Skill UI

Centralizes proven red team methodologies into an automated reconnaissance and vulnerability discovery workflow that sequences asset discovery, live host validation, fingerprinting, content hunting, and exploit surface analysis for bug bounty and defensive assessments.

Provides red team workflows combining subdomain enumeration, live host discovery, technology fingerprinting, XSS hunting, API fuzzing, and automated recon scripting to support bug bounty hunters and security researchers.

A comprehensive guide to production-ready error tracking using Sentry SDK in TypeScript and Python. Learn how to implement structured error context via scopes, manage user journeys with breadcrumbs, filter out noise and PII using beforeSend/beforeBreadcrumb hooks, and use custom fingerprinting for accurate issue grouping. Essential for robust observability.

Provides red team workflows combining subdomain enumeration, live host discovery, technology fingerprinting, XSS hunting, API fuzzing, and automated recon scripting to support bug bounty hunters and security researchers.

RDKit delivers a Python-based cheminformatics toolkit for parsing SMILES/SDF, computing descriptors, generating 2D/3D coordinates, fingerprinting, searching substructures, managing reactions, and visualizing molecules, ideal for drug discovery and computational chemistry workflows.

Analyzes behavioral reports from security sandboxes (Cuckoo, AnyRun) to detect advanced anti-analysis and evasion techniques. It specifically identifies indicators such as timing checks, hypervisor artifact queries, user interaction patterns, and environment fingerprinting. This tool is essential for threat hunting, enhancing detection rules, and conducting deep malware triage.

This skill provides advanced techniques and code examples for monitoring, mapping, and pivoting across adversary-controlled infrastructure. It leverages Passive DNS, Certificate Transparency logs, Shodan/Censys scanning, and network fingerprinting (JARM/JA3S) to discover C2 servers, phishing domains, and exploitable assets over time, which is crucial for advanced security operations and threat intelligence gathering.

This comprehensive guide demonstrates how to scrape live webpages using Bright Data's Web Unlocker proxy. It details how to bypass advanced anti-scraping mechanisms, such as CAPTCHAs and fingerprinting, automatically. Users are provided with full code examples in both Node.js and Python, showing methods for scraping via the proxy endpoint and through the dedicated REST API. Ideal for starting new scraping projects or integrating Bright Data into existing workflows.

This comprehensive checklist details advanced methods for bypassing Web Application Firewalls (WAFs) during security assessments. Techniques covered include encoding bypass (URL, Unicode, double encoding), HTTP header manipulation, IP rotation, payload obfuscation, and fingerprinting specific WAF vendors (e.g., Cloudflare, Akamai). It is essential for penetration testers evaluating the robustness of web defenses.

A comprehensive playbook detailing advanced techniques for exploiting insecure deserialization flaws across Java, PHP, and Python. It covers traffic fingerprinting, identifying specific gadget chains (e.g., Commons Collections, Shiro), and utilizing tools like ysoserial to achieve Remote Code Execution (RCE) and privilege escalation.

A comprehensive playbook for professional bug bounty hunting and penetration testing. This guide covers systematic reconnaissance, from initial asset discovery (subdomains, IPs) and technology fingerprinting to advanced endpoint and source code mining. Learn the structured methodology used by top hunters to maximize coverage and find high-severity vulnerabilities.

This router serves as the initial guide for comprehensive security assessments on new targets or unknown attack surfaces. It helps users map the scope, discover hidden assets, perform detailed technology fingerprinting, build endpoint inventories, and strategically plan the optimal testing path before diving into specific vulnerability checks (e.g., API, Auth, Injection).