Skill UI

Provides Wycheproof test vectors for validating cryptographic implementations against known attacks and edge cases, making it ideal for CI regression sweeps and third-party crypto audits.

A rigorous, security-focused code review process designed for Pull Requests (PRs), commits, and diffs. It moves beyond general reviews by focusing intensely on high-risk areas such as authentication, cryptography, external calls, and value transfer. The methodology is evidence-based, requiring detailed attack scenario modeling and generating comprehensive, auditable markdown reports to identify overlooked vulnerabilities and regressions.

This guide details the configuration and implementation of mutual TLS (mTLS) authentication between microservices. It utilizes Python's cryptography library for robust certificate generation, validation, and secure service-to-service authentication, essential for adopting zero-trust security models.

Automates the static security analysis of Android APK/AAB files using the Mobile Security Framework (MobSF). This skill identifies critical vulnerabilities such as hardcoded secrets, insecure permissions, weak cryptography, and structural flaws (mapping to OWASP Mobile Top 10) without requiring application execution. It is essential for integrating security gates into CI/CD pipelines, performing pre-release quality assurance, and enhancing penetration testing coverage.

Assesses organizational readiness for migrating cryptographic systems to post-quantum standards (PQC), aligning with NIST guidelines. The tool performs comprehensive cryptographic inventory scanning to identify quantum-vulnerable algorithms (RSA, ECDH, ECDSA) and evaluates the feasibility of implementing hybrid TLS configurations using standards like ML-KEM and ML-DSA. Essential for implementing crypto-agility across enterprise infrastructure.

This skill guides users through advanced security auditing and best practices for Golang development. It acts as a senior security engineer, focusing on defense in depth by analyzing critical areas like injection patterns, cryptography, secrets management, and authorization flaws. It supports full codebase audits (using STRIDE and DREAD scoring) and precise PR vulnerability reviews, ensuring secure and resilient Go applications.

A comprehensive guide for cryptanalysts detailing advanced attack vectors against RSA cryptography. This playbook covers factorization methods, small exponent exploits (e.g., Hastad Broadcast), lattice-based attacks (Wiener's, Boneh-Durfee), and methods exploiting protocol weaknesses like padding oracles. Essential for CTF challenges and authorized security assessments.

This technique exploits the Active Directory attribute `msDS-KeyCredentialLink` by injecting attacker-controlled public keys (Shadow Credentials). Using tools like pyWhisker and Certipy, the attacker forces the target account to register a new key. Subsequently, by leveraging PKINIT (Public Key Cryptography for Initial Authentication in Kerberos), the attacker can obtain a service ticket and recover the target's NT hash, achieving a stealthy, password-less, complete account takeover.

This skill guides the secure migration from classical cryptography (RSA, ECC) to quantum-resistant algorithms (PQC). It covers building a Cryptographic Bill of Materials (CBOM), identifying data at risk (HNDL), and deploying hybrid key exchange protocols like X25519MLKEM768 to ensure long-term data security against quantum threats.

This skill executes comprehensive historical backtesting using the high-performance neural-trader engine. It supports features like walk-forward validation and captures key financial metrics (Sharpe, Drawdown). Critically, it signs the resulting artifact using Ed25519 cryptography, providing non-repudiable tamper evidence required for promoting research models to live trading systems.

This comprehensive guide helps authors strategically position their computer security manuscripts for the ACM Conference on Computer and Communications Security (CCS). It details topic fit, required threat modeling, evidence presentation, and critical comparisons with sister venues (e.g., S&P, USENIX Security). It serves as a high-level 'fit/framing' tool for maximizing submission success in core areas like privacy, cryptography, and systems security.

A comprehensive strategy guide for authors preparing manuscripts for the ACM Symposium on Theory of Computing (STOC). It helps researchers determine the ideal fit, required evidence bar, and narrative framing for major theoretical contributions in algorithms, complexity, cryptography, and theoretical computer science.