Skill UI

Conducts PTES-based network penetration tests covering reconnaissance, scanning, enumeration, vulnerability identification, and controlled exploitation to validate internal/external infrastructure, firewall segmentation, and detection tooling before deployment or to satisfy compliance audits.

Automates API testing for excessive data exposure by comparing documented schemas with actual responses, scanning for leaked PII or internal fields, and verifying whether UI filtering conceals sensitive outputs; ideal for pentesters assessing microservices, mobile APIs, or GraphQL endpoints.

Walk through SSRF detection by probing metadata endpoints, internal services, and protocol handlers via controllable URL inputs, analyzing responses for disclosure, and producing vulnerability reports for authorized penetration tests.