Skill UI

Stratus Red Team is an open-source tool for detection engineering and purple teaming. It atomistically detonates granular, MITRE ATT&CK-mapped offensive techniques across AWS, Azure, GCP, and Kubernetes. The tool executes a full, repeatable lifecycle (warmup, detonate, revert, cleanup) to generate realistic attacker telemetry. Use it to validate if cloud security tools (like CloudTrail or Sentinel) reliably trigger on simulated attacks, or to safely practice red teaming.

This guide details how to deploy OpenCTI, a powerful, open-source threat intelligence platform, and utilize the pycti Python client. It teaches analysts how to model complex cyber threat intelligence, including threat actors, campaigns, and indicators, into a structured STIX 2.1 knowledge graph. Use this for centralized threat-intel correlation, building adversary graphs, and generating STIX bundles for detection engineering.

A comprehensive methodology for deep security testing of both Android (APK) and iOS (IPA) applications. This guide covers the entire workflow, from initial information gathering and static analysis (decompilation, code structure analysis) to advanced dynamic instrumentation, network interception, and bypassing modern security measures like SSL Pinning, Root/Jailbreak detection, and anti-debugging.

Provides a comprehensive framework for blue-team threat hunting and detection engineering. Users learn hypothesis-driven hunting techniques, optimize SIEM queries, and build robust detection rules using industry standards like Sigma and YARA. Essential for minimizing false positives and validating security controls in a defensive posture.

This skill provides a CLI-based workflow for Android APK reverse engineering. It covers APK unpacking, Java decompilation, smali modification, repackaging, Frida dynamic hooking, and optional native .so analysis. It leverages local tools such as jadx, apktool, frida, adb, ida-reverse, and radare2. Useful for analyzing login, signature, security, root detection, or certificate verification logic in Android apps, always in an authorized context.

This skill detects when AI agents exploit human trust through social engineering, deceptive guidance, or false assurances. It identifies prompts that induce unsafe actions, request sensitive credentials, or impersonate authority figures. Use this when evaluating agent safety, security advice, or decision-influencing workflows. Skip for static information.

Authorized Android/iOS reverse engineering and security testing: APK/IPA analysis, runtime instrumentation (Frida/Objection), SSL-pinning and jailbreak/root-detection bypass, per OWASP MASTG.

Proactive threat hunting and detection engineering using Sigma/YARA rules, SIEM queries, and ATT&CK mapping for blue-team operations. Includes hypothesis-driven workflows, rule validation, and toolchain guidance.