Skill UI

An expert tool for generating comprehensive C4 Code-level documentation. It analyzes existing code directories to automatically extract and document critical architectural details, including function signatures, class definitions, method dependencies, and internal data flows. It supports generating various Mermaid diagrams (classDiagram, flowchart) to visualize complex system components, ensuring accurate and maintainable technical documentation.

A comprehensive guide detailing the entire workflow for analyzing embedded firmware. It covers hardware-level extraction methods (UART, JTAG, SPI dump), filesystem analysis (SquashFS, JFFS2), binary reverse engineering using tools like Ghidra, and identifying common vulnerabilities (Buffer Overflow, Command Injection). Ideal for security researchers and embedded systems engineers.

This guide provides a deep dive into migrating existing presentation content (from PowerPoint, Google Slides, Canva, etc.) to the modern, AI-powered format of Gamma. It details a robust, multi-step workflow: content extraction, content cleaning, and batch regeneration using scripting methods. This approach ensures that the core content is preserved while benefiting from Gamma's superior AI formatting capabilities, moving beyond simple file imports and guaranteeing better results than the original source files.

This skill provides a comprehensive, expert guide to the entire reverse engineering lifecycle. It covers advanced techniques for binary analysis, including static analysis (disassembly, metadata extraction, control flow mapping) and dynamic analysis (API hooking, memory tracing). Mastery includes utilizing industry-leading tools such as IDA Pro, Ghidra, radare2, and specialized frameworks like pwntools and angr. The methodology is structured for secure research, CTF challenges, and vulnerability assessment, emphasizing best practices and ethical use.

This skill provides comprehensive tools for documenting and managing model performance on Hugging Face. It supports multiple methods for adding structured evaluation data, including extracting tables from README content, importing benchmark scores via APIs (like Artificial Analysis), and executing high-performance custom evaluations using advanced backends such as vLLM or lighteval. It ensures that all metadata is structured and compatible with model leaderboards and industry standards.

This skill provides methods for reliably extracting typed, validated, and structured data from Large Language Models (LLMs), moving beyond simple text parsing. It covers best practices across major APIs (OpenAI's response_format, Anthropic's tool_use, Google's responseSchema) and local models. Key workflows include defining schemas (Pydantic/Zod), implementing constrained decoding, and building robust retry loops for production-grade data pipelines.

This skill provides a structured methodology and Python implementation for monitoring and analyzing data leak sites (DLS) associated with ransomware groups. It helps security analysts track victim postings, extract threat intelligence on group tactics, assess sector-specific risks, and understand evolving ransomware threat landscapes for proactive defense.

This technique abuses the Microsoft Directory Replication Service Remote Protocol (MS-DRSR) to impersonate a Domain Controller (DC). By exploiting replication rights (e.g., DS-Replication-Get-Changes-All), attackers can dump password hashes for critical accounts, such as KRBTGT and Domain Admins. The extracted hashes are used to forge Golden Tickets, achieving long-term, persistent domain access. This is a critical post-exploitation method used during authorized red team engagements.

This skill provides comprehensive detection methods for credential dumping techniques, a critical post-exploitation phase in cyber attacks. It targets the extraction of sensitive credentials from LSASS memory, SAM registry hives, and NTDS.dit using advanced security visibility. Detection relies on analyzing Sysmon Event ID 10 (ProcessAccess), Windows Security logs, and complex SIEM correlation rules, making it essential for SOC analysts and threat hunters investigating advanced persistent threats (APTs).

This guide details comprehensive detection methods for DCSync attacks (MITRE T1003.006) in Active Directory. Attackers abuse legitimate directory replication protocols to extract sensitive password hashes. Detection relies on auditing Windows Event ID 4662 for unauthorized access attempts to critical Directory Service GUIDs, specifically flagging non-domain-controller accounts attempting replication calls. Essential for threat hunting and incident response.

This skill provides a comprehensive methodology for discovering and exploiting broken link hijacking vulnerabilities. By spidering a target site and extracting all external scripts, domains, and references, the skill checks the DNS and domain registration status. It is crucial for conducting subdomain takeover testing, supply-chain security reviews of third-party resources, and advanced bug bounty hunting.

A comprehensive guide for digital forensics and incident response, detailing methods to extract and analyze critical web activity data. This includes history, cookies, cache, downloads, and bookmarks from major browsers like Chrome, Firefox, and Edge. Techniques involve utilizing SQLite querying and specialized tools on forensic images or live systems to establish a user's digital timeline.