Skill UI

This guide details methodologies for identifying and exploiting XML External Entity (XXE) injection vulnerabilities in web applications. It covers basic file retrieval, blind XXE detection using out-of-band techniques, and data exfiltration, all critical steps during authorized penetration testing of XML-consuming APIs and services.

Connects to the MAXIA AI-to-AI marketplace on the Solana blockchain. This tool allows users to discover, buy, and sell AI services directly between decentralized agents. Features include comprehensive crypto intelligence, such as sentiment analysis and trending data; DeFi yield tracking; Web3 wallet security analysis (e.g., rug detection); and real-time GPU pricing, making it a comprehensive hub for Web3 AI interactions.

A comprehensive guide to building a structured incident response playbook for ransomware attacks. It aligns with the CISA StopRansomware Guide and NIST CSF, covering all phases from preparation and detection to containment, eradication, and recovery. Ideal for security teams conducting readiness assessments or updating compliance documentation.

This tool automates the deployment of deception-based honeytokens within Active Directory environments. It creates fake privileged accounts, decoy SPNs for Kerberoasting detection, and misleading GPOs with password traps. Designed for advanced security teams to detect reconnaissance, lateral movement, and credential theft with high fidelity.

This skill detects AI-generated deepfake audio used in voice phishing (vishing) attacks. It functions by extracting critical spectral features (including MFCCs, spectral centroid, and zero-crossing rate) and passing them through advanced machine learning models (like Random Forest and Gradient Boosting). The system supports batch forensic analysis, provides confidence scores, and generates detailed reports to verify the authenticity of recorded voice calls, making it essential for cybersecurity incident response and fraud investigation.

This skill provides a managed cloud environment for training and fine-tuning advanced vision models. Users can build and customize models for object detection (e.g., DETR, YOLOS), image classification, and segmentation (SAM/SAM2). By leveraging Hugging Face Jobs, training is executed on powerful cloud GPUs without requiring local GPU setup, and all resulting models are automatically saved to the Hugging Face Hub.

This skill provides comprehensive detection strategies for adversaries abusing DCOM objects (e.g., MMC20.Application) to perform stealthy lateral movement (MITRE ATT&CK T1021.003). It details how to correlate Sysmon Event IDs (Process Creation, Network Connection), analyze WMI activity, and monitor RPC traffic on port 135 to identify unauthorized remote command execution chains. Ideal for advanced threat hunting, red teaming, and purple team exercises.

This skill details the deployment of various canary tokens (DNS, HTTP, AWS API Keys) across enterprise network infrastructure. It establishes digital tripwires that detect behavioral anomalies, such as unauthorized access, credential leakage, or lateral movement. Tokens are configured with webhook alerts (Slack, SIEM) for real-time, low-false-positive notification, significantly enhancing traditional IDS/IPS capabilities.

A comprehensive guide and technical framework for detecting and mitigating ransomware kill switch mechanisms. It details methods for analyzing mutex guards, domain-based communication, and registry checks. Learn how to deploy proactive mutex vaccination and use Sysmon/DNS monitoring to prevent malware execution during incident response and analysis.

This utility executes atomic Red Team tests mapped to the MITRE ATT&CK framework. It is essential for purple team exercises, allowing security teams to assess detection coverage gaps, validate SIEM/EDR rules, and generate detailed ATT&CK coverage heatmaps. Use it to build continuous detection validation loops and measure blue team visibility against known adversary techniques.

Transformers.js allows developers to run state-of-the-art machine learning models directly within JavaScript/TypeScript environments (browser, Node.js). It supports a comprehensive range of tasks including NLP (text generation, summarization, translation), Computer Vision (image classification, object detection), and Audio processing. This capability enables building fully client-side, multimodal AI applications without requiring a dedicated Python backend or server infrastructure.

Assesses AI/ML systems for prompt injection, jailbreak, model inversion, data poisoning, and agent tool abuse using MITRE ATLAS mapping, signature detection, and scoring metrics before deployment.