Skill UI

Guides red teamers and defenders through an OSINT-driven reconnaissance workflow, from domain enumeration and personnel mapping to credential leaks and technology stack discovery, helping shape initial attack surface models and validate security controls before deeper testing.

Automate OSINT collection via the SpiderFoot REST API and CLI to profile domains, IPs, emails, leaked credentials, and DNS records across 200+ sources, parse structured results, and deliver intelligence reports for security assessments and response.

Crafts and injects tailored packets with Scapy, hping3, and Nemesis so security teams can validate firewall rules, IDS/IPS, protocol handling, and stack resilience through spoofed, malformed, and fragmented traffic during authorized assessments.

GoPhish is an open-source framework designed for security teams to conduct authorized phishing awareness campaigns. This skill guides users through the entire process: deploying GoPhish, setting up realistic phishing scenarios (templates, landing pages), executing the campaign, and analyzing results to measure and improve organizational resilience against social engineering attacks. It is crucial for proactive security testing and incident response validation.

Conduct authorized physical penetration testing to evaluate facility security controls, including tailgating, badge cloning, lock bypasses, and rogue device deployment as part of red team assessments.

This guide details advanced techniques used in red teaming and penetration testing to elevate user privileges from a low-level account to root access on a compromised Linux system. It covers exploiting misconfigurations, vulnerable services (like SUID/SGID binaries), improper sudo rules, kernel vulnerabilities (e.g., Dirty Pipe), and abuse of system services like Cron jobs and Systemd. Essential for authorized security assessments.

This skill automates the execution of red team phishing campaigns using the Python gophish library. It enables users to create sophisticated email templates with tracking pixels, configure SMTP profiles, import target lists from CSV, and launch full-scale simulations. The system tracks key metrics, including open rates, click rates, and submitted credentials, providing essential data for security awareness training and vulnerability assessments.

Guides SOC teams through discussion-based tabletop exercises that simulate security incidents, validate IR playbooks, train analysts, and rehearse cross-functional communication so you can test procedures without touching production systems.

Performs forensic analysis on SQLite databases by reading headers, freelist chains, WAL files, and unallocated pages to recover deleted records and extract evidence from browsers, messaging apps, and mobile storage, aiding incident response and security audits.

This skill provides a comprehensive method for assessing SSL/TLS server configurations using the powerful Python library, sslyze. It evaluates crucial security aspects including supported protocol versions (e.g., TLS 1.2, 1.3), cipher suite strength, certificate chain validity, HSTS enforcement, and checks for common vulnerabilities like Heartbleed and ROBOT. Ideal for penetration testing, security auditing, and incident response.

Simulates and detects software supply chain attacks by checking typosquatting risks with Levenshtein distance, probing dependency confusion across registries, verifying package hashes, and running pip-audit vulnerability scans for security assessments.

This guide details a comprehensive methodology for penetration testing desktop (thick client) applications. It covers static and dynamic analysis, focusing on identifying vulnerabilities such as hardcoded credentials, insecure local storage, DLL hijacking, memory manipulation, and API communication flaws. Tools like dnSpy, Procmon, and Burp Suite are utilized for in-depth security auditing of enterprise and banking software.