Skill UI

A comprehensive methodology for offensive security, detailing how to systematically extract secrets from Continuous Integration/Continuous Deployment (CI/CD) pipelines. Techniques covered include dumping environment variables, exploiting misconfigurations in HashiCorp Vault, AWS Secrets Manager, and cloud platform tokens (GitHub, GitLab, etc.). It also guides attackers on OIDC federation abuse, build log analysis, and advanced exfiltration methods, mapping to MITRE ATT&CK T1552.

A comprehensive guide covering the full attack lifecycle in Kubernetes. Techniques include service account token theft, RBAC misconfiguration exploitation, kubelet API abuse, pod escape, and cloud metadata compromise across major cloud platforms (AWS, GCP, Azure). Essential for security assessment and penetration testing of cloud-native environments.

A professional-grade 'Living Pipeline' that integrates advanced AI reasoning into the SDLC. It provides autonomous guardrails for system security, cloud cost management (FinOps), and Kubernetes compliance. It audits Linux Kernel patches for memory vulnerabilities, detects cost drifts in Terraform plans, and generates hardened K8s manifests from natural language policies.

This skill provides expert-level review and guidance for complex software systems. It covers modern architecture patterns like microservices, event-driven design, and clean architecture. The architect evaluates scalability, resilience, security, and maintainability. It helps ensure architectural integrity and compliance with best practices across distributed systems and cloud-native environments.

Configure AWS CloudTrail to enable organization-wide audit logging for compliance and security investigation. This skill covers setting up S3 buckets for log storage, applying security policies, enabling encryption, and creating trails for multi-region activity. It includes configuring event selectors for management and data events, and setting up CloudWatch alarms for unauthorized API calls to meet standards like SOC 2 or HIPAA.

This skill provides expert guidance on AWS cost optimization, monitoring, and operational excellence. It integrates MCP servers for cost estimation, analysis, CloudWatch metrics, alarms, and security auditing. Use it to analyze bills, estimate deployment costs, set up observability, and assess security posture effectively.

This comprehensive guide provides scripts and best practices for auditing, hardening, and enforcing AWS Identity and Access Management (IAM) policies. It covers implementing least privilege, defense in depth, and auditing for overly permissive actions, unused roles, and outdated access keys, significantly enhancing cloud security posture.

This skill provides comprehensive techniques for penetrating AWS cloud environments, covering IAM enumeration, privilege escalation, SSRF attacks, S3 exploitation, and Lambda code extraction. It supports red team operations and security assessments with tools like Pacu and Prowler. Requires AWS CLI and Python knowledge.

This comprehensive skill provides a security posture assessment for AWS environments. It uses AWS CLI commands to audit critical security areas, including IAM policy review, network security groups, data encryption status (EBS, S3, RDS), and logging mechanisms (CloudTrail, VPC Flow Logs). Use this to proactively identify misconfigurations and ensure adherence to security best practices and compliance standards.

Design and manage AWS Virtual Private Cloud (VPC) networking infrastructure for production environments. This skill covers subnet isolation, routing tables, security groups, and network segmentation. It includes configuring Internet Gateways, NAT Gateways, and VPC peering for multi-AZ architectures. Use AWS CLI to create VPCs, subnets, and gateways securely. Essential for DevOps engineers setting up secure cloud network foundations.

Manage secrets, keys, and certificates securely in Azure Key Vault using CLI. Configure access policies, implement RBAC, and handle encryption operations. Essential for DevOps security and cloud infrastructure administration.

Learn to design and implement Azure network infrastructure including Virtual Networks, Subnets, Network Security Groups, and Azure Firewall. Covers hub-spoke topology, VNet peering, and private endpoints using Azure CLI and Terraform. Essential for building secure and scalable cloud network environments in production.