Skill UI

This skill provides a comprehensive framework for performing privilege escalation assessments post-initial compromise. It guides testers in identifying paths from low-privilege access to root or SYSTEM-level control on both Linux and Windows operating systems. Techniques covered include abusing SUID binaries, exploiting misconfigured services, leveraging kernel vulnerabilities, and harvesting credentials.

A comprehensive guide for authorized red team engagements, detailing manual enumeration and automated tooling to escalate privileges from a low-level user to root on Linux. Techniques cover exploiting misconfigurations, vulnerable services, kernel flaws, and weak permissions, mapped directly to MITRE ATT&CK framework. Use only in controlled, authorized security testing environments.

A professional-grade 'Living Pipeline' that integrates advanced AI reasoning into the SDLC. It provides autonomous guardrails for system security, cloud cost management (FinOps), and Kubernetes compliance. It audits Linux Kernel patches for memory vulnerabilities, detects cost drifts in Terraform plans, and generates hardened K8s manifests from natural language policies.

A comprehensive guide on implementing advanced security observability using eBPF and Cilium Tetragon. This skill covers real-time tracking of process execution, network connections, and file system access directly in the kernel. Learn how to author TracingPolicy CRDs, utilize kprobe/tracepoint hooks for in-kernel filtering, and enforce runtime security policies (e.g., process killing) on Linux hosts or Kubernetes clusters.

Accelerates CPU-bound Python workflows by translating NumPy, pandas, ML, graph, image, simulation, and IO code into NVIDIA GPU kernels using CuPy, Numba CUDA, Warp, cuDF/cuML/cuGraph, KvikIO, cuSpatial, and RAFT for dramatic speedups.

Walks through systematic Linux privilege escalation, covering enumeration, automation with linpeas/linenum, kernel exploit hunting, sudo/SUID abuse, and exploitation of cron, LD_PRELOAD, and GTFOBins for gaining root access.

This comprehensive guide outlines best practices for writing high-quality, scalable, and maintainable code in .NET/C#. It covers core architectural principles, including SOLID, dependency injection, and design patterns (e.g., Command Handler). Furthermore, it addresses modern challenges such as structured logging, async/await patterns, secure coding, robust testing standards, and advanced AI integration using Semantic Kernel.

This skill provides comprehensive guidance for building and refining applications, plugins, and function-calling flows using the Semantic Kernel framework. It supports multiple languages, including .NET and Python. Guidance emphasizes consulting the latest official documentation, adhering to best practices (like async patterns and strong typing), and correctly handling multi-ecosystem development.

A comprehensive guide for creating, updating, refactoring, and reviewing solutions built on the Microsoft Agent Framework. This skill provides unified best practices for both .NET and Python environments, serving as a modern successor to Semantic Kernel and AutoGen. It emphasizes adherence to the latest official documentation, async patterns, robust error handling, and structured agent/workflow orchestration for complex AI applications.

Accelerate scientific Python code on NVIDIA hardware using CUDA and RAPIDS libraries. Optimizes NumPy, pandas, scikit-learn, and ML workloads for GPU execution. Includes profiling, memory management, and kernel optimization to ensure correctness and performance gains.

A comprehensive methodology for discovering potential software vulnerabilities. It outlines advanced techniques including static analysis, dynamic analysis, fuzzing, taint tracking, and modern attack surface mapping (e.g., kernel, drivers). Ideal for professional code audits, bug bounty hunting, and building robust vulnerability research pipelines.

This comprehensive checklist provides a deep dive into Endpoint Detection and Response (EDR) architecture and monitoring mechanisms. It details advanced evasion techniques, such as direct syscalls, AMSI bypass, kernel patching, and memory manipulation. This skill is essential for red team engagements, penetration testing, and advanced malware research to thoroughly assess and bypass modern security defenses.