Skill UI

This tool performs comprehensive security testing on GraphQL APIs by generating deeply nested, recursive, or highly repetitive queries. It specifically aims to identify Denial-of-Service (DoS) vulnerabilities and resource exhaustion issues by overwhelming the server's CPU, memory, or database connections. Essential for security auditors and penetration testers.

A comprehensive guide to analyzing volatile memory (RAM) dumps using the Volatility 3 framework. This skill enables the extraction of crucial digital evidence, including running processes, network connections, loaded modules, credentials, and encryption keys. It is essential for incident response, detecting rootkits, process hollowing, or identifying malware when traditional disk-based forensics are insufficient.

This automated toolkit streamlines memory forensics using the Volatility3 framework. It is designed to analyze raw memory dumps from Windows, Linux, and macOS, revealing complex threats such as process injection, hidden rootkits, malicious code artifacts, and illicit network connections that traditional disk-based methods cannot detect. Essential for real-time incident response and deep security auditing.

Simulates man-in-the-middle (MITM) attacks by stripping SSL/TLS encryption, forcing HTTPS connections to downgrade to insecure HTTP. This skill is designed for authorized penetration testing to validate HSTS enforcement, assess certificate validation mechanisms, and train security teams on detecting cleartext data leakage during a downgrade attack.

This guide implements a secure conduit architecture for Operational Technology (OT) remote access, adhering to IEC 62443 standards. It establishes a layered defense using DMZs, jump servers, and MFA gateways. Use it to secure third-party vendor access to SCADA/ICS equipment, replacing risky direct VPN connections and remediating audit findings on uncontrolled access.

This skill provides comprehensive detection strategies for adversaries abusing DCOM objects (e.g., MMC20.Application) to perform stealthy lateral movement (MITRE ATT&CK T1021.003). It details how to correlate Sysmon Event IDs (Process Creation, Network Connection), analyze WMI activity, and monitor RPC traffic on port 135 to identify unauthorized remote command execution chains. Ideal for advanced threat hunting, red teaming, and purple team exercises.

A comprehensive guide on implementing advanced security observability using eBPF and Cilium Tetragon. This skill covers real-time tracking of process execution, network connections, and file system access directly in the kernel. Learn how to author TracingPolicy CRDs, utilize kprobe/tracepoint hooks for in-kernel filtering, and enforce runtime security policies (e.g., process killing) on Linux hosts or Kubernetes clusters.

Tmux is a powerful terminal multiplexer that enables users to manage multiple sessions, windows, and panes within a single terminal connection. It is essential for maintaining persistent connections on remote servers (surviving SSH disconnects), running long-term background jobs, and automating complex, multi-pane workflows directly from shell scripts, significantly enhancing remote development efficiency.

Viboscope helps discover compatible people for various life aspects—from cofounders and project partners to friends and romantic interests. It builds a comprehensive psychological profile across 10 validated dimensions (including Big Five, Values, and Work Style) and calculates mathematical compatibility scores, providing detailed insights into why connections are strong. Ideal for professional networking, team building, or personal relationships.

A comprehensive tool designed to reorganize and optimize your professional networks on X and LinkedIn. Instead of treating outbound connections as mere lead lists, it analyzes your social graph by identifying pruning opportunities, recommending high-value connections to keep, and generating warm outreach drafts. Use it to enhance relationship quality and strategic growth.

An advanced tool for network intelligence that calculates weighted graph scores to map the optimal path to a target. It identifies potential introducers, measures 'bridge value' across connections, and helps determine whether a connection requires a warm introduction or direct outreach on platforms like X and LinkedIn. Ideal for users needing the raw ranking methodology.

A comprehensive guide for writing safe, explicit, and observable database code in Go. It covers best practices for using standard libraries like `database/sql`, `sqlx`, and `pgx`. Key topics include parameterized queries, context propagation, transaction management, connection pooling, and ensuring data integrity while avoiding common pitfalls like ORMs and SQL injection.