Skill UI

A comprehensive guide detailing offensive techniques for attacking Microsoft Active Directory environments. Covers the full red team kill chain: from initial reconnaissance (using BloodHound/PowerView) and credential harvesting (Kerberoasting, AS-REP Roasting) to advanced lateral movement and privilege escalation via Kerberos ticket forging (Golden/Silver Tickets). Essential for penetration testers and authorized red team operations.

Automates alertmanager rule configuration tasks in DevOps contexts, supplying best practices, production-ready code, validation, and step-by-step guidance for Kubernetes/Terraform monitoring setups.

Helps analyze current CPU, memory, storage, and network utilization to forecast future infrastructure needs, identify bottlenecks, and recommend scaling tactics with cost context for proactive capacity management.

Helps analyze current CPU, memory, storage, and network utilization to forecast future infrastructure needs, identify bottlenecks, and recommend scaling tactics with cost context for proactive capacity management.

Analyzes application network latency, identifies serial requests, and recommends batching, pooling, and timeout tweaks to improve request performance.

Automates the creation of Ansible playbooks in advanced DevOps workflows by triggering whenever users mention the generator and offering best-practice guidance, production-ready code, and validation for IaC, Kubernetes, Terraform, and CI/CD stacks.

Ansible Role Creator automates guidance, code generation, and validation for crafting production-ready Ansible roles within advanced DevOps workflows, covering Kubernetes, Terraform, Helm, monitoring, and IaC best practices.

Ansible Role Creator automates guidance, code generation, and validation for crafting production-ready Ansible roles within advanced DevOps workflows, covering Kubernetes, Terraform, Helm, monitoring, and IaC best practices.

This skill provides advanced, dual-use security techniques for analyzing protected binaries, including malware and proprietary software. It is strictly intended for authorized security professionals, such as those conducting penetration testing, malware analysis, or academic security research (CTFs). Users must exercise extreme caution, confirm explicit written authorization, and ensure all activities remain within defined legal and ethical scopes to prevent misuse and legal violations.

This skill provides advanced, dual-use security techniques for analyzing protected binaries, including malware and proprietary software. It is strictly intended for authorized security professionals, such as those conducting penetration testing, malware analysis, or academic security research (CTFs). Users must exercise extreme caution, confirm explicit written authorization, and ensure all activities remain within defined legal and ethical scopes to prevent misuse and legal violations.

Provides step-by-step API fuzzing and exploitation tactics for REST, SOAP, and GraphQL during bug bounty or penetration tests, covering reconnaissance, auth bypass, IDOR, injection, and GraphQL-specific attacks.

Guides bug bounty hunters through API fuzzing and penetration testing, covering REST, SOAP, and GraphQL recon, authentication bypass, IDOR methods, injections, method abuse, GraphQL attacks, and payload delivery techniques.