Skill UI

Automates HIPAA audit helper workflows within Security Advanced, offering guided best practices, production-ready configurations, and compliance validation for penetration testing and threat modeling scenarios.

Guides authorized security testers through the Metasploit Framework workflow, from msfconsole basics and module discovery to exploit configuration, payload choice, and post-exploitation evidence collection for comprehensive assessments.

Guides users through advanced network security scanning tasks by offering best-practice workflows, code/config generation, and validation for compliance, penetration testing, and enterprise security scenarios.

Automates penetration test planning tasks by guiding workflows, validating outputs, and generating production-ready artifacts aligned with compliance and threat-modeling needs.

Provides a comprehensive checklist for planning, scoping, executing, and wrapping up penetration tests, covering objectives, authorization, environment prep, scans, tester selection, methodologies, reporting, and remediation tracking.

Comprehensive CLI reference for penetration testing tools spanning network scanning, exploitation, password cracking, and web testing to speed up authorized security assessments.

Automates web application penetration testing by leveraging the penetration-tester plugin to scan OWASP Top 10 threats, suggest exploitation techniques, and produce actionable vulnerability reports for pentest or vulnerability assessment requests.

A comprehensive, multi-phase workflow designed for conducting deep security audits across modern web applications and APIs. This bundle guides users through the entire security lifecycle, including reconnaissance, vulnerability scanning (SAST/DAST), specific testing for OWASP Top 10 and injection flaws, specialized API fuzzing, full-scope penetration testing, security hardening, and final risk reporting. Ideal for compliance checks and proactive security enhancement.

Automates security policy creation within Security Advanced workflows by offering step-by-step guidance, best-practice templates, and validation of outputs for compliance, penetration testing, and threat modeling use cases.

A specialized skill for conducting comprehensive security audits. It identifies vulnerabilities in code, infrastructure, and dependencies, generating structured reports with severity ratings (CVSS) and detailed remediation guidance. Ideal for SAST scans, penetration testing, DevSecOps pipelines, and compliance checks.

Master systematic methodologies for using Shodan to perform deep reconnaissance during penetration testing. This skill covers querying exposed services, mapping assets, identifying vulnerable systems (CVEs), and utilizing advanced filters for IP ranges, geographical locations, and organizational data. Ideal for security researchers and ethical hackers.

Comprehensive guidance on using Shodan’s web UI, CLI, and API for reconnaissance, exposed-service discovery, screenshot capture, and exporting JSON/CSV data during penetration tests.