Skill UI

A practical offensive methodology for Android and iOS app testing. It covers static analysis, Frida/Objection instrumentation, SSL pinning bypass, exported component abuse, insecure storage review, and mobile API reconnaissance for pentest and bug bounty work.

Covers WPA3/SAE attack techniques including transition-mode downgrade, Dragonblood side-channel analysis, SAE authentication flooding, H2E checks, and Wi-Fi 6E implications. Useful for assessing wireless security gaps and validating defensive hardening.

This comprehensive playbook provides expert techniques for classical cipher identification and breaking. It covers fundamental methods like frequency analysis, Kasiski examination, and Index of Coincidence (IC), enabling the decryption of monoalphabetic, polyalphabetic, and transposition ciphers (Vigenere, Caesar, Playfair, etc.). It also guides the decoding of various formats (Base64, Hex, Morse).

An expert playbook detailing techniques for identifying, classifying, and defeating advanced code obfuscation in native binaries. Covers junk code, opaque predicates, self-modifying code (SMC), control flow flattening (CFF), VM protectors, and string encryption by utilizing symbolic execution, dynamic emulation, and advanced data flow analysis.

The Desktop Commander MCP grants agents deep reach across the user's entire operating environment, extending far beyond the typical IDE sandbox. Key capabilities include maintaining persistent shell sessions, managing long-running background processes, accessing arbitrary filesystems, and natively handling structured data formats (Excel, PDF, DOCX). It also enables remote operations via SSH and large-scale content search, making it ideal for complex, multi-turn development, DevOps, and data analysis workflows.

This advanced playbook details expert techniques for format string exploitation. It covers arbitrary stack reading (%p), memory writing (%n), and exploiting weaknesses like GOT/hook overwrites. Essential for CTF challenges and binary vulnerability analysis to achieve reliable Remote Code Execution (RCE).

A comprehensive, top-level routing skill for authorized web security assessment, bug bounty hunting, and API penetration testing. It guides the agent through a structured methodology, covering the entire attack lifecycle from reconnaissance and vulnerability triage (XSS, SQLi, IDOR, etc.) to advanced business logic flaw identification. Use this skill to ensure thorough, systematic security analysis.

A comprehensive playbook covering advanced cryptographic hash attack techniques. Learn how to exploit inherent weaknesses such as length extension attacks (MD5, SHA-256), generating identical-prefix or chosen-prefix collisions, and analyzing side-channel timing leaks. Essential for CTF challenges and authorized penetration testing scenarios.

A comprehensive playbook for advanced mobile security assessments of iOS applications. Covers both jailbroken and non-jailbroken environments, focusing on critical attack vectors such as keychain extraction, URL scheme hijacking, Universal Links exploitation via AASA misconfigurations, runtime memory manipulation (Frida/Objection), and binary protection analysis.

This expert playbook provides a comprehensive guide to lattice-based cryptanalysis techniques. It covers fundamental concepts like SVP and CVP, and deep dives into advanced algorithms such as LLL and BKZ reduction. Key attack applications include Coppersmith's method for finding small roots in RSA, solving the Hidden Number Problem for recovering DSA/ECDSA nonces, and analyzing knapsack ciphers. Essential for CTF and academic cryptanalysis.

A comprehensive guide for advanced memory forensics using Volatility 2 and 3. This playbook covers artifact extraction, including hidden process detection, network connections, credential dumping, DLL analysis, and code injection detection (malfind). It is essential for incident response, malware analysis, and reconstructing attack timelines from memory dumps.

This expert playbook details advanced techniques for bypassing SSL pinning mechanisms (Certificate, Public Key, SPKI) on mobile applications running on Android and iOS. It provides practical methods using tools like Frida and Objection, covering various frameworks (Flutter, React Native, Xamarin) and multiple pinning types to enable the interception and analysis of encrypted HTTPS traffic.