Skill UI

A comprehensive guide covering advanced offensive techniques for AWS cloud environments. Techniques include detailed IAM enumeration, privilege escalation paths, SSRF exploitation targeting metadata endpoints (IMDSv1/v2), S3 bucket exploitation, and Lambda function code extraction. Essential for security professionals and red team operations conducting authorized cloud vulnerability assessments.

A comprehensive skill for conducting offensive security assessments across major cloud providers, including Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP). It guides users through reconnaissance, authentication testing, resource enumeration, privilege escalation, and persistence techniques, strictly for authorized security engagements.

This skill guides the creation of a foundational red team engagement plan. It covers defining the scope, establishing detailed Rules of Engagement (ROE), selecting MITRE ATT&CK-aligned threat profiles, and defining operational timelines. It is essential for conducting large-scale, assumed-breach, or objective-based offensive security testing.

Provides offensive security testing methodology, tooling guidance, and workflows for scanning web apps, APIs, dependencies, secrets, and infrastructure to uncover vulnerabilities before attackers exploit them.

This guide details the full lifecycle of advanced red team engagements, simulating sophisticated, real-world adversaries. It covers crucial planning elements, including Scope definition, Rules of Engagement (ROE), and deconfliction procedures. Techniques include building resilient, tiered C2 infrastructure, implementing strict Operational Security (OPSEC), advanced evasion methods (EDR/AMSI bypass), and comprehensive mapping using MITRE ATT&CK. Applicable for testing mature defender capabilities against assumed-breach scenarios.

A comprehensive offensive checklist for assessing the security and robustness of AI and Large Language Model (LLM) applications. It covers advanced adversarial techniques such as prompt injection, jailbreaking, model extraction, data poisoning, and analyzing system vulnerabilities across components. Essential for red-teaming and security assessment.

This curriculum covers foundational exploitation techniques essential for binary security analysis. Users will learn to control program execution flow, including overwriting EIP/RIP, constructing ROP chains, implementing ret2libc, and shellcode injection. It provides practical, hands-on exercises on stack overflows and heap manipulation in a controlled Linux environment, establishing the core primitives needed before tackling modern mitigation bypasses.

This comprehensive checklist provides a deep dive into Endpoint Detection and Response (EDR) architecture and monitoring mechanisms. It details advanced evasion techniques, such as direct syscalls, AMSI bypass, kernel patching, and memory manipulation. This skill is essential for red team engagements, penetration testing, and advanced malware research to thoroughly assess and bypass modern security defenses.

This comprehensive curriculum provides a detailed roadmap for mastering exploit development and vulnerability research. It covers fundamental techniques like fuzzy testing using AFL++, and progresses through advanced topics such as in-process fuzzing with Google FuzzTest. It is ideal for structuring professional security training programs or onboarding new research engineers.

This guide provides a comprehensive operational checklist for exploit development. It covers the entire lifecycle, from initial bug identification and vulnerability analysis (e.g., stack overflow, UAF) to payload development, mitigation bypass (ASLR, DEP, CFG), and reliable weaponization. Essential for security researchers developing Proof-of-Concept exploits and establishing a professional exploit development environment.

A speed-optimized, comprehensive checklist for rapid security assessments. This guide covers full-cycle penetration testing methodologies, including deep reconnaissance (WAF bypass, CDN mapping), access control testing (MFA, JWT, API keys), and session management vulnerabilities. Ideal for time-boxed engagements, CTF competition, or initial service triage.

A comprehensive checklist and methodology for penetration testing file upload endpoints. Covers critical vulnerabilities such as MIME type bypass, extension bypass, magic byte manipulation, path traversal, and stored XSS. Essential for web application security assessment and bug bounty hunting, guiding testers through basic testing to advanced exploitation techniques like Null Byte injection and double extensions.