Skill UI

This skill provides advanced techniques for bypassing SSL/TLS certificate pinning in Android and iOS applications. It supports interception of HTTPS traffic during authorized security assessments, covering pinning mechanisms like OkHttp, TrustManager, NSURLSession, and utilizes tools such as Frida and Objection for comprehensive testing.

This skill automates deep packet capture (PCAP) analysis using tshark and pyshark. It is invaluable for security assessments and incident response, enabling the extraction of protocol statistics, identification of suspicious network flows (e.g., port scanning, beaconing), and comprehensive extraction of Indicators of Compromise (IOCs), including IPs, domains, and URLs. It also specializes in detecting complex anomalies like DNS tunneling.

This skill guides users through conducting a comprehensive maturity assessment using the NIST Cybersecurity Framework (CSF) 2.0. It covers calculating an organization's cybersecurity posture against the six core functions (Govern, Identify, Protect, Detect, Respond, Recover) and the four Implementation Tiers (Partial to Adaptive). The process culminates in detailed gap analysis and the creation of a strategic improvement roadmap.

Conduct comprehensive cybersecurity assessments for critical oil and gas infrastructure, spanning upstream, midstream, and downstream operations. This skill covers securing SCADA, DCS, and safety systems, and ensures compliance with industry standards like API 1164, IEC 62443, and TSA Directives.

Open Source Intelligence (OSINT) is the critical first phase of red team engagements. This guide details how to systematically collect publicly available data about a target organization. It covers mapping network assets (domains, IPs), identifying personnel for social engineering, discovering credential leaks, and mapping the entire technology stack. Use this skill during authorized security assessments to build comprehensive attack surface maps and initial access strategies.

This skill utilizes the SpiderFoot REST API and CLI to automate Open-Source Intelligence (OSINT) collection. It performs comprehensive target profiling, reconnaissance, and attack surface mapping across 200+ data sources. Users can select specialized modules (e.g., footprint, investigate) to analyze domains, IPs, and credentials, generating structured intelligence reports essential for security assessments, incident response, and threat intelligence gathering.

Conduct comprehensive security assessments for Operational Technology (OT) networks, including SCADA and DCS systems. This skill maps industrial protocols (Modbus, DNP3, OPC UA) and analyzes traffic against the Purdue Model. It is crucial for identifying IT/OT convergence risks, detecting misconfigurations, and ensuring compliance with standards like IEC 62443.

This skill details how to conduct comprehensive Operational Technology (OT) vulnerability assessments using platforms like Claroty xDome. It covers passive asset discovery, correlating vulnerabilities against CISA/ICS-CERT advisories, calculating risk scores, and prioritizing remediation based on operational impact and compliance standards (e.g., IEC 62443, NERC CIP). The provided workflow uses Python to manage asset inventory and vulnerability matching for highly regulated industrial environments.

This tool orchestrates safe vulnerability assessments for Operational Technology (OT) and Industrial Control Systems (ICS) environments. It prioritizes safety by guiding users through passive monitoring, native protocol querying, and carefully controlled active scanning methods, specifically designed to identify vulnerabilities without risk of disrupting industrial processes or crashing legacy controllers. Essential for compliance audits (e.g., IEC 62443).

This skill demonstrates how to craft and inject custom, malformed, or spoofed network packets using tools like Scapy and hping3. It is designed for authorized cybersecurity assessments to rigorously test firewall rules, Intrusion Detection/Prevention Systems (IDS/IPS) signatures, anti-spoofing controls, and overall network stack resilience against protocol anomalies and fragmentation attacks. Use only in controlled, authorized environments.

This skill automates the monitoring of public paste sites (e.g., Pastebin, GitHub Gists) to detect leaked credentials, API keys, and sensitive data dumps. It employs advanced regex patterns and keyword matching to provide early warning of security breaches, crucial for incident response, vulnerability assessment, and threat intelligence gathering.

This guide details comprehensive physical security penetration testing techniques, essential for red teaming engagements. It covers methods such as tailgating, badge cloning (RFID), lock bypassing, and deploying rogue network devices (e.g., Pineapple, LAN Turtle). It provides practical toolkits and MITRE ATT&CK mapping to evaluate an organization's physical and digital control weaknesses.