Skill UI

Guides using SQLMap to automate SQL injection discovery, enumerate databases/tables/columns, dump data, and collect hashes across MySQL/PostgreSQL/MSSQL/Oracle during authorized penetration tests.

Biopython provides Python APIs for sequence manipulation, database access, BLAST automation, structural bioinformatics, and phylogenetics, making it ideal for scripting custom pipelines and batch processing in computational molecular biology workflows.

A toolkit for phylogenetic tree manipulation, event detection, NCBI taxonomy integration, and publication-quality visualization, streamlining phylogenomics workflows and gene family analysis.

Query the NHGRI-EBI GWAS Catalog for SNP-trait associations, fetch study metadata, variant and trait details, and download summary statistics via the web or REST APIs to support genetic epidemiology and polygenic risk modeling.

A comprehensive toolkit for reconstructing and analyzing the evolutionary history of biological sequences (genes, proteins, genomes). The standard workflow includes multiple sequence alignment using MAFFT, robust maximum likelihood tree inference with IQ-TREE 2 and FastTree, and advanced visualization/manipulation using ETE3. This skill is essential for studies in viral phylodynamics, microbial genomics, protein family evolution, and molecular clock dating.

This skill provides deep analytical insights into aggregated family health data. It assesses genetic predisposition, identifies patterns of familial diseases, calculates weighted risk scores based on historical data, and generates personalized, actionable prevention recommendations. Ideal for generating comprehensive family health reports and trend analysis.

This comprehensive guide details the use of FFUF, a fast web fuzzer written in Go. It is designed for advanced security penetration testing, providing techniques for content discovery, subdomain enumeration, parameter fuzzing, and POST data testing. Learn to master the FUZZ keyword, advanced filtering, and auto-calibration to efficiently identify hidden paths and potential vulnerabilities in web applications.

A powerful toolkit utilizing Objection and Frida for authorized mobile penetration testing. It enables deep runtime analysis of iOS applications, allowing users to inspect sensitive data in the keychain, filesystem, and memory. Key capabilities include bypassing client-side protections such as SSL pinning and jailbreak detection without requiring source code access.

Utilize the Scapy library in Python to perform deep packet inspection, crafting, sending, and sniffing of various network protocols (TCP, UDP, ICMP, DNS). This skill is essential for analyzing pcap files, implementing advanced security techniques like SYN scans, extracting protocol fields, and detecting network anomalies such as fragmentation or tunneling indicators. Ideal for security researchers, SOC analysts, and penetration testers.

A comprehensive utility designed to assess the security posture of modern APIs, including REST, GraphQL, and gRPC. It strictly follows the OWASP API Security Top 10 framework, testing for critical vulnerabilities such as Broken Object/Function Level Authorization (BOLA/BFLA), SQL/NoSQL injection flaws, and weaknesses in authentication mechanisms like JWT manipulation. Essential for security engineers and penetration testers validating complex microservice architectures and API gateways.

Guide for assessing AWS, Azure, and GCP environments with tools such as Pacu, ScoutSuite, and Prowler to uncover IAM weaknesses, exposed storage, insecure serverless functions, and cloud-native attack chains.

A comprehensive guide covering methodologies for conducting authorized penetration testing across major cloud platforms, including AWS, Azure, and GCP. It details the shared responsibility model, techniques for exploiting IAM misconfigurations, testing for SSRF vulnerabilities to cloud metadata services, and utilizing industry tools like Pacu and ScoutSuite. Findings are mapped to the MITRE ATT&CK Cloud matrix for robust reporting.