Skill UI

A comprehensive set of architectural patterns for building robust and maintainable HTTP servers using Kotlin Coroutines and the Ktor framework. It covers essential topics including REST routing DSL, plugin configuration (Authentication, CORS, StatusPages), Dependency Injection (Koin), serialization, WebSockets, and integration testing using testApplication.

Build immersive, cinematic, and premium 2.5D interactive websites using advanced scroll storytelling, parallax depth, and text animations. This skill simulates high-end web design effects (like Apple's product pages) using only static assets, CSS, and JavaScript, eliminating the need for WebGL or complex 3D software. Use it for landing pages, product sites, and any section requiring a deep, cinematic feel.

This powerful tool leverages DNSTwist, a comprehensive domain permutation engine, to detect various forms of domain impersonation. It generates thousands of potential lookalike domains (including typosquatting, attribute flaws, and homographs) and performs deep checks on DNS records, web page similarity (ssdeep/pHash), and registration status. It is vital for security analysts and threat hunters to proactively monitor for brand squatting and sophisticated phishing threats targeting an organization.

This guide details advanced techniques for authorized security assessments, focusing on forced browsing. It helps testers discover hidden administrative pages, unprotected APIs, and configuration files by systematically enumerating URLs and challenging application access control mechanisms. Techniques involve using tools like ffuf and Gobuster for comprehensive path and directory discovery.

A comprehensive toolkit designed for cybersecurity professionals to deobfuscate malicious JavaScript code. It reverses complex encoding layers (Base64, Hex, Unicode), eval chains, and control flow obfuscation techniques found in phishing pages, web skimmers, and dropper scripts, revealing the original malicious logic for thorough forensic analysis and threat intelligence gathering.

A comprehensive guide for discovering and exploiting broken link hijacking vulnerabilities. This skill focuses on identifying references to expired domains, decommissioned cloud resources (like S3 buckets), and dead external services. It covers advanced techniques such as subdomain takeover, supply chain security assessment, and resource claiming for authorized penetration testing.

This skill implements an automated system to monitor and alert on vulnerabilities that exceed their defined remediation Service Level Agreements (SLAs). It supports severity-based timelines, complex escalation workflows (e.g., PagerDuty, email), and generates comprehensive compliance reports, ensuring continuous adherence to security best practices.

This tool automates the entire process of compiling a LaTeX source file into a submission-ready PDF. It handles multi-pass compilation, diagnoses common LaTeX errors (e.g., missing packages, undefined references, bibtex syntax errors), and iteratively attempts fixes to ensure the final document is accurate and adheres to specified page limits.

This guide details how to use GoPhish, an open-source framework, to conduct authorized phishing simulations. You will learn the complete lifecycle, from deploying the tool and configuring SMTP profiles, to creating realistic email templates and cloning secure landing pages. The skill culminates in analyzing campaign results to assess organizational security posture and improve employee resilience against social engineering attacks.

This playbook guides Security Operations Center (SOC) analysts through a comprehensive, multi-step process for triaging and prioritizing security incidents. It covers receiving alerts from SIEM/EDR, enriching data using threat intelligence feeds (VirusTotal, AbuseIPDB), classifying the incident type (MITRE ATT&CK mapping), and calculating a severity score based on asset criticality and data sensitivity. The workflow culminates in automating ticket creation and triggering immediate response procedures via tools like PagerDuty.

This skill functions as a Narrative Psychologist, mapping and engineering the full emotional journey a customer must take across any content format (e.g., landing pages, email sequences, sales decks). It systematically designs the emotional progression—from the initial state (e.g., skepticism or anxiety) through controlled tension, relief, and anticipation—to the precise emotional state required for a desired action, ensuring the narrative flow is believable and persuasive.

A specialized cognitive psychology skill designed to engineer highly engaging headlines, subject lines, and titles. It utilizes principles like the curiosity gap, self-relevance, and contrast to create compelling hooks for marketing copy, landing pages, emails, and social media ads. It ensures attention-grabbing power while maintaining ethical guardrails and promise continuity.