Skill UI

This comprehensive guide outlines methods to identify and exploit specific IPv6 vulnerabilities, including SLAAC spoofing, Router Advertisement (RA) manipulation, and Neighbor Discovery Protocol (NDP) attacks. It is designed strictly for authorized penetration testing to assess dual-stack security controls, detect unauthorized tunnels (like Teredo or 6to4), and validate network defenses against IPv6-specific threats. Always obtain explicit written authorization before use.

A comprehensive guide for authorized penetration testing, demonstrating how to identify and exploit critical vulnerabilities in the SMB protocol (e.g., EternalBlue, PrintNightmare). This skill covers network enumeration, lateral movement techniques (Pass-the-Hash, SMB Relay), and post-exploitation activities using Metasploit and Impacket tools to assess enterprise network security posture.

This guide details the implementation of the three core email authentication protocols: SPF, DKIM, and DMARC. By configuring these DNS records, users can prevent domain spoofing, ensure message integrity, and define strict policies (quarantine/reject) for unauthenticated emails, drastically reducing exposure to phishing and spoofing attacks.

This skill guides the deployment and configuration of the Dragos Platform for specialized Operational Technology (OT) and Industrial Control System (ICS) network monitoring. It leverages industrial protocol parsers and threat intelligence to detect sophisticated threats (e.g., VOLTZITE). It is essential for establishing OT Security Operations Centers (SOCs) or integrating dedicated ICS monitoring capabilities into enterprise SIEM solutions.

This skill implements a simplified version of the Signal Protocol, focusing on robust end-to-end encryption (E2EE) for messaging applications. It covers critical cryptographic components including X3DH key agreement, the Double Ratchet algorithm for continuous key management, and AES-256-GCM for message encryption. The implementation ensures forward secrecy, meaning that compromising a current key does not reveal past messages. Use this when designing, building, or evaluating the security architecture of a messaging service to guarantee that only communicating parties can read the messages.

This comprehensive guide details how to implement Single Sign-On (SSO) for Google Workspace using the SAML 2.0 protocol. It guides administrators through connecting a third-party Identity Provider (IdP) like Okta or Azure AD to centralize authentication, enforce MFA, and manage access policies across the organization.

This comprehensive guide details the deployment and configuration of Tofino industrial firewalls to secure critical SCADA and PLC systems. It utilizes Deep Packet Inspection (DPI) capabilities for core OT protocols (Modbus, EtherNet/IP, S7comm), ensuring strict access control and enforcing IEC 62443 zone boundaries. Ideal for segmenting control networks and providing compensating controls for unpatchable legacy equipment.

A Python-powered engine implementing structured OT incident response procedures based on the SANS PICERL lifecycle. It classifies incident severity (safety, process, access, recon) and coordinates cross-functional teams (IT SOC, OT Engineering, Operations) to manage critical threats like ransomware in ICS/SCADA environments. Essential for establishing robust safety protocols and ensuring compliance with IEC 62443 and NERC CIP standards.

A guide and implementation pattern for deploying Nozomi Networks Guardian sensors. This solution enables passive, non-disruptive monitoring of Operational Technology (OT) and Industrial Control Systems (ICS). It provides critical asset visibility, behavioral anomaly detection, protocol-aware monitoring, and vulnerability assessment, making it essential for building robust OT Security Operations Centers (SOCs) and ensuring compliance without risking live operations.

Learn how to build and share structured threat intelligence objects, including indicators, malware, and campaigns, using the stix2 Python library. This guide details publishing data via the TAXII 2.1 protocol, making it essential for developing threat intelligence platforms, automating IOC exchange, and creating machine-readable reports for ISAC/ISAO communities.

This skill uses the python-gvm library to programmatically deploy and operate Greenbone/OpenVAS vulnerability management. It connects via the Greenbone Management Protocol (GMP) to create scan targets, execute vulnerability scans, and parse complex XML reports into structured, actionable JSON findings. Ideal for automating security assessments, compliance checks, and detailed vulnerability reporting.

This skill implements advanced cryptographic techniques, including the Schnorr identification protocol and a simplified Zero-Knowledge Password Proof (ZKPP). It enables a prover to authenticate by demonstrating knowledge of a secret without ever revealing the underlying password or private key to the server. Ideal for building secure, password-less systems or environments where server compliance mandates that user credentials are never stored or transmitted in plain form.