Skill UI

A comprehensive guide covering advanced offensive techniques for AWS cloud environments. Techniques include detailed IAM enumeration, privilege escalation paths, SSRF exploitation targeting metadata endpoints (IMDSv1/v2), S3 bucket exploitation, and Lambda function code extraction. Essential for security professionals and red team operations conducting authorized cloud vulnerability assessments.

This SDK provides a comprehensive Python interface for interacting with Azure Blob Storage, Microsoft's scalable object storage service. It enables users to perform core object storage operations, including uploading, downloading, listing, deleting blobs, managing containers, and setting custom metadata. The library supports both synchronous and asynchronous workflows, making it ideal for building robust data pipelines, data lakes, or cloud-native applications that require reliable, scalable file storage.

This SDK provides comprehensive Python support for Azure Data Lake Storage Gen2. It enables developers to interact with hierarchical file systems, performing essential big data operations such as creating, listing, uploading, downloading, and managing metadata for files and directories. Ideal for building data analytics pipelines and cloud-based data processing workflows.

Automates Box cloud storage operations through Rube MCP, covering uploads, downloads, content search, folder lifecycle, sharing, collaborations, metadata queries, and sign requests; always start with RUBE_SEARCH_TOOLS to sync the current schema.

A comprehensive skill designed to manage, track, and persist image assets generated by Ideogram's API. This tool addresses the critical issue of expiring image URLs by implementing a complete lifecycle pipeline. It handles metadata tracking (prompt, seed, model, style, etc.), immediate downloading, and robust storage to both local filesystems and cloud solutions like S3. Features include asset persistence, generation history logging, and image reproduction using stored seed values.

This skill addresses the challenge of handling temporary CDN links for videos generated by Kling AI. It provides a comprehensive, multi-cloud solution to download the video asset and persistently upload it to major cloud storage platforms, including AWS S3, Google Cloud Storage (GCS), and Azure Blob Storage. It facilitates building robust, long-term media pipelines and ensures metadata preservation.

A comprehensive guide covering methodologies for conducting authorized penetration testing across major cloud platforms, including AWS, Azure, and GCP. It details the shared responsibility model, techniques for exploiting IAM misconfigurations, testing for SSRF vulnerabilities to cloud metadata services, and utilizing industry tools like Pacu and ScoutSuite. Findings are mapped to the MITRE ATT&CK Cloud matrix for robust reporting.

A comprehensive guide detailing the methodology for identifying and exploiting Server-Side Request Forgery (SSRF). This technique is critical in authorized penetration testing, allowing attackers to pivot from public-facing applications to internal resources. Use cases include stealing cloud provider metadata (AWS, GCP), scanning private IP ranges, and accessing internal APIs and admin panels.

A comprehensive guide detailing techniques for detecting and exploiting Blind Server-Side Request Forgery (SSRF). It uses advanced out-of-band (OOB) techniques, such as Burp Collaborator and timing analysis, to interact with internal services, scan private IP ranges, and extract cloud metadata (AWS, GCP, Azure) even when the application does not reflect the server response directly. Essential for web application penetration testing.

A comprehensive guide for conducting cloud forensics investigations across AWS, Azure, and GCP. This workflow demonstrates how to preserve volatile and non-volatile evidence, including snapshotting volumes, capturing instance metadata, and collecting critical logs (CloudTrail, Activity Log, Audit Log) to trace unauthorized access and analyze security breaches.

This tool automates the testing of web application URL parameters for Server-Side Request Forgery (SSRF). It probes sensitive endpoints, including cloud metadata services (AWS, GCP, Azure), internal network resources, and various URI schemes (file://, gopher://). It is designed for authorized penetration testing environments to confirm SSRF vulnerabilities and generate detailed threat reports.

A practical guide for using Firebase Cloud Storage in Flutter apps. Covers setup, file upload/download, metadata management, error handling, progress monitoring, and security rules.