Skill UI

An expert guide covering advanced exploitation techniques for Expression Language (EL) injection across multiple Java frameworks, including Spring (SpEL), Struts2 (OGNL), and JSP/JSF (Java EL). Details detection methods, sandbox bypasses, and real-world CVE chains for Remote Code Execution (RCE).

This skill guides the detection and recovery of exposed version-control system (VCS) metadata, including paths for Git, SVN, and Mercurial, as well as common backup and configuration files. It is essential for authorized penetration testing when assessing an application's security posture against information leaks. Techniques include probing specific directories (e.g., /.git/HEAD) and analyzing status codes (e.g., 403 vs 404) to confirm exposure.

A comprehensive guide for advanced memory forensics using Volatility 2 and 3. This playbook covers artifact extraction, including hidden process detection, network connections, credential dumping, DLL analysis, and code injection detection (malfind). It is essential for incident response, malware analysis, and reconstructing attack timelines from memory dumps.

This expert playbook provides comprehensive techniques for exploiting Server-Side Template Injection (SSTI). It covers polyglot detection probes, engine fingerprinting (Jinja2, Twig, FreeMarker, etc.), sandbox escape mechanisms (MRO chains), and advanced bypass techniques. Essential reading for security researchers and penetration testers assessing application vulnerabilities.

This playbook details the methodology for detecting and exploiting subdomain takeover vulnerabilities. It focuses on identifying CNAME/NS/MX records pointing to deprovisioned or unclaimed cloud resources (e.g., AWS S3 buckets, Heroku apps). Understanding these weaknesses allows attackers to serve malicious content under the victim's trusted domain, leading to phishing, credential theft, and security bypasses.

A comprehensive playbook detailing advanced techniques for bypassing modern Endpoint Detection and Response (EDR) and Antivirus (AV) solutions on Windows. Covers exploiting vulnerabilities in AMSI, ETW, and implementing sophisticated process injection methods (e.g., Process Hollowing, Early Bird) to execute payloads while maintaining stealth.

A comprehensive, expert-level playbook covering XML External Entity (XXE) vulnerabilities. This guide details advanced attack techniques across multiple contexts, including SOAP, REST, SVG, and Office files. Key topics covered include blind detection, out-of-band (OOB) data exfiltration, local file reading (e.g., /etc/passwd), and chaining XXE to achieve SSRF or RCE.

Full-site crawling, scraping, and site mapping via Firecrawl MCP. Use for SEO audits, broken link detection, SPA content extraction, and site structure discovery. Automates web crawling tasks with JavaScript rendering and credit-efficient mapping.

Risk-paranoid interrogation of any plan touching data, compliance, or production access. Six CISO forcing questions cover threat model, blast radius, detection, incident response, regulator windows, and vendors before you ship features handling customer data or face a SOC 2 / ISO audit.

Analyzes options chain data by separating real calls and puts from lottery-like speculative contracts to produce more reliable put/call sentiment, anomaly detection, and expiry breakdowns for watchlists, sectors, and event-driven names.

A comprehensive skill for commercial teams, product marketers, and CMOs designing or revising product pricing. It helps determine the optimal pricing model (e.g., usage-based, subscription, value-based), calculates acceptable price ranges using Van Westendorp PSM data, and structures effective Good/Better/Best packaging tiers. It provides strategic direction and risk detection, recommending models and ranges rather than fixed numbers.

Render ARIS Markdown or JSON artifacts such as IDEA_REPORT, AUTO_REVIEW, KILL_ARGUMENT and research-wiki state into polished single-file HTML reports for human reading, with sticky TOC, math, callouts, score progressions and source drift detection.