Skill UI

Guides users through advanced network security scanning tasks by offering best-practice workflows, code/config generation, and validation for compliance, penetration testing, and enterprise security scenarios.

Comprehensive CLI reference for penetration testing tools spanning network scanning, exploitation, password cracking, and web testing to speed up authorized security assessments.

Conduct a simulated insider or post-breach internal network penetration test covering discovery, enumeration, credential harvesting, and lateral movement to assess privilege escalation paths and data exposure.

Guides comprehensive pen tests covering discovery, scanning, enumeration, vulnerability validation, controlled exploitation, and reporting to benchmark network security and compliance readiness.

Conducts authorized wireless network penetration tests to evaluate WiFi security through scouting, WPA2/WPA3 handshake capture, rogue APs, evil twin deployment, enterprise credential attacks, and segmentation checks to validate WIDS/WIPS defenses.

Uses Metasploit Framework to detect and exploit critical SMB flaws (EternalBlue, Relay, PrintNightmare) during authorized penetration tests, validating patching and network segmentation while measuring lateral movement risks in Windows environments.

Analyzes Android applications at runtime with Frida, Objection, and ADB to hook sensitive methods, observe decrypted data, bypass anti-debug/root checks, and monitor live network traffic during penetration tests or runtime debugging.

Perform a PTES/OSSTMM-aligned external network penetration test that scans internet-facing assets, validates vulnerabilities via reconnaissance, exploitation, and reporting, and informs remediation before attackers strike.

This tool is designed for security professionals to test for Server-Side Request Forgery (SSRF) vulnerabilities. It systematically probes user-controllable URL parameters to identify access to internal network services, cloud metadata endpoints (AWS/GCP/Azure), and restricted local resources. It supports various payload techniques, including protocol handlers (gopher, file), IP encoding, and DNS rebinding, making it essential for thorough security assessments and penetration testing.

Guides security teams through end-to-end wireless network penetration testing—scanning 802.11 bands, capturing WPA handshakes, cracking credentials, deploying rogue APs, and validating segmentation and client isolation with Aircrack-ng, Hashcat, Bettercap and supporting tools.

A comprehensive guide to advanced network reconnaissance using Nmap. This skill covers multi-stage asset discovery, deep service enumeration, vulnerability scanning via the Nmap Scripting Engine (NSE), and advanced evasion techniques (e.g., fragmentation, decoys). It is designed for authorized penetration testing and thorough assessment of enterprise infrastructure.

Guides configuring HTTP/HTTPS, SNMP, and SMB services plus verification and log review for penetration testing labs using Windows or Linux hosts.