Skill UI

This guide details how to use GoPhish, an open-source framework, to conduct authorized phishing simulations. You will learn the complete lifecycle, from deploying the tool and configuring SMTP profiles, to creating realistic email templates and cloning secure landing pages. The skill culminates in analyzing campaign results to assess organizational security posture and improve employee resilience against social engineering attacks.

This skill provides a comprehensive automation solution for conducting red team phishing simulations using the Python gophish library. It streamlines the entire campaign lifecycle, including creating sophisticated email templates with tracking pixels, configuring SMTP profiles, importing user groups from CSV, launching targeted attacks, and generating detailed reports on open rates, click-through rates, and credential submission statistics for robust security awareness assessments.

A comprehensive guide detailing how to detect and exploit second-order SQL injection vulnerabilities. This technique targets scenarios where malicious input is stored in a database (e.g., user profiles, comments) and subsequently executed in an unsafe SQL query during a completely different application operation, bypassing initial sanitation checks.

A comprehensive guide to performing digital forensics on SQLite databases. This skill covers recovering deleted records from freelists, analyzing Write-Ahead Log (WAL) files, and examining the internal B-tree structure to extract crucial evidence from sources like browser history and messaging apps. Essential for incident response and security auditing.

A comprehensive tool for detecting Server-Side Request Forgery (SSRF) vulnerabilities. It probes cloud metadata endpoints (AWS, GCP, Azure), internal network services, and utilizes various protocol handlers (file://, gopher://) and bypass techniques (DNS rebinding, IP encoding) to assess application security posture during penetration testing or security auditing.

A comprehensive guide for performing static analysis of Windows Portable Executable (PE) files using tools like PEStudio and scripting libraries. This technique examines file headers, calculates section entropy, identifies suspicious API calls (e.g., process injection, persistence), and extracts obfuscated strings and Indicators of Compromise (IoCs) without executing the sample, making it a crucial step in malware triage and reverse engineering.

This comprehensive guide details a multi-step workflow for detecting and extracting covert data hidden within images, audio, and video files. It covers initial metadata analysis, running advanced steganalysis tools (like zsteg, binwalk, stegoveritas), and performing low-level analysis such as Least Significant Bit (LSB) analysis to uncover hidden communication channels used in digital forensics and cybersecurity investigations.

A comprehensive guide and workflow demonstrating how to use YARA rules for proactive threat hunting. This method helps detect unknown malware, suspicious patterns, and Indicators of Compromise (IOCs) across filesystems, memory dumps, and network artifacts, making it essential for incident response and security analysis.

Nikto is a powerful open-source web server and web application scanner designed for comprehensive vulnerability assessment. It tests against over 7,000 potentially dangerous files, checks for outdated server software (over 1,250 versions), and identifies common vulnerabilities including XSS, SQL injection, misconfigurations, and weak SSL/TLS settings. It is essential for penetration testing and rigorous security auditing.

Leverage Eric Zimmerman's EZ Tools suite for comprehensive Windows forensic artifact analysis. This guide details how to parse critical system data, including the Master File Table (MFT), registry hives, prefetch files, and event logs. Essential for digital forensics investigators and incident responders conducting deep system analysis.

This skill teaches the comprehensive process of developing precise YARA rules for malware detection. It covers techniques such as identifying unique byte patterns, analyzing strings, and inspecting PE file headers to create robust signatures. Ideal for security analysts performing threat hunting, incident response, and security auditing.

Develops comprehensive profiles for Advanced Persistent Threat (APT) groups, criminal organizations, and hacktivist collectivities. This tool aggregates TTP documentation, campaign data, and attribution indicators from major intelligence sources (MITRE ATT&CK, Mandiant, CrowdStrike) to help organizations update threat models, prioritize defensive controls, and prepare executive briefings on sector-specific risks.