Skill UI

Guides users through advanced network security scanning tasks by offering best-practice workflows, code/config generation, and validation for compliance, penetration testing, and enterprise security scenarios.

Comprehensive CLI reference for penetration testing tools spanning network scanning, exploitation, password cracking, and web testing to speed up authorized security assessments.

Automates web application penetration testing by leveraging the penetration-tester plugin to scan OWASP Top 10 threats, suggest exploitation techniques, and produce actionable vulnerability reports for pentest or vulnerability assessment requests.

A comprehensive, multi-phase workflow designed for conducting deep security audits across modern web applications and APIs. This bundle guides users through the entire security lifecycle, including reconnaissance, vulnerability scanning (SAST/DAST), specific testing for OWASP Top 10 and injection flaws, specialized API fuzzing, full-scope penetration testing, security hardening, and final risk reporting. Ideal for compliance checks and proactive security enhancement.

Automates security policy creation within Security Advanced workflows by offering step-by-step guidance, best-practice templates, and validation of outputs for compliance, penetration testing, and threat modeling use cases.

A specialized skill for conducting comprehensive security audits. It identifies vulnerabilities in code, infrastructure, and dependencies, generating structured reports with severity ratings (CVSS) and detailed remediation guidance. Ideal for SAST scans, penetration testing, DevSecOps pipelines, and compliance checks.

Master systematic methodologies for using Shodan to perform deep reconnaissance during penetration testing. This skill covers querying exposed services, mapping assets, identifying vulnerable systems (CVEs), and utilizing advanced filters for IP ranges, geographical locations, and organizational data. Ideal for security researchers and ethical hackers.

Comprehensive guidance on using Shodan’s web UI, CLI, and API for reconnaissance, exposed-service discovery, screenshot capture, and exporting JSON/CSV data during penetration tests.

Performs authorized SMTP penetration testing to discover open relays, user enumeration vectors, authentication weaknesses, and misconfigurations, then documents findings, relay status, and remediation steps.

Guides using SQLMap to automate SQL injection discovery, enumerate databases/tables/columns, dump data, and collect hashes across MySQL/PostgreSQL/MSSQL/Oracle during authorized penetration tests.

Guides analysts through automated SQL injection discovery and exploitation with SQLMap, covering enumeration, table/column mapping, data dumping, and advanced targeting across MySQL, PostgreSQL, MSSQL, Oracle, and other databases during authorized penetration tests.

Guides SSH service security assessments from discovery, enumeration, credential attacks and key testing to tunneling, vulnerability exploitation, and reporting deliverables.