Skill UI

A comprehensive guide covering advanced offensive techniques for AWS cloud environments. Techniques include detailed IAM enumeration, privilege escalation paths, SSRF exploitation targeting metadata endpoints (IMDSv1/v2), S3 bucket exploitation, and Lambda function code extraction. Essential for security professionals and red team operations conducting authorized cloud vulnerability assessments.

This SDK provides a comprehensive Python interface for interacting with Azure Blob Storage, Microsoft's scalable object storage service. It enables users to perform core object storage operations, including uploading, downloading, listing, deleting blobs, managing containers, and setting custom metadata. The library supports both synchronous and asynchronous workflows, making it ideal for building robust data pipelines, data lakes, or cloud-native applications that require reliable, scalable file storage.

This SDK provides comprehensive Python support for Azure Data Lake Storage Gen2. It enables developers to interact with hierarchical file systems, performing essential big data operations such as creating, listing, uploading, downloading, and managing metadata for files and directories. Ideal for building data analytics pipelines and cloud-based data processing workflows.

Automates Box cloud storage operations through Rube MCP, covering uploads, downloads, content search, folder lifecycle, sharing, collaborations, metadata queries, and sign requests; always start with RUBE_SEARCH_TOOLS to sync the current schema.

A comprehensive skill designed to manage, track, and persist image assets generated by Ideogram's API. This tool addresses the critical issue of expiring image URLs by implementing a complete lifecycle pipeline. It handles metadata tracking (prompt, seed, model, style, etc.), immediate downloading, and robust storage to both local filesystems and cloud solutions like S3. Features include asset persistence, generation history logging, and image reproduction using stored seed values.

This skill addresses the challenge of handling temporary CDN links for videos generated by Kling AI. It provides a comprehensive, multi-cloud solution to download the video asset and persistently upload it to major cloud storage platforms, including AWS S3, Google Cloud Storage (GCS), and Azure Blob Storage. It facilitates building robust, long-term media pipelines and ensures metadata preservation.

A comprehensive guide covering methodologies for conducting authorized penetration testing across major cloud platforms, including AWS, Azure, and GCP. It details the shared responsibility model, techniques for exploiting IAM misconfigurations, testing for SSRF vulnerabilities to cloud metadata services, and utilizing industry tools like Pacu and ScoutSuite. Findings are mapped to the MITRE ATT&CK Cloud matrix for robust reporting.

A comprehensive guide detailing the methodology for identifying and exploiting Server-Side Request Forgery (SSRF). This technique is critical in authorized penetration testing, allowing attackers to pivot from public-facing applications to internal resources. Use cases include stealing cloud provider metadata (AWS, GCP), scanning private IP ranges, and accessing internal APIs and admin panels.

This comprehensive guide details the methodology for detecting and exploiting Blind Server-Side Request Forgery (SSRF) vulnerabilities. It covers crucial techniques including out-of-band (OOB) detection, internal network enumeration (port scanning, IP scanning), accessing cloud metadata endpoints (AWS, GCP, Azure), and bypassing common security filters using various encoding and parsing confusion methods. Ideal for penetration testing and cloud security assessments.

This comprehensive guide outlines a structured workflow for conducting digital forensics investigations across major cloud providers, including AWS, Azure, and GCP. It covers critical steps such as evidence preservation (snapshots, metadata capture), systematic log collection (CloudTrail, Activity Logs, Audit Logs, VPC Flow Logs), and advanced analysis techniques to trace unauthorized accesses and identify root causes of security breaches.

A comprehensive tool for detecting Server-Side Request Forgery (SSRF) vulnerabilities. It probes cloud metadata endpoints (AWS, GCP, Azure), internal network services, and utilizes various protocol handlers (file://, gopher://) and bypass techniques (DNS rebinding, IP encoding) to assess application security posture during penetration testing or security auditing.

A comprehensive guide detailing how to integrate and use Firebase Cloud Storage within Flutter applications. Covers the entire lifecycle of file operations, including uploading assets, downloading data, managing custom metadata, handling various Firebase errors, monitoring upload progress, and enforcing robust security rules.