Skill UI

Performs authorized clickjacking attack tests by checking frame headers, embedding targets in iframes, and crafting proof-of-concept overlays to verify whether sensitive actions can be hijacked during penetration testing.

Provides a workflow for authorized penetration testing across AWS, Azure, and GCP to discover IAM, storage, serverless, and compute weaknesses, leveraging Pacu, ScoutSuite, Prowler, and cloud-native tools.

Guides authorized AWS penetration testing with Pacu, covering IAM enumeration, privilege escalation scanning, data access checks, and detection validation for cloud red-team and compliance exercises.

Simulates CSRF attacks during authorized penetration tests to exercise state-changing endpoints, evaluate anti-CSRF tokens, SameSite cookies, and header checks, then craft PoCs via Burp Suite for remediation insight.

Analyzes Android applications at runtime with Frida, Objection, and ADB to hook sensitive methods, observe decrypted data, bypass anti-debug/root checks, and monitor live network traffic during penetration tests or runtime debugging.

Perform a PTES/OSSTMM-aligned external network penetration test that scans internet-facing assets, validates vulnerabilities via reconnaissance, exploitation, and reporting, and informs remediation before attackers strike.

Use GCPBucketBrute alongside gcloud IAM inspection to enumerate storage buckets, evaluate IAM bindings, and hunt privilege escalation paths during GCP security assessments.

Performs GraphQL introspection attacks to extract complete API schemas, map sensitive operations, and validate defenses against query depth abuse and nested DoS, enabling authorized penetration testers to understand the attack surface before exploiting GraphQL-specific vulnerabilities.

Describes how to use Hashcat for authorized hash cracking, covering attack modes, custom rules, hash identification, and reporting to validate password strength during penetration tests and audits.

Guides security teams through hands-on Kubernetes penetration testing—covering reconnaissance, KPI scanning (kube-hunter, Kubescape, kube-bench), RBAC exploitation, secret extraction, and compliance checks to validate cluster resilience.

Conduct authorized physical penetration testing to evaluate facility security controls, including tailgating, badge cloning, lock bypasses, and rogue device deployment as part of red team assessments.

This skill provides a comprehensive methodology for simulating privilege escalation attacks on compromised Linux and Windows environments. It guides the user through identifying vectors—including SUID abuse, misconfigured services, kernel vulnerabilities, cron job exploitation, and credential harvesting—to elevate initial low-privilege access to root or SYSTEM control. It is crucial for deep-dive penetration testing and assessing system security hardening.