Skill UI

A comprehensive guide to securing Software as a Service (SaaS) applications (e.g., Microsoft 365, Salesforce) using Zero Trust principles. This skill covers deploying CASB/SSPM solutions, enforcing conditional access policies (MFA, device compliance), governing OAuth permissions, and applying session-level DLP controls to prevent data exfiltration in multi-cloud environments. Ideal for security architects and engineers.

A comprehensive guide for intercepting and analyzing HTTP/HTTPS traffic from mobile applications using Burp Suite. This skill walks through configuring proxies on Android and iOS, handling CA certificate installation, and executing advanced penetration testing techniques. It is essential for assessing API security, identifying data leakage, and finding authentication vulnerabilities in mobile client-server communications.

This skill provides SOC teams with a structured, multi-source workflow to investigate potential insider threats. It correlates data from SIEM, DLP, EDR, and HR feeds to detect data exfiltration attempts (via cloud, USB, email), unauthorized access patterns, and policy violations. It is crucial for building comprehensive investigation timelines, especially when handling departing employees or suspected data theft.

This comprehensive guide provides essential security protocols for building robust Laravel applications. It covers best practices for authentication (Sanctum, Passport), authorization (Policies), input validation, and protecting against common vulnerabilities like CSRF, XSS, and SQL injection. Key topics include secure file uploads, rate limiting, environment variable management, and implementing robust middleware.

Implement Okta as a centralized Identity Provider (IdP) for robust multi-cloud security across AWS, Azure, and GCP. This skill covers configuring Single Sign-On (SSO), deploying phishing-resistant Multi-Factor Authentication (MFA), automating user lifecycle management via SCIM, and enforcing adaptive access policies based on device posture and user risk, helping organizations achieve Zero Trust compliance.

This comprehensive guide details the methodology for Active Directory (AD) penetration testing. It covers deep domain enumeration, utilizing tools like BloodHound and Impacket, and executing advanced attacks such as Kerberoasting, AS-REP Roasting, and privilege escalation via delegation abuse. Use this when conducting authorized security assessments to discover and exploit misconfigurations to achieve domain compromise.

A comprehensive guide to detecting and mitigating advanced Adversary-in-the-Middle (AiTM) phishing attacks, which bypass Multi-Factor Authentication (MFA) using reverse proxies (e.g., Evilginx, EvilProxy). Learn defensive strategies including implementing FIDO2, configuring Conditional Access policies, and monitoring session hijacking indicators in SIEM/Web Proxies.

This tool utilizes Microsoft RESTler to perform stateful REST API fuzzing. It compiles OpenAPI/Swagger specifications into a usable grammar, allowing users to test complex API interaction sequences. It is crucial for discovering state-related bugs, injection vulnerabilities, authentication bypasses, and resource leaks that standard testing might miss. Ideal for continuous security validation in CI/CD pipelines.

A comprehensive guide for performing structured API security testing using Postman. It covers critical OWASP API Security Top 10 vulnerabilities, including BOLA, authentication bypass, and injection flaws. Ideal for building repeatable security regression tests, simulating multi-role user access, and integrating automated validation into CI/CD pipelines via Newman and OWASP ZAP.

This skill simulates Man-in-the-Middle (MitM) attacks and ARP cache poisoning using advanced tools like Ettercap and Scapy. It is designed exclusively for authorized, controlled lab environments or penetration tests. Use cases include validating the efficacy of Dynamic ARP Inspection (DAI), assessing port security mechanisms, and testing whether IDS/IPS or SIEM systems detect Layer 2 spoofing attempts.

This guide details how to configure and execute deep, authenticated vulnerability scans using OpenVAS/Greenbone Vulnerability Management (GVM). By utilizing valid credentials (SSH, SMB, or ESXi), users can log into target systems to detect local vulnerabilities, missing security patches, and misconfigurations, which are typically missed by unauthenticated scans. Essential for professional security auditing and penetration testing.

This guide details how to perform authenticated (credentialed) vulnerability scans using industry-leading tools like Nessus, Qualys, and OpenVAS. By utilizing service credentials (SSH, SMB, WinRM, SNMPv3), the scan moves beyond superficial banner checks to deeply inspect installed patches, configurations, and local system settings on Linux, Windows, and network devices. This is crucial for detecting vulnerabilities that unauthenticated scans often miss, significantly improving security assessment accuracy.