Skill UI

Generate, refine, and validate diagrams from natural language, notes, code, or schemas. Supports Mermaid, Graphviz, and PlantUML for flowcharts, architecture, and state machines. Ideal for turning textual analysis into visuals, producing attack-path graphs, or creating editable diagram sources for reports and documentation.

Identify and exploit file path traversal vulnerabilities to read arbitrary server files. Used in security assessments to test web application security against directory traversal attacks.

Expert in handling file uploads and cloud storage solutions like S3 and Cloudflare R2. Covers presigned URLs, multipart uploads, and image optimization. Ensures security by validating file types and preventing path traversal attacks. Optimizes performance for large files without blocking.

Hunt LDAP injection and XPath injection vulnerabilities in web applications. Covers authentication bypass, blind attribute exfiltration, and Active Directory vs generic LDAP differences. Includes attack surface signals, filter grammar, and authorized-use guidance.

Enables authorized offensive security assessments on Windows Active Directory environments. Covers Kerberos abuse, AD CS escalation, BloodHound path analysis, NTLM relay, and domain privilege escalation techniques. Requires explicit written permission and strict authorization gates before execution. Designed for educational purposes or authorized security assessments only.