Skill UI

Comprehensive playbook for AWS penetration testing covering IAM enumeration, SSRF metadata abuse, S3/Lambda compromise, and persistence to support red team assessments of cloud environments.

A curated reference of pentesting commands covering Nmap, Metasploit, Nikto, SQLMap, and other Kali staples to support enumeration, exploitation, payload handling, and credential cracking during security assessments.

Guides analysts through automated SQL injection discovery and exploitation with SQLMap, covering enumeration, table/column mapping, data dumping, and advanced targeting across MySQL, PostgreSQL, MSSQL, Oracle, and other databases during authorized penetration tests.

Guides penetration testers through Windows privilege escalation with workflows for system enumeration, credential harvesting, service exploitation, token impersonation, kernel flaws, and documenting fixes up to Administrator or SYSTEM rights.

Performs API inventory and discovery via passive traffic analysis, active scans, DNS/JavaScript enumeration, and cloud inventories to catalog documented, undocumented, shadow, zombie, and deprecated endpoints ahead of security assessments or compliance checks.

Step-by-step workflow for authorized penetration testers to discover and validate CSRF weaknesses, covering request enumeration, anti-CSRF verification, SameSite/header controls, Burp Suite PoC generation, and advanced payload crafting to protect sensitive operations.