Skill UI

This skill automates the complex process of resubmitting an already polished academic paper to a different conference or journal. It is designed for scenarios where the core content, experiments, and bibliography must remain untouched, but the paper needs micro-edits to accommodate new venue constraints, page limits, or prior reviewer feedback. It ensures the new submission is generated as a separate, sibling directory to maintain the integrity of prior submissions.

A comprehensive playbook detailing advanced techniques for exploiting misconfigured Active Directory Access Control Lists (ACLs). It covers BloodHound enumeration, abusing dangerous ACE types (GenericAll, WriteDACL), conducting DCSync attacks, leveraging shadow credentials, and exploiting GPO/LAPS weaknesses for privilege escalation and lateral movement in a deep dive for security professionals.

A comprehensive playbook detailing advanced attack techniques against Active Directory Certificate Services (AD CS). It covers exploiting misconfigured templates (ESC1-ESC13), performing NTLM relay attacks, and achieving privilege escalation via CA officer abuse. This guide is essential for offensive security practitioners conducting penetration testing simulations.

A comprehensive guide covering advanced Kerberos attacks against Active Directory environments. Techniques include AS-REP roasting, Kerberoasting, forging golden, silver, diamond, and sapphire tickets, and exploiting delegation abuse. Designed for penetration testers and red teams to simulate sophisticated domain compromise scenarios.

This utility serves as a command-line alias for invoking the Claude Code `/pua:kpi` function. It loads necessary configurations (pua-pro) to generate comprehensive Key Performance Indicator (KPI) or performance report cards. It manages configuration files by updating `~/.pua/config.json` while preserving unknown fields and ensuring the directory structure exists.

This skill guides users on creating highly optimized, high-volume content (like directory pages, templates, and comparisons) using data and patterns. It teaches core principles of programmatic SEO, ensuring each page provides unique value, matches search intent, and avoids Google's thin content penalties, enabling scalable growth.

A comprehensive skill to automatically detect, install, and initialize the Terraform CLI based on the operating system. It ensures the required environment is set up (including handling provider downloads and network mirrors) and prepares the working directory for infrastructure deployment. Ideal for initial setup or when receiving 'command not found' errors.

This skill provides comprehensive tools and methodologies for working with the Brain Imaging Data Structure (BIDS) standard. It is essential for organizing, validating, querying, and converting complex multi-modal neuroscience and biomedical datasets (including MRI, EEG, MEG, PET, etc.). Use this when setting up BIDS-compliant directory structures, ensuring data integrity before publication, or converting raw DICOM scans into standardized formats.

This skill guides the architecture and implementation of SAML 2.0 identity federation between on-premises Active Directory and Microsoft Entra ID (Azure AD). It covers establishing seamless Single Sign-On (SSO) capabilities, eliminating the need for separate credentials and ensuring secure, cross-domain authentication for cloud applications.

This skill guides the comprehensive hardening of LDAP directory services. It addresses common vulnerabilities such as LDAP injection, anonymous binding, and credential harvesting. Users can enforce strong security controls, including LDAPS, channel binding, and granular access control lists (ACLs). It is essential when establishing robust identity access management (IAM) architecture or meeting stringent compliance requirements like NIST standards.

This technique exploits the Active Directory attribute `msDS-KeyCredentialLink` by injecting attacker-controlled public keys (Shadow Credentials). Using tools like pyWhisker and Certipy, the attacker forces the target account to register a new key. Subsequently, by leveraging PKINIT (Public Key Cryptography for Initial Authentication in Kerberos), the attacker can obtain a service ticket and recover the target's NT hash, achieving a stealthy, password-less, complete account takeover.

ROADtools is a comprehensive offensive toolkit for Microsoft Entra ID (Azure AD). It consists of ROADrecon for offline directory enumeration (users, groups, roles, policies) and roadtx for advanced token acquisition and exchange. It is designed for authorized red-teaming and penetration testing to discover attack paths and pivot tokens across various Microsoft resources.