Skill UI

This skill demonstrates how to exploit JWT algorithm confusion vulnerabilities. It targets APIs that do not strictly enforce the cryptographic algorithm (alg) specified in the token header. Techniques covered include downgrading from asymmetric algorithms (RS256) to symmetric ones (HS256) using the public key as the secret, performing alg:none bypasses, and manipulating key identifiers (kid, jku, x5u) to achieve authentication bypass and token forgery.

This comprehensive guide details advanced techniques for detecting and exploiting NoSQL injection vulnerabilities across various databases like MongoDB and CouchDB. It covers critical attack vectors, including authentication bypass using operators ($ne, $gt), blind data extraction via $regex, and executing arbitrary server-side JavaScript through the $where clause. Essential reading for penetration testers and security researchers assessing NoSQL backends.

This skill details the exploitation of the critical Zerologon vulnerability (CVE-2020-1472) found in the Microsoft Netlogon Remote Protocol. It allows an unauthenticated attacker to compromise a domain controller by resetting its machine account password. The guide covers the complete attack chain, including initial exploitation, credential dumping via DCSync, and subsequent privilege escalation in Active Directory environments. Used exclusively for authorized red teaming and security testing.

This tool leverages the Rekall memory forensics framework to conduct deep analysis of memory dumps. It is designed to detect sophisticated threats such as process hollowing, injected code via VAD anomalies, hidden operating system processes, and rootkit presence. It applies key forensic plugins (pslist, malfind, vadinfo) essential for rigorous incident response and malware analysis.

This skill provides advanced threat hunting capabilities to detect NTLM relay attacks within Active Directory environments. It analyzes critical Windows Security Event 4624 logs, specifically focusing on logon type 3 using NTLMSSP authentication. The detection logic identifies suspicious patterns, including IP-to-hostname mismatches, rapid multi-host authentications, and lack of SMB signing enforcement, helping SOC analysts pinpoint unauthorized credential access attempts.

A detailed methodology for proactive threat hunting focused on identifying deep-seated persistence mechanisms within Windows operating systems. This guide covers advanced techniques such as monitoring Run keys, analyzing Winlogon modifications, detecting IFEO injection, and identifying COM object hijacking. It is crucial for incident response, purple teaming, and ensuring system integrity against advanced persistent threats (APTs).

This comprehensive skill automates the entire process of generating novel, robust, and benchmark-grounded research ideas in robotics and embodied AI. It guides users from a broad initial concept to concrete, actionable project proposals by chaining rigorous literature surveys, novelty verification, and critical reviews. The workflow enforces robotics constraints, prioritizing simulation-first, falsifiable, and feasible real-world applications.

This skill provides a comprehensive guide on implementing AES-256-GCM, a robust symmetric block cipher, for protecting sensitive data at rest. It covers best practices including secure key derivation (using PBKDF2 and Argon2id), proper management of initialization vectors (IVs) and nonces, and utilizing authenticated encryption to ensure data integrity and detect tampering.

This guide details the implementation of robust API abuse detection mechanisms. It covers advanced rate limiting techniques, such as the Token Bucket and Sliding Window algorithms, to defend APIs against DDoS attacks, brute force attempts, and credential stuffing. It emphasizes using distributed stores like Redis for accurate, scalable, and adaptive security controls in an API gateway context.

This skill covers implementing robust API rate limiting and throttling controls using advanced algorithms like token bucket and sliding window. It teaches how to protect backend systems against attacks such as brute force, credential stuffing, and resource exhaustion. Key components include configuring limits per user, per IP, and per endpoint, utilizing Redis for distributed counting, and implementing proper HTTP 429 responses for effective abuse prevention.

This guide details how to implement multi-layered API threat protection using Google Apigee. It covers critical security policies including JSON/XML content validation, OAuth 2.0 enforcement, SpikeArrest rate limiting, and advanced regex patterns to defend against OWASP Top 10 threats. Ideal for establishing robust API security controls and meeting compliance requirements.

Amazon Macie is a fully managed data security service that automatically discovers, classifies, and protects sensitive data (PII, financial records, credentials) stored in Amazon S3. It uses advanced machine learning and pattern matching to identify compliance risks and enforce data governance policies. Ideal for organizations needing automated data discovery for regulatory compliance and improving overall cloud security posture.