Skill UI

A comprehensive guide covering advanced offensive methodologies for data exfiltration. Techniques include abusing DNS (dnscat2, iodine), tunneling over HTTPS/CDN, utilizing ICMP, and exploiting cloud storage services. This knowledge is critical for authorized red team engagements and post-exploitation simulations, mapping directly to MITRE ATT&CK tactics like T1048 and T1041.

A deep-dive methodology for authorized penetration testing targeting dependency confusion and namespace resolution vulnerabilities across major package ecosystems (npm, PyPI, NuGet, Maven, etc.). This skill details advanced reconnaissance techniques, from analyzing lock files and source maps to exploiting error messages, alongside safe Proof-of-Concept (PoC) creation using DNS canaries for discovery during penetration engagements.

A comprehensive guide covering the full attack lifecycle in Kubernetes. Techniques include service account token theft, RBAC misconfiguration exploitation, kubelet API abuse, pod escape, and cloud metadata compromise across major cloud platforms (AWS, GCP, Azure). Essential for security assessment and penetration testing of cloud-native environments.

A practical methodology for turning a known vulnerability into a stable working remote exploit. Covers stack overflow, heap exploitation, and Linux kernel pwn, addressing real-world gaps between local CTF success and reliable remote execution: libc version mismatches, heap spray timing, SMEP/SMAP/KASLR, stack alignment, and network buffering. Uses pwntools with GEF/pwndbg, ROPgadget/Ropper, one_gadget, libc-database, and qemu-system.

Comprehensive reference for NetExec (nxc), a network exploitation and post-exploitation tool for Active Directory environments. Covers all protocols (SMB, LDAP, WinRM, etc.), authentication methods, password spraying, credential dumping, lateral movement, and module usage with practical command examples.

Comprehensive techniques for testing REST, SOAP, and GraphQL APIs during bug bounty hunting and penetration testing. Covers vulnerability discovery, authentication bypass, IDOR exploitation, injection attacks, and API-specific vectors.

This skill provides comprehensive techniques for penetrating AWS cloud environments, covering IAM enumeration, privilege escalation, SSRF attacks, S3 exploitation, and Lambda code extraction. It supports red team operations and security assessments with tools like Pacu and Prowler. Requires AWS CLI and Python knowledge.

Master the full penetration testing lifecycle: reconnaissance, scanning, vulnerability analysis, exploitation and reporting. Covers tools like Nmap, Nikto, theHarvester, OSINT techniques, OWASP web testing and professional report deliverables for authorized security assessments only.

Firmware penetration testing following the OWASP FSTM nine-stage flow: extraction, EMBA automation, Firmadyne/QEMU emulation, AFL++ fuzzing, and hands-on exploitation in authorized labs.

A rigorous framework designed to audit GitHub Actions workflows for exploitable security vulnerabilities. This skill focuses strictly on real-world attack patterns, requiring every identified finding to include a concrete exploitation scenario (Entry Point, Payload, Impact). Ideal for securing CI/CD pipelines against external attackers.

A security skill for identifying cloud and infrastructure misconfigurations such as exposed storage buckets, metadata endpoints, and admin panels. Includes techniques for S3, EC2, Jenkins, and CloudWatch RUM exploitation, requiring explicit authorization for offensive testing.

This skill acts as a loader for the /hunt orchestrator, facilitating authorized security assessments. It enforces strict scope boundaries and requires explicit written authorization before execution. The tool includes baseline checks to avoid false positives and fingerprinting capabilities to identify technology stacks like Next.js or cloud providers. It focuses on generating reproducible findings for remediation rather than exploitation.