Skill UI

This comprehensive playbook details advanced techniques for detecting Prototype Pollution vulnerabilities in JavaScript environments (Node.js and browser). It covers various attack vectors, including using `__proto__` and `constructor.prototype` paths, and provides black-box testing payloads for JSON parsing, query string merging, and deep object assignment. Use this when analyzing applications for potential Remote Code Execution (RCE) or unintended property leakage via object merging sinks.

A comprehensive tool for authorized red-team engagements, designed to map complex on-prem Active Directory and cloud Entra ID attack paths. It uses SharpHound and AzureHound to collect rich data, ingesting it into BloodHound CE for analysis using built-in queries and custom Cypher. Effectively identifies privilege escalation chains leading to domain or tenant compromise, especially in hybrid identity environments.

This specialized downstream skill is designed for deep analysis of complex attack paths originating from Server-Side Request Forgery (SSRF). It systematically tracks the entire exploitation chain: from the initial SSRF source (e.g., webhook, URL parameter) through internal service reachability, metadata endpoint exploitation, credential extraction, and finally, demonstrating how an attacker achieves accepted access or elevated privileges. Use this when tracing the decisive path through server-side requests and credential pivoting.

This is the master workflow and default entrypoint for complex CTF, exploit, and digital forensics challenges. It establishes a 'sandbox model,' treating presented targets as internal and guiding the user through a systematic investigation process. The orchestrator maps the entry surface, proves minimal attack paths, and intelligently routes the investigation to the most relevant specialized domain (e.g., pwn, crypto, cloud, AD) while maintaining a cohesive analysis flow.

Orchestrates authorized multi-stage security engagements spanning reconnaissance, initial access, privilege escalation, and lateral movement. Plans coherent attack paths and coordinates specialist tools for comprehensive penetration testing and red team operations.

Build comprehensive attack trees to visualize threat paths, identify defense gaps, and communicate security risks during authorized security assessments.

Detect exploitable vulnerabilities in GitHub Actions workflows by tracing concrete attack paths from external attackers — pwn requests, expression injection, credential escalation, supply chain risks — and report only verified, evidence-based findings with full exploitation scenarios.