Skill UI

Enumerate and audit Active Directory forest trust relationships with impacket, checking SID filtering, foreign principals, SID history, and Kerberos trust tickets to spot potential cross-forest attack paths during red-team assessments or authorized penetration tests.

Step-by-step guidance for conducting a focused Active Directory penetration test, from enumeration and BloodHound attack-path analysis to Kerberos abuse, ADCS/DCSync exploitation, and proving domain compromise during security assessments or incident response.

Cartography consolidates AWS, GCP, and Azure resources into a Neo4j graph, revealing IAM chains, network paths, and attack surfaces so teams can inventory assets, validate controls, and investigate incidents with rich queries.

A hands-on guide for assessing CDN-backed apps by exploiting path normalization differences to trick caches into storing authenticated pages as static resources, exposing them to unauthenticated attackers during penetration tests and bug bounties.

Guides security testers through identifying XML interfaces, crafting XXE/XPath payloads, and validating defenses against entity-based data leaks, SSRF, and XML bomb attacks in SOAP/XML workflows.

Detects injection and privilege escalation paths in AWS/Azure/Google serverless functions by correlating CloudTrail events, static code analysis, runtime telemetry, and IAM policy reviews, helping SOC teams catch poisoned event sources, layer tampering, or eval/exec abuse before attackers execute arbitrary code.

Practical workflow for finding exploitable, remotely reachable vulnerabilities, prioritizing those that qualify for bounties by confirming user-controlled attack paths, minimal PoCs, and real impact before reporting.