Skill UI

Analyzes PLC firmware images to identify hardcoded credentials, insecure updates, backdoors, memory corruption, and debug interfaces, using extraction from Siemens, Rockwell, and Schneider platforms plus static/dynamic inspection and baseline comparison to validate security.

Perform thick client application penetration tests to uncover insecure local storage, hardcoded credentials, DLL hijacking, memory leaks, and unsafe API communications using dnSpy, Procmon, Burp Suite, and related tools in desktop environments.

Guide to configuring and operating Tenable Nessus to assess network, server, workstation, and device security by creating policies, scheduling scans, running credentialed checks, and interpreting prioritized findings for vulnerability management workflows.

Guides security teams through hardening AWS IAM configurations by scoping policies, enabling Access Analyzer, enforcing permission boundaries, and rotating credentials so cloud accounts maintain least privilege for audits, migrations, or remediation.

Guides teams through securing serverless compute (AWS Lambda, Azure Functions, Google Cloud Functions) by enforcing least-privilege IAM, replacing hardcoded secrets with managed stores, embedding dependency scanning in CI/CD, validating inputs, and monitoring runtimes to block injections, credential theft, and supply-chain attacks.

Guides security testers through identifying and exploiting CORS misconfigurations on API endpoints and SPAs so unauthorized cross-domain data access and credential theft can be detected and proven during penetration testing.

Deploy deception-based Active Directory honeytokens—fake privileged accounts, SPNs, decoy GPOs and BloodHound paths—to detect Kerberoasting, lateral movement, credential theft and other reconnaissance activity via monitored Windows Security events.

Guides analysts through using binwalk to scan, extract, mount, and inspect firmware images, covering entropy analysis, nested archive handling, filesystem mounts, and string hunting for credentials or config data during IoT/security research.