Skill UI

Trivy is a comprehensive open-source scanner designed to detect vulnerabilities in OS packages, language dependencies, misconfigurations, exposed secrets, and license violations within container images. It is essential for integrating security checks into CI/CD pipelines, performing rigorous security assessments, or investigating security incidents. The tool supports generating multiple standardized output formats like SARIF, CycloneDX, and SPDX.

This skill guides the deployment and configuration of Microsoft Defender for Cloud (CNAPP) across Azure, multi-cloud, and hybrid environments. It covers enabling specialized security plans for various workloads (servers, containers, databases), managing the Secure Score, and implementing advanced security controls like Just-In-Time (JIT) access, ensuring comprehensive cloud workload protection and compliance.

A comprehensive guide to hardening container registries using Harbor. Learn how to enforce strict image provenance and deployment security by integrating vulnerability scanning (Trivy), cryptographic image signing (Cosign/Notary), granular Role-Based Access Control (RBAC), immutable tag policies, and content trust. Essential for environments requiring high compliance and robust supply chain security.

This comprehensive template and guide facilitate the containerization of ASP.NET Core applications. It provides a structured prompt and checklist to ensure that the resulting Dockerfile adheres to industry best practices for performance, security, and maintainability when running on Linux containers. It covers all necessary aspects, including dependency management, port exposure, build stages, and custom configuration.

This advanced skill explores offensive reconnaissance techniques focused on defeating modern operating system security boundaries and mitigations. Topics include kernel/user boundary manipulation, sandbox escapes (AppContainer, LPAC), COM/RPC boundary exploitation, hypervisor interactions, and various integrity level bypassing methods. It is essential for planning advanced privilege escalation paths and understanding deep Windows security architecture, including AMSI, WDAC, and ETW manipulation.

This skill facilitates the deployment of WebContainer applications to popular hosting platforms like Vercel and Netlify. It handles complex configuration, including setting necessary COOP/COEP security headers. It is essential when developing modern web projects using WebContainers or the StackBlitz SDK, ensuring proper and secure deployment.

Provides a comprehensive production checklist specifically for WebContainer applications built using the StackBlitz SDK. This guide helps developers ensure that their web applications are robust and ready for deployment by checking essential aspects like security headers, cross-browser compatibility, and necessary fallback mechanisms.

This comprehensive guide details essential security practices for deploying WebContainers. It covers implementing Content Security Policy (CSP) headers, ensuring robust sandbox isolation, and performing rigorous input validation to mitigate common web vulnerabilities. Use this when developing applications with WebContainers or the StackBlitz SDK.

A comprehensive guide covering expert techniques for breaking out of container isolation. This playbook details methods for exploiting privileged modes, abusing cgroups, manipulating namespaces, and leveraging vulnerabilities in Docker or Kubernetes environments. Essential for advanced security research and penetration testing.

A comprehensive playbook detailing advanced techniques for attacking Kubernetes clusters. Covers API server access, RBAC privilege escalation, service account token abuse, etcd secrets extraction, Kubelet exploitation, and various container escapes. This guide is essential for security professionals and red teams performing deep security assessments on cloud-native infrastructure.

A comprehensive methodology for exploiting Time-of-Check / Time-of-Use (TOCTOU) race conditions across diverse system layers. This covers symlink swaps, file-descriptor races, kernel double-fetch vulnerabilities, and advanced window-widening primitives like FUSE slow filesystems and userfaultfd. Essential for security researchers targeting race-based privilege escalation in binaries, kernels, and container orchestrators.

A comprehensive CI/CD pipeline for Quarkus applications, designed to verify code quality and deployment readiness. It covers all phases: build, static code analysis (SonarQube, Checkstyle), rigorous functional testing (Unit, Integration, API), security scanning (OWASP, dependency checks), native image compatibility testing, performance load testing (K6), and container image validation (Trivy, Grype).