Skill UI

This skill demonstrates how to craft and inject custom, malformed, or spoofed network packets using tools like Scapy and hping3. It is designed for authorized cybersecurity assessments to rigorously test firewall rules, Intrusion Detection/Prevention Systems (IDS/IPS) signatures, anti-spoofing controls, and overall network stack resilience against protocol anomalies and fragmentation attacks. Use only in controlled, authorized environments.

This guide details comprehensive physical security penetration testing techniques, essential for red teaming engagements. It covers methods such as tailgating, badge cloning (RFID), lock bypassing, and deploying rogue network devices (e.g., Pineapple, LAN Turtle). It provides practical toolkits and MITRE ATT&CK mapping to evaluate an organization's physical and digital control weaknesses.

This skill provides comprehensive cybersecurity assessments for critical electric power infrastructure, covering EMS, SCADA, and substation automation systems. It is crucial for verifying NERC CIP compliance, analyzing IEC 61850 protocols, and securing synchrophasor (PMU) networks against advanced threats like Industroyer. Use it for regulatory audits and operational security reviews.

Provides a structured, comprehensive playbook for managing high-impact ransomware incidents. It guides the response team through initial detection, immediate network containment, detailed damage assessment, recovery decision making (including legal and financial considerations), and secure system restoration. Essential for cybersecurity teams facing active encryption attacks.

This guide provides a comprehensive workflow for configuring SSL/TLS inspection on network security devices. It covers deploying root CA certificates across various operating systems (Windows, macOS, Linux), setting up forwarding proxies, and configuring next-generation firewalls to decrypt, inspect, and re-encrypt encrypted HTTPS traffic for advanced threat detection and compliance.

A comprehensive tool for detecting Server-Side Request Forgery (SSRF) vulnerabilities. It probes cloud metadata endpoints (AWS, GCP, Azure), internal network services, and utilizes various protocol handlers (file://, gopher://) and bypass techniques (DNS rebinding, IP encoding) to assess application security posture during penetration testing or security auditing.

A comprehensive guide to conducting security assessments on thick client (desktop) applications. This skill details techniques ranging from static analysis (using tools like dnSpy, IDA Pro) to dynamic analysis (process monitoring with Procmon, network interception via Burp Suite). It covers finding hardcoded credentials, identifying insecure local storage, mitigating DLL hijacking, and analyzing memory manipulation within local applications.

A comprehensive guide and workflow demonstrating how to use YARA rules for proactive threat hunting. This method helps detect unknown malware, suspicious patterns, and Indicators of Compromise (IOCs) across filesystems, memory dumps, and network artifacts, making it essential for incident response and security analysis.

A comprehensive tool designed to simulate advanced Layer 2 network attacks, including VLAN hopping, switch spoofing (DTP attacks), and double tagging. This skill is critical for authorized penetration testing environments to validate the effectiveness of VLAN segmentation, analyze 802.1Q trunking robustness, and ensure switch port security configurations are correctly implemented against Layer 2 bypass attacks.

This comprehensive guide details the process of capturing WPA/WPA2 handshakes and performing offline dictionary and brute-force password cracking. It utilizes industry-standard tools like aircrack-ng and hashcat to assess the strength of wireless network security during authorized penetration tests. It covers everything from interface preparation to final report generation.

This comprehensive guide details the end-to-end process of conducting wireless security assessments. It covers passive reconnaissance, capturing WPA/WPA2 handshakes, cracking keys using Aircrack-ng and Hashcat, simulating Evil Twin attacks, detecting rogue access points, and testing network segmentation. It is essential for organizations validating their WiFi infrastructure security.

A comprehensive guide detailing how to conduct passive wireless security assessments using Kismet. This skill covers identifying rogue access points, detecting weak encryption (WEP, TKIP), mapping hidden SSIDs, and analyzing raw 802.11 frame types. It is essential for professional network auditing, incident response, and penetration testing in complex wireless environments.