Skill UI

A comprehensive guide detailing the methodology for identifying and exploiting Server-Side Request Forgery (SSRF). This technique is critical in authorized penetration testing, allowing attackers to pivot from public-facing applications to internal resources. Use cases include stealing cloud provider metadata (AWS, GCP), scanning private IP ranges, and accessing internal APIs and admin panels.

A comprehensive guide detailing techniques for detecting and exploiting Blind Server-Side Request Forgery (SSRF). It uses advanced out-of-band (OOB) techniques, such as Burp Collaborator and timing analysis, to interact with internal services, scan private IP ranges, and extract cloud metadata (AWS, GCP, Azure) even when the application does not reflect the server response directly. Essential for web application penetration testing.

Provides a workflow for authorized penetration testing across AWS, Azure, and GCP to discover IAM, storage, serverless, and compute weaknesses, leveraging Pacu, ScoutSuite, Prowler, and cloud-native tools.

A comprehensive guide for authorized red-team assessments using the Pacu framework. This process details how to enumerate IAM policies, scan for privilege escalation paths, test data access across services (S3, DynamoDB), and simulate lateral movement to determine the blast radius of compromised AWS credentials.

This skill provides a comprehensive framework for performing authorized penetration testing on Google Cloud Platform (GCP). It uses specialized tools like GCPBucketBrute to enumerate publicly accessible storage buckets and audits IAM policies to identify overly permissive role bindings. The process includes checking service account keys and mapping potential privilege escalation paths, generating actionable, risk-scored reports for robust cloud security posture management.

This tool provides comprehensive security assessments for the entire IoT ecosystem, including physical hardware, embedded firmware, network communications, and cloud APIs. Testers can perform deep dives using hardware debugging (UART/JTAG), firmware extraction and reverse engineering, analyzing protocols (MQTT, CoAP, BLE), and simulating cloud-to-device attacks to identify vulnerabilities across all layers of the smart device stack.

This tool automates the testing of web application URL parameters for Server-Side Request Forgery (SSRF). It probes sensitive endpoints, including cloud metadata services (AWS, GCP, Azure), internal network resources, and various URI schemes (file://, gopher://). It is designed for authorized penetration testing environments to confirm SSRF vulnerabilities and generate detailed threat reports.

This skill guides users through performing sophisticated web cache deception attacks. It exploits path normalization discrepancies and cache key misconfigurations between Content Delivery Networks (CDNs) and origin servers. Use this methodology to test for sensitive data exposure, cache poisoning, and authentication bypass vulnerabilities in applications protected by aggressive caching layers like Cloudflare or Akamai.

A comprehensive guide on integrating and calling Firebase Callable Cloud Functions within Flutter applications. Covers setup, passing structured data, robust error handling, performance optimization (timeouts, caching), and local testing using the Firebase Emulator Suite.

Enables structured cloud penetration testing across Azure, AWS, and GCP by guiding reconnaissance, authentication, enumeration, exploitation, and persistence workflows for authorized assessments.

A comprehensive guide and set of tools for programmatically building, scaffolding, and deploying Power Automate cloud flows using the FlowStudio MCP server. It guides agents through the entire workflow, including checking for existing flows, resolving connection references, defining actions, and final deployment/testing, all without needing to open the portal.

This utility provides a structured way to manage and separate notes across multiple accounts and environments within Apple Notes. By utilizing distinct accounts (e.g., iCloud for Production, 'On My Mac' for Development), users can ensure absolute data isolation between development, staging, and live production data. It is crucial for maintaining clean separation in complex development workflows and QA testing scenarios.