Skill UI

Exploit misconfigured Active Directory Certificate Services ESC1 templates to request certificates as privileged users, then escalate to Domain Admin during authorized red team or pentest work. Includes enumeration, certificate requests, PKINIT authentication, and follow-on domain access.

Configures mutual TLS authentication between microservices using Python cryptography and ssl modules, generating CA/service certificates, validating chains, checking expiration, and auditing deployment status to enforce zero-trust service-to-service security.

This skill covers the comprehensive automation of X.509 certificate lifecycle management, including requesting, issuing, deploying, monitoring, renewing, and revoking certificates. Utilizing Python and the ACME protocol (like Let's Encrypt), it helps organizations mitigate security risks and prevent service outages caused by expired or poorly managed certificates. Ideal for security auditing, incident response, and continuous security testing.

Monitors Certificate Transparency logs via crt.sh and direct RFC 6962 API calls to spot unauthorized issuances, track CAs, discover subdomains, and alert on suspicious TLS certificates for owned domains.

Implements Cosign keyless signing with Fulcio certificates, Rekor log audit, and OIDC identity binding so container images and artifacts gain verifiable provenance within CI/CD pipelines.

A comprehensive Command Line Interface (CLI) for managing the entire lifecycle of Windows applications. This skill allows developers to initialize projects, create signed MSIX packages, manage application manifests (AppxManifest.xml), handle development certificates, and access core Windows SDK build tools. It seamlessly supports building applications across various frameworks, including .NET, C++, Electron, Rust, and Tauri, ensuring cross-platform compatibility with native Windows capabilities.