Skill UI

This skill teaches authorized users how to perform comprehensive password hash cracking using Hashcat. It covers various attack methodologies, including dictionary, brute-force, and rule-based attacks, and identification of common hash types (e.g., MD5, NTLM, bcrypt). The primary use case is for conducting controlled security assessments and penetration testing to evaluate password strength and compliance with current security policies. Always used under explicit authorization.

This comprehensive guide details the process of capturing WPA/WPA2 handshakes and performing offline dictionary and brute-force password cracking. It utilizes industry-standard tools like aircrack-ng and hashcat to assess the strength of wireless network security during authorized penetration tests. It covers everything from interface preparation to final report generation.

Methodology for assessing WPS-enabled routers using Pixie Dust offline recovery, online PIN brute force, lockout handling, and PBC edge cases. Useful for wireless security testing and understanding WPS exposure on consumer APs.

A comprehensive playbook for identifying authentication vulnerabilities in web applications. Covers advanced topics including SQL injection login bypass, predictable password reset tokens, account enumeration techniques, multi-factor authentication bypass, and brute-force resistance checks. Essential for penetration testers assessing login mechanisms and session management.

This skill enforces an algorithm-first discipline, requiring the user to state the time and space complexity (Big-O), the intended data structure, and the core algorithm family before writing any complex code (loops, queries, recursion). It serves as a critical gatekeeper to prevent common performance pitfalls like O(n²) complexity, N+1 database queries, and brute-force implementation errors, significantly improving code robustness and efficiency.

A comprehensive skill for monitoring dark web forums, marketplaces, and leak sites to detect mentions of organizational assets, leaked credentials, and ongoing threat actor activities. Used for proactive threat intelligence gathering, incident response enrichment, and establishing continuous dark web OSINT coverage.

This skill provides advanced detection methods for credential dumping, covering LSASS memory access, SAM hive extraction, and NTDS.dit theft (e.g., using Mimikatz). It utilizes Sysmon Event ID 10 and Windows Security logs to enable threat hunting, assisting SOC analysts in triaging EDR alerts and building robust SIEM correlation rules.

This advanced skill specializes in detecting and recovering hidden data (steganography) embedded within various media containers, including images, audio, video, and documents. It is crucial for forensic analysis and CTF challenges, allowing users to inspect metadata, LSBs, alpha/palette channels, and appended trailers to reconstruct hidden payloads without brute force.

A specialized downstream skill designed for solving encrypted ZIP/PKZIP challenges, particularly those using the legacy ZipCrypto method in CTF competitions. This workflow utilizes known-plaintext attacks (via tools like bkcrack) to recover internal encryption keys, enabling decryption and extraction without resorting to brute-force password guessing. Use this when a predictable plaintext fixture is available.

This skill provides comprehensive management of the Web Application Firewall (WAF) for Power Pages production sites. It allows users to check the current protection status, recommend necessary security measures, and apply granular rules such as IP blocking, country restrictions, path access controls, and rate limits. Use it to secure sites against brute-force attacks or common web vulnerabilities.

Map the testable attack surface of a single authorized target application. Derive hosts, APIs, keys, and object graph from what the app exposes. Use for recon, JS inventory, and identifying business plane without brute force.

Security skill for detecting missing or weak rate limiting on authentication endpoints. Identifies brute force vulnerabilities in OTP, password reset, and login systems. Requires explicit authorization for authorized security assessments only. Includes shadow-throttle detection and enumeration techniques.