Skill UI

Guides experts through auditing and experimenting on non-registration forms to boost completion rates, covering assessment, design, copy, layout, and hypothesis testing for lead, contact, demo, survey, or checkout flows.

This guide demonstrates how to implement clean and robust asynchronous pipelines in TypeScript using `TaskEither` from `fp-ts`. It solves the common problem of deeply nested, unmanageable `try/catch` blocks, allowing developers to compose sequential API calls and operations while correctly handling success and failure paths in a functional, immutable manner. Ideal for complex data fetching and workflow orchestration.

Automate creation of polished walkthrough videos by feeding Stitch project screens into Remotion compositions, adding smooth transitions, zooms, and contextual overlays to showcase apps for demos or product updates.

This skill covers implementing complex user interactions within Three.js scenes. It demonstrates techniques like raycasting for precise object selection and click detection, handling mouse and touch inputs, and integrating various camera controls (OrbitControls, FlyControls, FirstPersonControls). Use this when building highly interactive, immersive 3D web applications.

Guides founders and GTM teams through video-first cold outreach, personalized AI deliverables, async selling, and demo-led prospecting so you can research, build, record, and deliver compelling video touchpoints that cut through inbox noise.

A comprehensive guide for analyzing PCAP files captured during malware execution. It demonstrates advanced techniques using Wireshark, Zeek, Suricata, and Python (scapy) to identify Command and Control (C2) communications, data exfiltration channels, Domain Generation Algorithms (DGA), and periodic beaconing patterns. Essential for malware reverse engineering and network threat detection.

This comprehensive guide details the systematic extraction and analysis of Windows Registry hives (SAM, SYSTEM, SOFTWARE, NTUSER.DAT) from forensic images. It demonstrates how to use specialized tools like RegRipper and Python scripts to uncover critical artifacts, including user activity history, persistence mechanisms (autorun keys), installed software records, and evidence of system compromise, which is crucial for digital forensics investigations.

This guide details the deployment and configuration of MISP (Malware Information Sharing Platform) using Docker. It demonstrates how to aggregate, correlate, and distribute threat intelligence from diverse sources like abuse.ch and AlienVault OTX. Learn automated feed synchronization, STIX/TAXII integration, and connecting the platform to SIEM and SOAR tools like Splunk and Elasticsearch for centralized IOC management.

This skill demonstrates how to exploit vulnerabilities in JWT implementations, specifically algorithm confusion. It targets APIs that fail to strictly enforce the signing algorithm, allowing attackers to downgrade signatures (e.g., RS256 to HS256) or bypass signature verification entirely (alg:none). Use this for authorized penetration testing of API security and cryptographic integrity.

Kerberoasting is a credential access attack (T1558.003) targeting Active Directory service accounts with Service Principal Names (SPNs). This skill demonstrates using Impacket to request Kerberos TGS tickets for these accounts. The resulting RC4 or AES-encrypted tickets are then cracked offline using tools like Hashcat or John the Ripper, allowing attackers to recover service account credentials for lateral movement during authorized penetration testing or red-team engagements.

This guide details the exploitation chain for noPac, combining CVE-2021-42278 (sAMAccountName spoofing) and CVE-2021-42287 (KDC PAC confusion). It demonstrates how an attacker can escalate from a standard domain user to Domain Admin by manipulating Active Directory tickets and performing DCSync. Primarily used in authorized red-teaming and penetration testing to validate domain security.

A comprehensive guide for authorized penetration testing, demonstrating how to identify and exploit critical vulnerabilities in the SMB protocol (e.g., EternalBlue, PrintNightmare). This skill covers network enumeration, lateral movement techniques (Pass-the-Hash, SMB Relay), and post-exploitation activities using Metasploit and Impacket tools to assess enterprise network security posture.