Skill UI

A comprehensive runbook for standardizing incident response to Deepgram production issues. It guides users through automated triage (checking status, API connectivity, and model performance), severity classification (SEV1-SEV4), and implementing mitigation strategies, including building fallback services and replaying failed requests to ensure business continuity during outages or degradation.

This guide details methods for detecting and mitigating OAuth token theft and replay attacks in cloud environments, specifically targeting Microsoft Entra ID (Azure AD). It covers protection against access token theft, Primary Refresh Token (PRT) abuse, and pass-the-cookie attacks. Users can leverage Conditional Access and Token Protection features to cryptographically bind tokens to devices, significantly enhancing cloud identity security and preventing session hijacking.

Covers offensive workflows for Zigbee, Thread, and Matter mesh networks, including 802.15.4 sniffing, commissioning abuse, key capture, replay/injection, and control-command exploitation in smart-home deployments.

A comprehensive guide detailing attack methodologies for Z-Wave smart home networks. Techniques covered include sniffing during inclusion (S0/S2), exploiting key derivation flaws, performing replay attacks on unauthenticated nodes, and crucial hub compromise (pivoting) to gain full control over the entire mesh network. Essential reading for IoT penetration testing.

A comprehensive guide detailing detection and defense strategies against OAuth token theft, session hijacking, and token replay in Microsoft Entra ID (Azure AD). It covers advanced attacks like Primary Refresh Token (PRT) abuse and Adversary-in-the-Middle (AitM) phishing, and provides actionable steps for configuring Conditional Access and Token Protection policies.

This skill provides a comprehensive workflow for verifying the integrity of a system's boot chain using TPM 2.0. It covers local validation by reading Platform Configuration Registers (PCRs) and replaying the event log, and remote attestation by generating and checking signed quotes. Use cases include enforcing Zero Trust device posture, detecting firmware tampering, or establishing secure secret baselines.

This guide details the rigorous process for packaging research artifacts in mobile communications for academic evaluation committees (AEC). It emphasizes creating a hardware-optional path, defining claims (badges), and ensuring reproducibility through smoke runs, recorded replay paths, and permanent DOI-backed archiving, allowing evaluation even without specialized lab equipment.

This guide details the process of achieving ACM badges (Available, Functional, Reproduced) for academic artifacts at SenSys. It emphasizes creating a hardware-optional evaluation path, allowing reviewers to verify results and functionality without access to the original testbed. Key steps include implementing graded replay tiers, documenting data provenance (energy, traces), and performing smoke-runs.

A specialized skill for analyzing complex, host-to-host lateral movement chains within a Windows environment. It focuses on tracing protocols like WinRM, SMB, and RDP, replaying captured Kerberos tickets, understanding privilege edges, and identifying the exact accepting service or host that facilitates credential movement. Used in advanced penetration testing and digital forensics scenarios.

This skill enables authorized security research on RF and Software Defined Radio signals. It focuses on signal identification, protocol analysis, and replay attack feasibility studies within shielded laboratory environments. Users must obtain explicit written permission before probing or exploiting targets. It supports tools like RTL-SDR, HackRF, GNU Radio, and URH for analyzing wireless protocols outside regulated bands without causing interference.