Skill UI

This guide details advanced hash cracking techniques using Hashcat, the world's fastest password recovery tool. It covers various attack modes—including dictionary, brute-force, and rule-based attacks—and supports numerous common hash types (e.g., NTLM, bcrypt). This skill is strictly designed for authorized security assessments and penetration testing to evaluate the strength and resilience of organizational password policies.

This guide details the technique and workflow for executing HTTP Parameter Pollution (HPP) attacks. HPP exploits how web applications and back-end systems handle duplicate HTTP parameters (e.g., first-wins, last-wins, concatenation). It is a critical method for bypassing Web Application Firewalls (WAFs), testing input validation logic, and identifying vulnerabilities in API, OAuth, and payment processing flows.

This tool provides comprehensive security assessments for the entire IoT ecosystem, including physical hardware, embedded firmware, network communications, and cloud APIs. Testers can perform deep dives using hardware debugging (UART/JTAG), firmware extraction and reverse engineering, analyzing protocols (MQTT, CoAP, BLE), and simulating cloud-to-device attacks to identify vulnerabilities across all layers of the smart device stack.

This tool automates the process of executing the JWT none algorithm attack. It demonstrates how to bypass signature verification by setting the 'alg' header to 'none' in a JSON Web Token. This vulnerability allows attackers to forge tokens with arbitrary claims, such as escalating privileges or impersonating other users, and is crucial for penetration testing and API security auditing.

A comprehensive guide for systematically evaluating Kubernetes cluster security. It simulates advanced attacker techniques against critical components like the API server, etcd, kubelet, RBAC, and network policies, identifying misconfigurations and vulnerabilities. Essential for security auditors, penetration testers, and DevOps teams performing deep cluster security assessments.

This skill provides advanced techniques for bypassing SSL/TLS certificate pinning in Android and iOS applications. It supports interception of HTTPS traffic during authorized security assessments, covering pinning mechanisms like OkHttp, TrustManager, NSURLSession, and utilizes tools such as Frida and Objection for comprehensive testing.

This skill demonstrates how to craft and inject custom, malformed, or spoofed network packets using tools like Scapy and hping3. It is designed for authorized cybersecurity assessments to rigorously test firewall rules, Intrusion Detection/Prevention Systems (IDS/IPS) signatures, anti-spoofing controls, and overall network stack resilience against protocol anomalies and fragmentation attacks. Use only in controlled, authorized environments.

This guide details comprehensive physical security penetration testing techniques, essential for red teaming engagements. It covers methods such as tailgating, badge cloning (RFID), lock bypassing, and deploying rogue network devices (e.g., Pineapple, LAN Turtle). It provides practical toolkits and MITRE ATT&CK mapping to evaluate an organization's physical and digital control weaknesses.

This skill covers advanced techniques used in red teaming and penetration testing to elevate privileges from a low-level user to root access on a compromised Linux system. It details how to enumerate and exploit various vectors, including SUID/SGID binaries, misconfigured sudo rules, kernel vulnerabilities (e.g., Dirty Pipe), Cron job abuse, and abusing system services. Essential for comprehensive security assessments.

This tool performs comprehensive security assessments on SOAP web services. It analyzes WSDL definitions to understand the API structure and tests for critical vulnerabilities such as XML External Entity (XXE) injection, XPath injection, WS-Security bypass, and SOAPAction spoofing. It is designed for security auditing and penetration testing of enterprise-level SOAP APIs that rely on complex XML standards.

This skill simulates SSL stripping and Man-in-the-Middle (MITM) attacks using specialized tools like Bettercap and sslstrip. It is designed for authorized penetration testing to assess a web application's resilience against downgrade attacks. Users can test if HSTS headers are properly enforced, if TLS certificates are correctly validated, and if sensitive data remains encrypted throughout the session.

A comprehensive tool for detecting Server-Side Request Forgery (SSRF) vulnerabilities. It probes cloud metadata endpoints (AWS, GCP, Azure), internal network services, and utilizes various protocol handlers (file://, gopher://) and bypass techniques (DNS rebinding, IP encoding) to assess application security posture during penetration testing or security auditing.