Skill UI

This comprehensive playbook details advanced techniques for exploiting Layer 2 and Layer 3 network protocols. It covers attacks such as ARP spoofing, LLMNR/mDNS poisoning, WPAD abuse, DHCPv6 takeover, VLAN hopping, and STP manipulation. Designed for penetration testers, it facilitates MitM positioning, credential harvesting (NTLM relay), and robust network environment exploitation.

This expert playbook covers advanced techniques for testing HTTP request smuggling and desynchronization vulnerabilities. It is critical when front proxies, CDNs, or load balancers disagree with the origin server on message framing (Content-Length vs Transfer-Encoding), or during protocol downgrades (HTTP/2 to HTTP/1). Use this to uncover deep security flaws like WAF bypass and session hijacking.

This playbook details the methodology for detecting and exploiting subdomain takeover vulnerabilities. It focuses on identifying CNAME/NS/MX records pointing to deprovisioned or unclaimed cloud resources (e.g., AWS S3 buckets, Heroku apps). Understanding these weaknesses allows attackers to serve malicious content under the victim's trusted domain, leading to phishing, credential theft, and security bypasses.

A comprehensive, advanced playbook for conducting deep network traffic analysis and PCAP forensics. Covers essential skills like PCAP repair, advanced Wireshark filtering (HTTP, DNS, TLS), data extraction (file carving, credential harvesting), and detecting covert channels. It guides users through sophisticated techniques, including TLS decryption workflows and DNS tunneling identification.

This skill guides the planning and review process for complex home or small-lab network changes. It covers creating staged migration plans for VLAN segmentation, implementing local DNS resolvers (like Pi-hole), setting up secure VPN access, and ensuring network safety through detailed inventory checks and rollback procedures. It emphasizes security best practices and trust zoning.

Pi-hole is a powerful, network-wide DNS ad blocker solution that runs on Linux hosts (like Raspberry Pi). It automatically blocks ads, trackers, and malware domains for every device on your network without requiring browser extensions. This guide details installation via Docker or bare-metal setup, configuring it as the primary DNS server for a home network, managing blocklists, and implementing advanced features like DNS-over-HTTPS (DoH) for enhanced privacy.

This utility manages all types of DNS records (A, CNAME, MX, TXT, etc.) for domains registered with Namecheap via their dedicated API. It guides users through the full setup process, including public IP detection and credential configuration. Users can list domains, view, add, update, or remove records, and manage nameservers and email forwarding rules.

This guide details the process of adding, verifying, and publishing necessary DNS records (SPF, DKIM, DMARC) for a custom sending domain in Mailtrap. It covers both manual compliance steps via the UI and programmatic automation through the Sending Domains API. Essential for ensuring high email deliverability and authentication compliance.

This skill provides comprehensive functionality for monitoring and mapping adversary-controlled assets, such as C2 servers, phishing domains, and exploit kit hosts. By leveraging tools like Passive DNS, Certificate Transparency logs, and specialized scanners (Shodan/Censys), analysts can discover, track, and pivot through complex threat actor infrastructure over time, significantly enhancing security operations and threat intelligence maturity.

A comprehensive guide to setting up the open-source Sliver C2 framework. It covers deploying the server, generating cross-platform implants and beacons, establishing resilient multi-protocol listeners (mTLS, DNS, HTTPS), and executing advanced post-exploitation and pivoting techniques using the built-in armory for adversary emulation.