Skill UI

A comprehensive guide detailing advanced techniques for attacking Microsoft Active Directory (AD) environments. It covers the entire red team lifecycle, including reconnaissance (BloodHound, PowerView), credential harvesting (Mimikatz, AS-REP Roasting), and critical attacks such as Kerberos exploitation, Pass-the-Ticket/Hash, and NTLM relay attacks. Essential for penetration testing and defensive validation.

This advanced skill details dual-use security techniques for analyzing protected binaries, conducting malware analysis, and performing authorized penetration testing. It strictly mandates that users confirm explicit written authorization, adhere to defined scope, and ensure legal compliance (e.g., CFAA, DMCA). Use cases include CTF competitions, academic research, and internal security auditing, emphasizing defensive recommendations and evidence preservation.

This advanced skill details dual-use security techniques for analyzing protected binaries, conducting malware analysis, and performing authorized penetration testing. It strictly mandates that users confirm explicit written authorization, adhere to defined scope, and ensure legal compliance (e.g., CFAA, DMCA). Use cases include CTF competitions, academic research, and internal security auditing, emphasizing defensive recommendations and evidence preservation.

This guide provides comprehensive techniques for writing highly robust, production-grade Bash scripts. It covers advanced error handling, input validation, and safety best practices essential for building reliable CI/CD pipelines, system administration utilities, and mission-critical automation scripts that must handle edge cases gracefully.

Master essential practices for writing robust, secure, and portable Bash scripts suitable for production environments, CI/CD pipelines, and critical system automation. This guide covers strict error handling, safe argument parsing, input validation, process orchestration, and cross-platform compatibility, ensuring scripts are resilient to unexpected inputs and failures.

A comprehensive, multi-phase workflow designed for creating production-ready Bash scripts. This guide covers the entire development lifecycle, including defensive pattern implementation, structured error handling (traps, retry logic), logging strategies, rigorous unit testing using Bats, and professional documentation. Ideal for system administration, CI/CD automation, and core DevOps scripting.

A comprehensive guide detailing red team tactics based on the MITRE ATT&CK framework. It covers the entire adversary lifecycle, including reconnaissance, initial access, privilege escalation, defense evasion, lateral movement, and exfiltration. This skill is designed for authorized security assessments to simulate real-world threats and identify critical defensive gaps.

Centralizes proven red team methodologies into an automated reconnaissance and vulnerability discovery workflow that sequences asset discovery, live host validation, fingerprinting, content hunting, and exploit surface analysis for bug bounty and defensive assessments.

A specialized tool designed for incident responders and threat hunters. It extracts critical configuration data—such as C2 server addresses, malleable profiles, watermarks, and communication settings—from Cobalt Strike beacon payloads found in PE files or memory dumps. This analysis is crucial for mapping attacker infrastructure and improving defensive detection rules.

A comprehensive skill for building detailed threat actor profiles. It systematically collects and correlates intelligence from diverse open-source sources, including vendor reports, dark web forums, social media, and code repositories. The resulting structured dossiers map adversary motivations, capabilities, infrastructure, and Tactics, Techniques, and Procedures (TTPs), enabling robust attribution and defensive planning.

A comprehensive system for systematically collecting, categorizing, and enriching Indicators of Compromise (IOCs) from various sources (network logs, memory dumps, email, etc.). It supports the entire incident response lifecycle, ensuring structured data representation using STIX/TAXII formats for robust threat intelligence sharing and defensive system automation.

This skill guides Security Operations Center (SOC) teams through structured threat modeling using the MITRE ATT&CK framework. It enables mapping adversary Tactics, Techniques, and Procedures (TTPs) against organizational assets to identify critical detection coverage gaps, prioritize defensive investments, and improve overall security posture. Ideal for risk assessment, purple teaming, and compliance planning.