Skill UI

A comprehensive guide detailing the entire workflow for analyzing embedded firmware. It covers hardware-level extraction methods (UART, JTAG, SPI dump), filesystem analysis (SquashFS, JFFS2), binary reverse engineering using tools like Ghidra, and identifying common vulnerabilities (Buffer Overflow, Command Injection). Ideal for security researchers and embedded systems engineers.

This comprehensive guide outlines security best practices for utilizing Vast.ai's cloud environment. It covers secure API key management, hardening SSH access to GPU instances, implementing proper data cleanup before instance destruction, and adhering to robust network security protocols. Use this when setting up, auditing, or deploying sensitive AI/ML workloads on shared cloud hardware.

This skill guides the configuration and usage of Hardware Security Modules (HSMs) for robust cryptographic key management. Utilizing the industry-standard PKCS#11 interface, it covers key generation, signing, encryption, and key management directly on hardened physical or soft devices. It is essential for applications requiring the highest level of key protection, ensuring that private keys never leave the secure hardware boundary.

This skill provides comprehensive functionality for integrating and interacting with Hardware Security Modules (HSMs) via the industry-standard PKCS#11 interface using python-pkcs11. It supports key generation, signing, encryption, and verification operations across various platforms, including SoftHSM2, AWS CloudHSM, and YubiHSM2. It is essential for implementing robust, tamper-resistant key management systems and validating compliance against standards like FIPS 140-2/3.

This tool provides comprehensive security assessments for the entire IoT ecosystem, including physical hardware, embedded firmware, network communications, and cloud APIs. Testers can perform deep dives using hardware debugging (UART/JTAG), firmware extraction and reverse engineering, analyzing protocols (MQTT, CoAP, BLE), and simulating cloud-to-device attacks to identify vulnerabilities across all layers of the smart device stack.

A comprehensive guide for implementing hardware-level confidential computing using AWS Nitro Enclaves. This process involves creating secure enclave images (EIFs), performing cryptographic attestation validation against the Nitro PKI, and configuring AWS KMS policies. It ensures that sensitive data (like PII or PHI) remains isolated from the parent EC2 instance, guaranteeing security even if the host system is compromised.

A comprehensive guide for building a FIDO2/WebAuthn relying party server using python-fido2. This skill covers the entire lifecycle of passwordless authentication, including secure credential registration (enrollment of hardware keys like YubiKey and resident passkeys) and robust authentication ceremonies. It is essential for migrating traditional password-based systems to phishing-resistant Multi-Factor Authentication (MFA).

A hands-on methodology for testing IoT and embedded devices, covering hardware reconnaissance, firmware extraction and analysis, bootloader access, runtime exploitation, wireless protocol attacks, companion app review, and cloud API abuse.

CHIPSEC is an open-source framework designed to assess the low-level security configuration of x86 platform firmware and hardware. It verifies critical security controls such as SPI flash write protection, BIOS locks, SMM/SMRR configuration, and Secure Boot variable integrity. Users can run automated tests, dump SPI flash memories for forensics, and detect potential firmware implants that persist below the operating system layer.

This guide outlines the methodology for conducting hardware security research on embedded systems. It covers physical interface analysis (UART, JTAG, SWD), debug pad triage, secure boot evaluation, and offline firmware extraction. It emphasizes systematic, non-destructive testing protocols and responsible handling of physical devices.

This skill enables expert analysis of embedded systems and IoT firmware. It covers hardware reverse engineering, extracting file systems, identifying vulnerabilities like hardcoded credentials, and binary analysis using tools like Binwalk and Ghidra. Used for security assessments and educational purposes with strict authorization.

This skill covers authorized hardware and embedded interface security research, including UART/JTAG discovery, debug-pad triage, secure-boot overview, and offline firmware analysis. It requires physical access and basic hardware tooling for security assessments on devices you own or are authorized to test.