments.

This skill provides comprehensive testing for WebSocket APIs, covering protocol basics, Cross-Site WebSocket Hijacking (CSWSH), and common security flaws. Use it when testing applications that rely on real-time communication, chat features, or persistent data streams. It validates Origin checks, session binding, and message integrity.

A comprehensive guide and pattern library for reviewing, troubleshooting, and safely modifying Cisco IOS and IOS-XE configurations. This skill outlines best practices for using read-only 'show' commands, validating ACL wildcard masks, managing configuration hierarchy, and following stringent change control procedures to prevent network disruptions.

This tool provides comprehensive diagnostics for Border Gateway Protocol (BGP) within network environments. It helps engineers troubleshoot connectivity issues, verify routing paths, and diagnose complex peering problems across large-scale networks. Ideal for network operations and advanced troubleshooting.

A comprehensive guide for diagnosing physical and logical network failures, such as CRC errors, packet drops, duplex mismatches, and flapping. It teaches users how to analyze interface counters and trends across routers, switches, and Linux hosts to pinpoint the root cause of connectivity issues.

A risk-paranoid, mandatory review process designed to interrogate any plan that touches sensitive customer data, regulatory compliance, or production access. It forces consideration of critical security pillars including STRIDE threat modeling, blast radius quantification, detection mechanisms (MTTD), incident response runbooks, regulatory notification windows, and third-party vendor security posture. Essential before deploying features handling PII, PHI, or before compliance audits (SOC 2, HIPAA, GDPR).

Pi-hole is a powerful, network-wide DNS ad blocker solution that runs on Linux hosts (like Raspberry Pi). It automatically blocks ads, trackers, and malware domains for every device on your network without requiring browser extensions. This guide details installation via Docker or bare-metal setup, configuring it as the primary DNS server for a home network, managing blocklists, and implementing advanced features like DNS-over-HTTPS (DoH) for enhanced privacy.

A comprehensive guide on segmenting a home network using VLANs to dramatically enhance security. Learn how to isolate different device types—such as IoT gadgets, guests, and servers—from main PCs, preventing cross-segment malware spread and unauthorized communication. Covers setup steps for UniFi, pfSense, and OPNsense.