Skill UI

A comprehensive playbook detailing advanced techniques for attacking Kubernetes clusters. Covers API server access, RBAC privilege escalation, service account token abuse, etcd secrets extraction, Kubelet exploitation, and various container escapes. This guide is essential for security professionals and red teams performing deep security assessments on cloud-native infrastructure.

An expert playbook detailing advanced techniques for pivoting across compromised Linux hosts. Techniques cover SSH agent hijacking, credential harvesting from common system files, key extraction, and abusing internal services via D-Bus and systemd exploitation, crucial for post-exploitation stages.

A comprehensive guide for advanced memory forensics using Volatility 2 and 3. This playbook covers artifact extraction, including hidden process detection, network connections, credential dumping, DLL analysis, and code injection detection (malfind). It is essential for incident response, malware analysis, and reconstructing attack timelines from memory dumps.

A comprehensive playbook detailing NoSQL injection techniques, moving beyond traditional SQLi. Covers deep vulnerabilities in MongoDB, including operator injection, login bypass, blind data extraction using regex, and $where execution. Also includes attacks specific to Redis, CouchDB, and general API parameter pollution.

A comprehensive, advanced playbook for conducting deep network traffic analysis and PCAP forensics. Covers essential skills like PCAP repair, advanced Wireshark filtering (HTTP, DNS, TLS), data extraction (file carving, credential harvesting), and detecting covert channels. It guides users through sophisticated techniques, including TLS decryption workflows and DNS tunneling identification.

This skill provides comprehensive capabilities for working with Microsoft Word documents (.docx). It supports full document lifecycle management, including text extraction (via pandoc), raw XML manipulation, creating new documents, and complex editing. Specialized workflows are available for redlining, handling tracked changes, managing comments, and preserving intricate formatting, making it ideal for professional, academic, and business document processing.

This comprehensive guide covers essential operations for handling PDF documents, including text, table, and metadata extraction using libraries like pdfplumber. It details document creation with reportlab, merging/splitting with pypdf/qpdf, and advanced OCR for scanned PDFs. Ideal for automating complex document workflows and structured data ingestion.

A comprehensive skill for handling PowerPoint (.pptx) files. This includes text extraction, deep content analysis via raw XML access (comments, notes, layouts, themes), and programmatic creation of new presentations from scratch. It guides users through design principles, color theory, and structured document generation workflows.

This skill extracts full transcripts and rich metadata from a single YouTube video URL. It uses yt-dlp to download subtitles, cleans VTT timing markers, and pulls video details (title, channel, date). The output is a structured, queryable Markdown file, ideal for populating a personal knowledge vault and enabling downstream knowledge graph extraction or content repurposing.

This powerful router analyzes complex document types (scanned, medical, table-heavy, etc.) and determines the optimal conversion pipeline (tools, flags, cleanup) to extract data into various formats like Markdown, JSON, or DOCX. It goes beyond simple text extraction by prioritizing the preservation of document structure, relational data, and high fidelity, ensuring the generated output is accurate for downstream machine processing.

LiteParse is a fast, open-source tool for local, layout-aware text extraction from PDFs, Office files, and images. It provides structured JSON output with precise bounding boxes and supports OCR, making it ideal for building robust RAG systems, citation grounding, and multimodal agents. All processing is done locally without needing cloud APIs.

This skill guides the design of robust, production-grade data extraction pipelines, moving beyond brittle one-off scripts. It supports three modes: API-driven web scraping (Firecrawl), traditional local Python extraction (PDF, CSV), and hybrid workflows. Key features include intelligent routing, mandatory data validation, secure key management, and adherence to scraping best practices.