Skill UI

This comprehensive guide addresses common technical and business logic errors encountered when integrating with the Juicebox API. It covers HTTP status codes (e.g., 401, 403, 429), including authentication failures, quota exhaustion, rate limiting, data validation issues, and analysis timeouts. The resource provides detailed causes, specific fixes, and best practices for building reliable and robust integrations into recruiting and research workflows.

A command-line utility designed to search, extract, and analyze data from Burp Suite project files (.burp). It allows users to search request/response headers and bodies using complex regex patterns, extract security audit findings, or gather proxy/site map data. Essential for deep analysis of captured HTTP traffic in web security testing, while providing safeguards against large data overflows.

Analyzes a website's accessibility to major AI crawlers (e.g., GPTBot, ClaudeBot). It checks robots.txt, meta tags, and HTTP headers to generate a complete access map. This helps users optimize their site structure to maximize visibility in AI-generated search results while maintaining appropriate control over data usage.

Parses Cobalt Strike malleable C2 profiles via pyMalleableC2 to pull beacon configs, HTTP communication patterns, sleep/jitter settings, and combines JARM scans for C2 detection when hunting suspected infrastructure or building IDS signatures.

A comprehensive guide to utilizing Cuckoo Sandbox for deep dynamic analysis of suspicious malware samples. This workflow walks through sample submission, real-time monitoring, and programmatic extraction of behavioral indicators, including process activity, network communications (DNS, HTTP), file system changes, and registry modifications, essential for threat intelligence and IOC extraction.

Deploy Zeek for passive network analysis to generate structured logs (DNS, HTTP, etc.). This tool detects behavioral anomalies like DNS tunneling or beaconing, complementing traditional signature-based IDS tools. It is ideal for threat hunting and incident response, feeding rich protocol metadata into SIEM platforms.

This skill provides comprehensive methods to detect Cobalt Strike beacon command-and-control (C2) traffic. It uses advanced network forensics techniques, including analyzing default TLS certificates (e.g., serial 8BB00EE), JA3/JA3S fingerprints, HTTP malleable profiles, and beacon interval jitter, leveraging Zeek logs, Suricata rules, and Python PCAP analysis. It is essential for threat hunters and SOC analysts investigating sophisticated C2 communications.

Zeek is a powerful, open-source network analysis framework that functions as a passive security monitor. It generates highly detailed, structured logs (e.g., HTTP, DNS, TLS) from raw network traffic, allowing for deep metadata extraction. This skill guides users through deploying Zeek, writing custom detection scripts, and integrating the resulting rich security logs with SIEM platforms for advanced threat detection and forensic investigations.

This skill provides comprehensive interaction with the DeerFlow AI agent platform via its robust HTTP API. It is designed for managing complex, multi-step AI workflows, including deep academic research, code execution, web browsing, and file analysis. Users can initiate and continue conversation threads, manage agent memory, upload documents (PDF, etc.), and delegate complex research tasks to the autonomous agent system.

This comprehensive guide serves as a complete error decoder for the OneNote Graph API. It analyzes major HTTP status codes (400, 403, 404, 429, 500, 502, 507) and provides root cause analysis, diagnostic steps, and code fixes for common issues. It specifically addresses critical failure modes like deprecated authentication methods and silent 200 OK failures, helping developers debug complex API integrations in production.

This expert playbook details advanced techniques for bypassing SSL pinning mechanisms (Certificate, Public Key, SPKI) on mobile applications running on Android and iOS. It provides practical methods using tools like Frida and Objection, covering various frameworks (Flutter, React Native, Xamarin) and multiple pinning types to enable the interception and analysis of encrypted HTTPS traffic.

A comprehensive, advanced playbook for conducting deep network traffic analysis and PCAP forensics. Covers essential skills like PCAP repair, advanced Wireshark filtering (HTTP, DNS, TLS), data extraction (file carving, credential harvesting), and detecting covert channels. It guides users through sophisticated techniques, including TLS decryption workflows and DNS tunneling identification.