Skill UI

A comprehensive guide for authorized red team engagements, covering the end-to-end lifecycle of advanced phishing campaigns. Learn techniques for infrastructure setup (domain aging, SPF/DKIM/DMARC), payload delivery (macro weapons, HTML smuggling), and bypassing email security gateways (MFA bypass, domain spoofing). Essential knowledge for penetration testers and security professionals.

Perform authorized email security reviews including phishing analysis, SPF/DKIM/DMARC authentication checks, BEC pattern investigation, and mailbox token abuse research. Provides workflows for header analysis, IOC extraction, and security awareness design.

A security testing skill that maps nine account takeover paths, including password reset poisoning, token leakage, JWT manipulation, and email change flaws, with proof and false-positive guidance for authorized assessments.

Manages work email, groups, and tool accounts for every employee. Tracks account type, aliases, licences, security settings like 2FA and password policy, and access-review dates. Generates CSV, SQL, JSON, or Notion templates for provisioning and offboarding.