Skill UI

Guides capturing WPA/WPA2 handshakes with monitor-mode adapters, then using aircrack-ng, hashcat, and curated dictionaries to assess passphrase strength during authorized wireless security assessments and document the findings and cleanup.

Use Eric Zimmerman’s EZ Tools suite with KAPE orchestrating MFTECmd, PECmd, RECmd and related utilities to parse registries, MFT, prefetch, logs and jump lists for structured Windows forensic timelines.

Guides security teams through end-to-end wireless network penetration testing—scanning 802.11 bands, capturing WPA handshakes, cracking credentials, deploying rogue APs, and validating segmentation and client isolation with Aircrack-ng, Hashcat, Bettercap and supporting tools.

Use Kismet’s passive RF monitoring to map 802.11 networks, detect rogue access points and weak encryption, and gather client behavior data for comprehensive wireless security assessments and incident response validation.

Develop precise YARA detection rules by extracting unique strings, imports, and byte patterns from PE samples, organizing meta/strings/condition sections, and tuning logic to minimize false positives during threat hunting and incident response.

This skill transforms vague research ideas or fuzzy technical approaches into structured, elegant, and highly concrete method plans, suitable for academic papers or complex projects. It operates through an iterative, multi-phase review cycle, anchoring the original problem while forcing the development of the minimal, most impactful contribution. Ideal for researchers who need to refine a breakthrough idea into an implementation-ready proposal, simulating the rigorous process of top-tier academic review.

This end-to-end workflow automates the transition from a vague research direction to a structured, actionable proposal. It first refines the core method thesis and dominant contribution (using research-refine), and then automatically generates a detailed, claim-driven experiment roadmap and comprehensive pipeline summary. Ideal for researchers needing to transform initial concepts into a complete, executable paper proposal and experimental plan.

Guides analysts through reverse engineering Rust-compiled malware with IDA Pro and Ghidra, covering non-null-terminated strings, dependency extraction, and Rust-specific control flow to inform testing and detection efforts.

Guides idiomatic Rust ownership, error handling, traits, and concurrency patterns so teams can build safe, maintainable, and performant applications while reviewing or refactoring existing crates.

This guide details how to test web applications and APIs that send emails for Email Header Injection vulnerabilities. It covers techniques like CRLF injection to manipulate email headers (e.g., adding unauthorized CC/BCC fields, modifying the sender 'From' address, or overriding the content type). Use cases include auditing contact forms, password reset features, and general email endpoints to prevent spam relay, spoofing, and data interception.

Performs targeted security assessments of JSON Web Token implementations, probing algorithm confusion, claim tampering, brute-force secrets, and misuse during penetration tests of APIs, SSO, and microservice authentication flows.

CLI interface for AgentHub message board that lets coordinators and agents list channels, read posts, post updates, and reply to threads using markdown-formatted posts organized by channels.