Skill UI

Guides structured cybersecurity assessments of electric power grid infrastructure, covering EMS/SCADA, substations, synchrophasor networks, and NERC CIP compliance to uncover protocol gaps and readiness for advanced threats like Industroyer.

Guide for executing a structured ransomware incident response covering detection, containment, eradication, backup recovery, and post-recovery validation, ensuring teams with IR plans and segmented networks can act swiftly.

This tool is designed for security professionals to test for Server-Side Request Forgery (SSRF) vulnerabilities. It systematically probes user-controllable URL parameters to identify access to internal network services, cloud metadata endpoints (AWS/GCP/Azure), and restricted local resources. It supports various payload techniques, including protocol handlers (gopher, file), IP encoding, and DNS rebinding, making it essential for thorough security assessments and penetration testing.

Performs authenticated and unauthenticated Nessus scans to find vulnerabilities, misconfigurations, default credentials, missing patches, and compliance issues while correlating CVEs and CVSS to prioritize remediation across networks, servers, and applications.

Guides security teams through end-to-end wireless network penetration testing—scanning 802.11 bands, capturing WPA handshakes, cracking credentials, deploying rogue APs, and validating segmentation and client isolation with Aircrack-ng, Hashcat, Bettercap and supporting tools.

Use Kismet’s passive RF monitoring to map 802.11 networks, detect rogue access points and weak encryption, and gather client behavior data for comprehensive wireless security assessments and incident response validation.

Guides building Progressive Web Apps with manifests, service workers, caching strategies, offline fallbacks, and install prompt handling so web projects feel native, survive unreliable networks, and support add-to-home-screen workflows.

Guide to configure and run Nessus scans across servers, workstations, and network devices, covering policy creation, credentialed and unauthenticated checks, REST automation, and result analysis for continual vulnerability management.

A comprehensive guide to advanced network reconnaissance using Nmap. This skill covers multi-stage asset discovery, deep service enumeration, vulnerability scanning via the Nmap Scripting Engine (NSE), and advanced evasion techniques (e.g., fragmentation, decoys). It is designed for authorized penetration testing and thorough assessment of enterprise infrastructure.

Hardens process historian servers (OSIsoft PI, Honeywell PHD, GE Proficy, AVEVA Historian) in OT networks by covering Purdue-tier segmentation, secure interfaces, DMZ data replication, injection prevention, and integrity checks for safety, compliance, and optimization scenarios.

Hardens managed EKS, AKS, and GKE clusters by enforcing Pod Security Standards, network policies, RBAC scoping, image admission controls, workload identity, and runtime monitoring for cloud-specific IAM integrations.

A comprehensive guide for building, refactoring, and ensuring the architectural integrity of SwiftUI macOS menubar utilities. It enforces best practices by strictly separating application concerns—such as state management (Store), networking (Client), and presentation (View)—and standardizing the build and launch process using Tuist manifests and dedicated run scripts. This ensures the resulting application is highly testable, maintainable, and architecturally sound.