Skill UI

A specialized skill for advanced security analysis, particularly in CTF scenarios. This tool guides users through analyzing live iOS runtime behavior, including Objective-C/Swift method tracing, inspecting Keychain data, bypassing SSL pinning, and recovering accepted network requests. It is designed to be used after a primary orchestration tool has established the sandbox environment, focusing on the details of trust boundaries.

This advanced skill is designed for security research and CTF environments to trace subtle divergences in request handling across multiple network hops (proxies, gateways, backend servers). It focuses on identifying vulnerabilities stemming from differential interpretation of headers, path normalization, transfer framing (CL/TE), and host derivation, crucial for detecting request smuggling and parsing inconsistencies.

A comprehensive methodology for deep security testing of both Android (APK) and iOS (IPA) applications. This guide covers the entire workflow, from initial information gathering and static analysis (decompilation, code structure analysis) to advanced dynamic instrumentation, network interception, and bypassing modern security measures like SSL Pinning, Root/Jailbreak detection, and anti-debugging.

A comprehensive framework for authorized security assessments of Operational Technology (OT) and Industrial Control Systems (ICS). It emphasizes a 'passive-first' approach, covering Purdue model zoning, analyzing industrial protocols (Modbus, DNP3, etc.), and identifying exposure points on SCADA/DCS environments. The methodology strictly avoids disruptive write operations on PLCs, prioritizing read-only validation and safe network analysis for physical safety.

This command inspects the native code execution sandbox environment. It reports on platform compatibility (e.g., bubblewrap, Seatbelt), active security configurations (auto-allow status, filesystem policies, network allowlists), and details recent security violations. Use it to audit the execution environment before running autonomous workflows.

This comprehensive guide outlines a structured methodology for conducting authorized security testing on desktop thick clients (Win/macOS/Linux). It covers critical attack vectors, including local storage analysis, Inter-Process Communication (IPC) vulnerabilities, network traffic interception, client-side trust boundaries, and advanced reverse engineering techniques using tools like IDA and Ghidra.

This guide outlines a structured methodology for authorized wireless security assessments. It covers essential techniques such as Wi-Fi data capture, WPA/WPA2 handshake analysis, and rogue Access Point detection. It is designed for assessing corporate network security, verifying wireless isolation, and providing professional penetration testing recommendations, strictly adhering to legal scope and authorization.