Skill UI

NetExec is a comprehensive, multi-protocol tool designed for authorized penetration testing and red-teaming. It functions as a 'swiss-army knife' for assessing Windows, Active Directory, and Linux environments. Key capabilities include validating credentials, performing password spraying, enumerating network shares, executing commands across multiple protocols (SMB, WinRM, LDAP, MSSQL, SSH), and dumping critical credentials (SAM, LSA, NTDS). It directly supports techniques for lateral movement and post-exploitation activities.

Flox is a declarative, Nix-based environment manager designed to create perfectly reproducible development environments. It handles system-level dependencies (like compilers, databases, and native libraries) and ensures that complex toolchains across multiple languages (Python, Node.js, Go, etc.) function identically across macOS and Linux. Ideal for solving 'works on my machine' issues and onboarding new team members instantly.

Pi-hole is a powerful, network-wide DNS ad blocker that runs on Linux hosts (like Raspberry Pi). It intercepts all DNS queries on your local network, blocking advertisements, trackers, and known malware domains before they reach your devices. This guide covers setup via Docker or bare metal, configuring network DNS, managing blocklists, and enabling secure DNS-over-HTTPS (DoH) for enhanced privacy.

A comprehensive guide to setting up a fast and secure WireGuard VPN server for remote access to your home network (homelab). Learn keypair generation, advanced Linux firewall (iptables) rules, and how to manage different tunneling modes (split vs. full tunnel) for optimal performance.

A comprehensive guide for diagnosing physical and logical network failures, such as CRC errors, packet drops, duplex mismatches, and flapping. It teaches users how to analyze interface counters and trends across routers, switches, and Linux hosts to pinpoint the root cause of connectivity issues.

This specialized skill is designed for deep forensic analysis of compromised Linux environments, specifically tracing the sequence of credential usage (tokens, keys, service accounts) that leads to lateral movement or privilege escalation. It helps map the decisive path from a recovered artifact to an accepted replay mechanism, identifying the exact trust edge or capability abuse responsible for the host-to-host pivot.

This comprehensive guide outlines a structured methodology for conducting authorized security testing on desktop thick clients (Win/macOS/Linux). It covers critical attack vectors, including local storage analysis, Inter-Process Communication (IPC) vulnerabilities, network traffic interception, client-side trust boundaries, and advanced reverse engineering techniques using tools like IDA and Ghidra.

Run a comprehensive, read-only health check on your computer and receive a scored chat summary with prioritized recommendations for disk space, memory, battery, startup items, updates, and resource hogs. Works on macOS, Windows, and Linux for tune-ups and slowdown troubleshooting.

Comprehensive guide for exporting and building Godot projects for distribution across multiple platforms (Windows, macOS, Linux, Web, Android). Learn how to configure export presets, run headless exports for CI/CD, and handle complex platform requirements like cross-origin isolation and dedicated server setups.

A comprehensive guide and workflow for publishing and managing game builds on itch.io using the official 'butler' command-line interface. This skill covers everything from setting up the project page and logging in to pushing portable builds to specific channels (Windows, macOS, Linux, HTML5). It ensures proper versioning, handles differential uploads, and guides developers through best practices for deployment.

A comprehensive guide for red team operators detailing techniques to manipulate, clear, or destroy digital evidence on Windows and Linux systems. Covers clearing Windows Event Logs (wevtutil), manipulating Linux system logs, timestamp forgery, file system scrubbing, and memory artifact removal. Essential for understanding advanced evasion methods and achieving operational security during authorized engagements.

A comprehensive guide detailing systematic techniques for breaking out of container isolation (Docker, Podman, containerd) into the underlying host operating system. Covers exploiting misconfigurations, abusing privileged modes, manipulating Linux capabilities (CAP_SYS_ADMIN), utilizing namespaces (nsenter), and exploiting known container runtimes CVEs. Essential for penetration testing and security red teaming engagements.