Skill UI

This playbook provides expert-level techniques for exploiting common infrastructure services that are exposed without proper authentication. Coverage includes Redis RCE, Rsync data theft, PHP-FPM code execution, AJP file reads, and MongoDB/Hadoop vulnerabilities. Essential for deep penetration testing and security auditing.

A comprehensive, expert playbook for challenging insecure file upload mechanisms. It provides advanced attack vectors covering validation bypass (magic bytes, extension), storage path abuse (traversal, overwrite), and exploitation of post-upload processing chains (XXE, RCE, CMDi). Essential for deep security auditing of file-handling workflows.

A comprehensive playbook detailing expert-level techniques for exploiting web cache vulnerabilities. Covers both Web Cache Deception (stealing authenticated user data) and Web Cache Poisoning (injecting malicious content). Techniques include path confusion, unkeyed header manipulation (X-Forwarded-Host), and exploiting CDN/reverse proxy caching logic. Essential reading for penetration testers and security researchers.

A comprehensive playbook detailing advanced techniques for bypassing modern Endpoint Detection and Response (EDR) and Antivirus (AV) solutions on Windows. Covers exploiting vulnerabilities in AMSI, ETW, and implementing sophisticated process injection methods (e.g., Process Hollowing, Early Bird) to execute payloads while maintaining stealth.

A comprehensive playbook detailing expert techniques for lateral movement across Windows networks. It covers various protocols and methods for pivoting between compromised hosts, including PsExec, WMI, WinRM, DCOM, SMB, RDP, and advanced credential techniques like Pass-the-Hash (PTH) and Pass-the-Ticket (PTT).

A comprehensive playbook for testing XSLT injection vulnerabilities. This guide details advanced attack chains, starting with processor fingerprinting (Java, PHP, .NET, libxslt). It covers critical vectors including XXE (External Entities), Server-Side Request Forgery (SSRF) via document(), arbitrary file writing (EXSLT), and achieving Remote Code Execution (RCE) through language-specific extensions.

An expert-level playbook covering non-obvious XSS techniques, advanced payload selection across various sinks (DOM, SVG, HTML attributes, JavaScript), and sophisticated defense bypass strategies. Use this guide for real-world penetration testing, including WAF bypass, CSP bypass, HttpOnly bypass, and XS-Leaks side channel exploitation. It assumes deep knowledge of web vulnerability mechanics.

A comprehensive, expert-level playbook covering XML External Entity (XXE) vulnerabilities. This guide details advanced attack techniques across multiple contexts, including SOAP, REST, SVG, and Office files. Key topics covered include blind detection, out-of-band (OOB) data exfiltration, local file reading (e.g., /etc/passwd), and chaining XXE to achieve SSRF or RCE.

An expert guide for creating comprehensive, implementation-ready design systems based on an expressive, high-contrast artistic style. It covers design tokens, component anatomy, advanced accessibility standards (WCAG 2.2 AA), and structured content guidelines for engineers and designers.

This skill provides comprehensive, expert-level guidelines for building an "Energetic" design system. It defines a bold, geometric, and high-contrast aesthetic using thick borders, specific color tokens, and expressive typography. It covers foundational constraints, component anatomy, accessibility (WCAG 2.2 AA), and a rigorous authoring workflow, ensuring all outputs are implementation-ready for engineers and designers.

This skill acts as an expert performance marketer, providing comprehensive strategies for paid advertising across major platforms including Google Ads, Meta (Facebook/Instagram), and LinkedIn. It covers the entire campaign lifecycle, from initial goal setting (awareness, leads, sales) and audience targeting (lookalikes, B2B) to advanced optimization techniques like bidding strategies, budget allocation, and ad copy frameworks (PAS, BAB). Use this for creating, optimizing, and scaling multi-channel campaigns to drive efficient customer acquisition.

A structured playbook for improving the time and space complexity (Big-O) of existing, slow code. This skill guides developers through systematic refactoring, focusing on identifying bottlenecks like nested loops or N+1 queries. It emphasizes applying transformations one at a time, maintaining test coverage, and measuring performance gains to ensure correct and efficient code.