Skill UI

This catalog provides five core abstractions (`Admin`, `Api`, `Cli`, `Infra`, `Project`) for structuring robust web applications. It ensures developers have standardized access points for managing different components like administrative interfaces, backend APIs, command-line tools, infrastructure configurations, and overall project logic. Developers must import the specific abstraction from the designated path.

A comprehensive red-teaming technique for Active Directory Certificate Services (AD CS). This skill utilizes the Certipy toolkit to enumerate and exploit various Certificate Service Configuration (ESC1-ESC16) misconfigurations over LDAP/RPC. It enables attackers to forge privileged certificates and perform PKINIT authentication, escalating a low-level domain foothold to Domain Admin or Domain Controller access during authorized penetration tests.

A comprehensive guide for authors submitting policy evaluation manuscripts to academic journals. It outlines the rigorous standards required to ensure full research reproducibility, detailing the process of archiving data and code in public repositories, creating master scripts, and providing documentation for restricted administrative data access.

Detailed methodology for achieving NT AUTHORITY\SYSTEM or local Administrator privileges on Windows targets. Covers token impersonation (JuicyPotato, PrintSpoofer), exploiting service misconfigurations, DLL hijacking, UAC bypass techniques, persistent access, and credential harvesting (LSA, DPAPI). Essential toolkit for red team and penetration testing engagements.

This catalog provides fundamental abstractions for integrating and managing a structured GraphQL playground within an administrative panel. It includes essential components like client factories and tab registries, allowing developers to easily access and interact with complex GraphQL APIs in a standardized, scalable manner.

Manage secrets, keys, and certificates securely in Azure Key Vault using CLI. Configure access policies, implement RBAC, and handle encryption operations. Essential for DevOps security and cloud infrastructure administration.

Configure GCP Cloud Audit Logs for compliance and security investigation. Set up log sinks to BigQuery, Cloud Storage, and Pub/Sub for export and real-time streaming. Query audit logs to monitor admin activity, data access, and policy changes.

A security reconnaissance tool for identifying Kubernetes and Docker misconfigurations, including anonymous cluster-admin access, kubelet RCE, etcd exposure, and docker.sock vulnerabilities. Requires explicit authorization before use. Helps penetration testers find high-impact findings like API anonymous cluster-admin, kubelet 10250 exec/run, and container escape via runc.

Comprehensive guide for managing users, groups, permissions, sudo access, and LDAP integration on Linux systems. Includes practical scripts for bulk user operations and access auditing. Ideal for system administrators and DevOps engineers.

This skill helps manage privileged account access by creating registers for main and backup admins, review dates, and shared logins. It generates artifacts like CSV, SQL, or Notion templates for access reviews and security audits, ensuring compliance and security for business systems.