Skill UI

A comprehensive guide covering advanced Kerberos attacks against Active Directory environments. Techniques include AS-REP roasting, Kerberoasting, forging golden, silver, diamond, and sapphire tickets, and exploiting delegation abuse. Designed for penetration testers and red teams to simulate sophisticated domain compromise scenarios.

This skill guides the detection and recovery of exposed version-control system (VCS) metadata, including paths for Git, SVN, and Mercurial, as well as common backup and configuration files. It is essential for authorized penetration testing when assessing an application's security posture against information leaks. Techniques include probing specific directories (e.g., /.git/HEAD) and analyzing status codes (e.g., 403 vs 404) to confirm exposure.

This utility serves as a command-line alias for invoking the Claude Code `/pua:kpi` function. It loads necessary configurations (pua-pro) to generate comprehensive Key Performance Indicator (KPI) or performance report cards. It manages configuration files by updating `~/.pua/config.json` while preserving unknown fields and ensuring the directory structure exists.

This skill guides users on creating highly optimized, high-volume content (like directory pages, templates, and comparisons) using data and patterns. It teaches core principles of programmatic SEO, ensuring each page provides unique value, matches search intent, and avoids Google's thin content penalties, enabling scalable growth.

A comprehensive skill to automatically detect, install, and initialize the Terraform CLI based on the operating system. It ensures the required environment is set up (including handling provider downloads and network mirrors) and prepares the working directory for infrastructure deployment. Ideal for initial setup or when receiving 'command not found' errors.

This skill provides comprehensive deal-desk support by performing quantitative scoring and risk assessment for commercial deals. It scores deals across margin, risk, and strategic value, routes discount requests to the correct human approver chain (e.g., Director, CFO, Legal), and flags contract landmines (e.g., uncapped indemnity, MFN) in redlined MSAs. It never auto-approves; every output is a score and a recommendation for a named human sign-off.

This tool indexes local files or directories into a persistent FTS5 knowledge base. This allows subsequent search operations to efficiently retrieve highly relevant, focused snippets from the project source without needing to re-read the raw files every time. It is crucial for managing and searching large, complex codebases or detailed project documentation.

This skill generates a comprehensive, slide-by-slide narrative structure for high-stakes board presentations. It guides users on framing the quarter's story, presenting key financial metrics (KPIs, P&L), strategic updates, and defining clear asks for investors and directors. Ideal for quarterly board meetings, funding rounds, or annual corporate reviews.

This guide details how to establish SAML 2.0 identity federation between on-premises Active Directory (using AD FS or third-party IdP) and Microsoft Entra ID. It covers hybrid identity architectures, configuring federation models (AD FS, PHS, PTA), and implementing the full SAML authentication flow. Essential for extending on-premises authentication authority to cloud resources and maintaining security compliance.

This skill guides users through hardening LDAP directory services against critical security vulnerabilities, such as LDAP injection, credential harvesting, and anonymous binding bypass. It covers implementing robust security controls including LDAPS enforcement, channel binding, and LDAP signing, essential for maintaining compliance and securing identity infrastructure in regulated environments.

This technique abuses the Active Directory's `msDS-KeyCredentialLink` attribute to inject attacker-controlled public keys (Shadow Credentials). After gaining write access (e.g., via BloodHound), the attacker uses tools like pyWhisker or Certipy to append their key. They then authenticate via PKINIT to recover the target's NT hash, achieving complete account takeover without the disruptive step of a password reset. Ideal for stealthy red-teaming engagements.

A powerful offensive suite for authorized red-teaming of Microsoft Entra ID (Azure AD). ROADtools combines ROADrecon for comprehensive directory enumeration (users, groups, policies, apps) and an offline GUI, with roadtx for advanced token acquisition, exchange, and Primary Refresh Token (PRT) abuse. It covers the full scope of cloud identity discovery and token-based attacks against highly regulated tenants.