Skill UI

A comprehensive, 10-phase methodology for authorized security assessment of modern APIs, including REST, GraphQL, WebSocket, and SOAP. This guide covers the entire testing lifecycle—from endpoint discovery and authentication bypass (JWT/OAuth 2.0) to sophisticated authorization flaws (BOLA/IDOR/BFLA), input validation, rate limiting, and CI/CD integration testing.

A specialized skill for advanced runtime analysis of Android applications, primarily used in CTF and security research. It covers techniques like hooking specific system boundaries (JNI, WebView), bypassing security measures (SSL pinning, root checks), and recovering sensitive data or request signatures. Ideal for deep inspection of app trust boundaries and complex mobile logic.

A specialized skill for advanced security analysis, particularly in CTF scenarios. This tool guides users through analyzing live iOS runtime behavior, including Objective-C/Swift method tracing, inspecting Keychain data, bypassing SSL pinning, and recovering accepted network requests. It is designed to be used after a primary orchestration tool has established the sandbox environment, focusing on the details of trust boundaries.

A comprehensive methodology for advanced red teaming and adversary emulation. This skill details how to bypass modern Endpoint Detection and Response (EDR) solutions (e.g., Defender, CrowdStrike, SentinelOne). Techniques include unhooking ntdll, utilizing indirect syscalls (Hell's Gate), patching ETW providers, and AMSI context blinding. Essential for authorized penetration testing and self-developed implant development, aligning with MITRE ATT&CK T1562.

Comprehensive workflow for analyzing suspected malware via static, dynamic, and behavioral techniques. Covers IOC extraction, YARA/Sigma rule generation, sandbox automation, and anti-analysis bypassing.

A comprehensive methodology for deep security testing of both Android (APK) and iOS (IPA) applications. This guide covers the entire workflow, from initial information gathering and static analysis (decompilation, code structure analysis) to advanced dynamic instrumentation, network interception, and bypassing modern security measures like SSL Pinning, Root/Jailbreak detection, and anti-debugging.

This robust methodology guides users to strip away assumed constraints, industry conventions, or historical precedents. By isolating only the fundamental, independently supported primitives (like physics, core math, or measured needs), it enables the rebuilding of the simplest, most robust solution that genuinely satisfies real-world constraints, bypassing artificial or arbitrary limitations.

This skill generates the complete native source code for a third-party Platform Abstraction Module (PAM) control, including iOS Obj-C, Android Kotlin, required podspecs, and a manifest contract. It bypasses TypeScript layers, focusing purely on the native build surface and the dispatch contract (`manifest.json`). This is used by developers to scaffold the foundational, OS-specific code necessary for integrating custom, native modules into a React Native environment.

This skill maps an organization's entire identity fabric, identifying its tenant boundaries (federation mapping) and various Identity Providers (IdPs like Entra, Okta, ADFS, Google). It performs pre-authentication user enumeration and synthesizes login candidates using harvested names and confirmed email patterns. It is strictly for reconnaissance and mapping, never for credential submission or authentication bypass.

A comprehensive guide for creating and maintaining an atomic, index-driven knowledge base (KB) using Markdown. This method enables AI agents to bypass traditional vector search limitations by reading a central index file (INDEX.md) and opening only the most relevant, highly signaled notes, drastically improving context efficiency.

Covers advanced API exploitation methodologies, focusing on business logic abuse, API call chaining, and sophisticated attack patterns that bypass traditional security controls. Topics include GraphQL abuse (batching, introspection), JWT manipulation (algorithm confusion), race conditions, and identifying API key leakage. This guide is designed for authorized penetration testers targeting deep-seated, logic-layer vulnerabilities.

A comprehensive guide for authorized red team engagements, covering the end-to-end lifecycle of advanced phishing campaigns. Learn techniques for infrastructure setup (domain aging, SPF/DKIM/DMARC), payload delivery (macro weapons, HTML smuggling), and bypassing email security gateways (MFA bypass, domain spoofing). Essential knowledge for penetration testers and security professionals.