Skill UI

A comprehensive guide detailing advanced, authorized techniques for Active Directory security testing and red teaming. It covers critical attack vectors such as Kerberos exploitation, BloodHound path analysis, NTLM relay, and domain privilege escalation. Designed for security professionals to systematically map and exploit domain weaknesses.

Details comprehensive methods to maintain unauthorized access (persistence) on both Windows and Linux operating systems. Covers registry manipulation, scheduled tasks (schtasks), WMI event subscriptions, cron jobs, systemd timers, and advanced Active Directory abuses. Essential for authorized red team engagements and simulating advanced threat activity.

This skill provides an active penetration testing toolchain covering information gathering, port scanning, vulnerability scanning, web attacks (SQL injection, XSS), directory brute-forcing, and password cracking. It exposes 20+ security tools to AI agents via MCP servers for authorized security assessments.

Comprehensive reference for NetExec (nxc), a network exploitation and post-exploitation tool for Active Directory environments. Covers all protocols (SMB, LDAP, WinRM, etc.), authentication methods, password spraying, credential dumping, lateral movement, and module usage with practical command examples.

Guides authorized Active Directory attack-path assessments with scoped evidence review, controlled synthetic lab validation, prerequisite mapping, and mitigation reporting.

This skill enables non-interactive execution of the Antigravity CLI for coding tasks. It involves setting the working directory, checking CLI availability, and running tasks via JSON output format. Users must handle authentication separately and respect permission settings. It parses JSON status fields to determine success or failure. Safety measures include avoiding interactive modes, not handling credentials, and managing file permissions within the workspace. Use this when delegating coding work to Antigravity.

Run Kimi Code non-interactively in a constrained Bash directory to delegate coding tasks. Covers availability checks, single-prompt JSONL execution, parsing final results, and safe handling of authentication, permissions, and sandbox escalation.

Run MiniMax Code non-interactively via the `mcode exec` command to delegate coding tasks. Sets the project working directory and a finite timeout, checks CLI availability, enforces read-only permissions by default, and returns the final answer. Use when the user wants MiniMax Code to analyze code or modify the workspace on request.

This skill enables running the Pi agent non-interactively for repository analysis and implementation tasks. It involves setting the Bash working directory, checking Pi availability, and executing sessionless tasks using JSON mode. Users should delegate analysis or implementation to Pi by passing prompts as quoted arguments. Security measures include limiting tool access and avoiding credential handling.

This skill enables non-interactive execution of Qwen Code for coding tasks within the Code Mate environment. It involves setting the working directory, verifying tool availability, and running specific commands with JSON output format. Users should delegate coding work to Qwen Code using this method. Authentication and permissions must be configured properly, avoiding credential exposure. It supports restricted approval behavior and limits tool calls for safety.

Hunt LDAP injection and XPath injection vulnerabilities in web applications. Covers authentication bypass, blind attribute exfiltration, and Active Directory vs generic LDAP differences. Includes attack surface signals, filter grammar, and authorized-use guidance.

Provides comprehensive techniques for escalating privileges from low-privileged users to root or administrator on Linux and Windows systems, covering sudo, cron, capabilities, token impersonation, and Active Directory attacks for authorized penetration testing.