Skill UI

A comprehensive framework for applying the six core principles of ethical persuasion (Reciprocity, Commitment, Social Proof, Authority, Liking, Scarcity) to optimize product design, marketing copy, and sales flows. It helps users understand human behavioral heuristics to create genuinely compelling and ethical user experiences, increasing engagement and conversion rates.

A comprehensive skill set for senior transportation managers overseeing a large, multi-modal carrier portfolio. It covers the full lifecycle of carrier engagement, including sourcing, compliance checks (FMCSA SAFER), executing complex RFPs, negotiating granular rate components (linehaul, FSC, accessorials), and establishing performance scorecards. Use this skill to optimize logistics costs, mitigate supply chain risks, and ensure consistent service quality across varied freight types.

Provides an X/Twitter-focused growth engine that audits profiles, researches competitors, engineers viral tweets and threads, and decodes algorithm signals so creators can plan posting strategies and maximize engagement.

This skill manages the strategic distribution of a single core idea across various social media platforms, including X, LinkedIn, Threads, and Bluesky. Instead of simply cross-posting the same content, it uses advanced content adaptation techniques to adjust the tone, format, and focus for each specific platform. This ensures the message remains consistent while optimizing for native platform constraints, preventing duplication and maximizing engagement.

Guides social selling by combining profile optimization, Sales Navigator targeting, and content-to-conversation flows so LinkedIn engagement turns into qualified pipeline meetings without touching technical implementation.

This comprehensive guide details the deployment and hardening of the Havoc C2 framework, a modern post-exploitation Command and Control system. Learn how to establish a production-grade infrastructure, including configuring Teamservers, setting up various listeners (HTTP/HTTPS/SMB), and integrating Nginx redirectors. It provides OPSEC-hardened techniques for authorized red team adversary emulation engagements.

This skill provides comprehensive methods for collecting and synthesizing Open-Source Intelligence (OSINT) regarding threat actors, malicious infrastructure, and attack campaigns. It utilizes public data sources, passive reconnaissance tools (like WHOIS, Certificate Transparency), and specialized platforms (Maltego, Shodan, SpiderFoot) to map adversary context and perform pre-engagement intelligence gathering for authorized red team assessments. Emphasis is placed on passive collection techniques to ensure legality and operational security.

This technique abuses the Microsoft Directory Replication Service Remote Protocol (MS-DRSR) to impersonate a Domain Controller (DC). By exploiting replication rights (e.g., DS-Replication-Get-Changes-All), attackers can dump password hashes for critical accounts, such as KRBTGT and Domain Admins. The extracted hashes are used to forge Golden Tickets, achieving long-term, persistent domain access. This is a critical post-exploitation method used during authorized red team engagements.

Simulates advanced persistent threat (APT) activity across the entire cyber kill chain, from reconnaissance to data exfiltration. It evaluates an organization's detection, prevention, and response capabilities using MITRE ATT&CK-aligned techniques, moving beyond typical vulnerability scanning. Ideal for objective-based assessments and purple teaming.

Utilize BloodHound Community Edition to conduct deep internal Active Directory reconnaissance using graph theory. This skill maps complex relationships, including ACLs, group memberships, and trust links, to visualize potential attack paths. It is crucial in red-teaming engagements to identify the shortest path from a low-privileged foothold to high-value targets like Domain Admins, or to validate security hardening efforts.

This skill guides the creation of a foundational red team engagement plan. It covers defining the scope, establishing detailed Rules of Engagement (ROE), selecting MITRE ATT&CK-aligned threat profiles, and defining operational timelines. It is essential for conducting large-scale, assumed-breach, or objective-based offensive security testing.

Execute deep, stealthy red team exercises that emulate real-world sophisticated adversaries. This process maps attacks to the MITRE ATT&CK framework, testing an organization's entire security posture—including detection, incident response, and containment capabilities (Blue Team). It is designed for simulating full attack lifecycles (initial access, lateral movement, exfiltration) to validate security investments and meet regulatory requirements (TIBER-EU, CBEST). Requires executive authorization and defined Rules of Engagement.