Skill UI

This skill allows users to build comprehensive attack trees to systematically visualize complex threat paths. It is essential for mapping potential attack scenarios, identifying critical defense gaps, prioritizing security investments, and communicating detailed security risks to non-technical stakeholders.

This skill allows users to build comprehensive attack trees to systematically visualize complex threat paths. It is essential for mapping potential attack scenarios, identifying critical defense gaps, prioritizing security investments, and communicating detailed security risks to non-technical stakeholders.

Delivers repository-grounded AppSec threat models that map components, boundaries, assets, entry points, and attacker capabilities to abuse paths, along with prioritized mitigations tailored to codebase evidence and explicit assumptions.

A comprehensive guide to conducting internal Active Directory reconnaissance using BloodHound Community Edition. This skill leverages graph theory to visualize hidden relationships, map shortest attack paths, and discover critical misconfigurations (like ACL weaknesses and Kerberoastable accounts) necessary for privilege escalation from low-privilege accounts to high-value targets like Domain Admins.

A guide for security professionals and threat hunters to proactively detect advanced privilege escalation techniques across Windows and Linux environments. It covers critical attack methods including token manipulation, UAC bypass, unquoted service paths, and kernel exploits, utilizing EDR and SIEM data sources for comprehensive incident response and security assessments.

BloodHound is a powerful, graph-based reconnaissance tool specifically designed for Active Directory environments. It utilizes graph theory to map deep, hidden relationships and potential attack paths—such as privilege escalation chains—from compromised low-value accounts to high-value targets like Domain Admins. This tool is essential for authorized red team exercises and penetration testing engagements.

Use XM Cyber to continuously map attack paths, uncover choke points, and prioritize the small set of exposures that can threaten critical assets across on-prem, cloud, and hybrid environments.

BloodHound is an open-source reconnaissance tool that leverages graph theory to analyze Active Directory relationships. This guide details the process of collecting AD data using SharpHound and visualizing complex attack paths. It helps identify potential privilege escalation chains, trust abuses, and misconfigurations necessary for an attacker to move from a low-privilege user account to Domain Admin, making it essential for advanced red-teaming and security auditing.

This skill systematically enumerates and audits Active Directory forest trust relationships using advanced techniques like SID filtering analysis, detecting SID history abuse, and assessing inter-realm Kerberos ticket configurations. It is designed for red-teaming and security auditing to identify potential lateral movement paths and trust vulnerabilities across organizational boundaries.

This tool simulates advanced security testing to identify vulnerabilities in API rate limiting. It bypasses throttling controls by manipulating request headers (like X-Forwarded-For spoofing), varying source IP addresses, and manipulating endpoint paths. Essential for assessing API resilience against brute-force attacks, credential stuffing, and resource exhaustion, aligning with OWASP API Security guidelines.

Cartography is a CNCF project designed to perform comprehensive cloud asset inventory across AWS, GCP, and Azure. It queries cloud APIs to aggregate infrastructure resources, map complex relationships (like IAM permissions and network paths), and store them in a Neo4j graph database. This allows security teams to visualize potential attack paths, conduct deep security audits, and identify cross-cloud misconfigurations.

A comprehensive guide to hardening Windows Active Directory environments using Group Policy Objects (GPO). This skill configures multiple layers of defense, including AppLocker, Controlled Folder Access, and Attack Surface Reduction (ASR) rules, to prevent ransomware execution paths, block unauthorized file modifications, and restrict lateral movement across the domain.