Skill UI

This skill helps identify gRPC security vulnerabilities during penetration testing. It includes fingerprinting gRPC servers, enumerating services via reflection, testing authentication bypasses, and checking for DoS risks like HTTP/2 Rapid Reset. Requires explicit authorization for offensive use.

Offensive security skill for hunting MFA and 2FA bypass flaws: workflow skipping, OTP replay, response tampering, prefix-oracle guessing, and race conditions on verification endpoints. Requires written authorization.

Offensive security skill for hunting SQL injection flaws under written authorization. Covers injection confirmation, UNION column enumeration, reflected-column discovery, and data dumping, plus high-value targets like search, filter, and report endpoints.

End-to-end iOS security assessment pipeline covering app inventory, IPA acquisition, static analysis, and secret extraction. Requires explicit authorization for offensive testing and bug bounty scopes.

This skill guides users to configure and test common network services like HTTP, HTTPS, SNMP, and SMB within a controlled penetration testing lab environment. It covers service enumeration, log analysis, and security testing procedures. Users will learn to set up web servers, secure connections, and file shares while practicing defensive and offensive security techniques on properly configured target systems.

This skill performs external reconnaissance on software supply chain attack surfaces. It identifies public GitHub organizations, internal package names in JS/Python bundles, and Docker images. It checks for dependency confusion vulnerabilities by verifying if internal package names are available on public registries. Requires explicit authorization for offensive security assessments.

Enables authorized offensive security assessments on Windows Active Directory environments. Covers Kerberos abuse, AD CS escalation, BloodHound path analysis, NTLM relay, and domain privilege escalation techniques. Requires explicit written permission and strict authorization gates before execution. Designed for educational purposes or authorized security assessments only.