Skill UI

Checklist covering Spring Security best practices for authentication, authorization, validation, CSRF, secrets, headers, rate limiting, dependency scans, and logging in Java Spring Boot services.

Analyzes CORS configurations via the cors-policy-validator plugin to spot misconfigurations, validate headers or files, and report vulnerabilities so developers can secure web apps and APIs from unsafe cross-origin access.

A comprehensive guide to optimizing Vercel deployment performance. This skill covers advanced techniques such as edge caching implementation (using Cache-Control headers), leveraging Incremental Static Regeneration (ISR), minimizing serverless function cold starts, and optimizing bundle size. Use this when facing slow page load times, needing to improve Core Web Vitals, or requiring robust, scalable deployment performance.

This skill guides users through implementing comprehensive security measures for Vercel deployments. It covers best practices for secret management (using sensitive environment variables), configuring critical HTTP security headers (such as CSP and HSTS), protecting preview environments, and enforcing robust access control for API routes and deployment tokens.

This skill provides a comprehensive guide to implementing robust API versioning strategies, supporting methods like URL path, custom headers, and query parameters. It covers building backward compatibility layers, adding standard deprecation notices (e.g., Sunset Header), and utilizing OpenAPI specifications to detect breaking changes, ensuring stable API evolution over time.

A command-line utility designed to search, extract, and analyze data from Burp Suite project files (.burp). It allows users to search request/response headers and bodies using complex regex patterns, extract security audit findings, or gather proxy/site map data. Essential for deep analysis of captured HTTP traffic in web security testing, while providing safeguards against large data overflows.

Analyzes a website's accessibility to major AI crawlers (e.g., GPTBot, ClaudeBot). It checks robots.txt, meta tags, and HTTP headers to generate a complete access map. This helps users optimize their site structure to maximize visibility in AI-generated search results while maintaining appropriate control over data usage.

This tool parses and analyzes Cobalt Strike Malleable C2 profiles, extracting critical network indicators such as HTTP/DNS transforms, URIs, headers, jitter, and sleep cycles. It is essential for reverse-engineering captured profiles or building robust network detection signatures for threat hunting and incident response.

A comprehensive guide and workflow for digital forensics investigators to analyze raw email headers. This tool helps trace the true origin of suspicious emails, verify sender authenticity, and detect advanced spoofing techniques by validating crucial protocols like SPF, DKIM, and DMARC. It covers everything from header parsing to domain infrastructure analysis and IP reputation checks.

A comprehensive toolset for digital forensics investigators, enabling the parsing of proprietary Microsoft Outlook PST and OST files. It extracts critical evidence including full message content, detailed email headers (for message routing/tracing), attachments, and deleted items from the Recoverable Items folder. Essential for e-discovery, legal investigations, and security incident response to reconstruct communication patterns and analyze message metadata.

A comprehensive guide and toolkit for identifying, repairing, and unpacking UPX-packed malware samples. It addresses scenarios where standard automated decompression fails due to modified PE headers or magic bytes, allowing analysts to recover the original executable for deep static analysis and disassembly in tools like Ghidra or IDA.

Analyze email headers to uncover sender origins, routing chains, and authentication results, enabling defenders to validate legitimacy and spot phishing indicators using manual inspection and automation scripts.