Skill UI

A comprehensive guide detailing advanced techniques for attacking Microsoft Active Directory (AD) environments. It covers the entire red team lifecycle, including reconnaissance (BloodHound, PowerView), credential harvesting (Mimikatz, AS-REP Roasting), and critical attacks such as Kerberos exploitation, Pass-the-Ticket/Hash, and NTLM relay attacks. Essential for penetration testing and defensive validation.

Python CLI trio for multi-touch attribution, funnel conversion diagnostics, and ROI/ROAS/CPA benchmarking to optimize marketing campaigns without external dependencies.

Guides marketers through planning, executing, and scaling paid campaigns across Google Ads, Meta, LinkedIn, and other platforms with strategy, audience targeting, budgeting, and creative/optimization best practices.

Provides a catalog of Linux and Windows post-exploitation privilege escalation techniques, covering sudo/capability abuse, scheduled tasks, token impersonation, AD kerberoasting, credential harvesting, and tool recommendations for red teamers.

This skill provides comprehensive expertise in paid advertising across major platforms like Google Ads, Meta, LinkedIn, and TikTok. It guides users through the entire campaign lifecycle, from defining core objectives and identifying ideal audiences (lookalikes, retargeting) to crafting high-converting ad copy (PAS, BAB). Learn best practices for campaign structure, budget allocation, and advanced optimization techniques based on key metrics like ROAS, CPA, and CTR.

Builds AI-powered paid media creative across Meta, Google, TikTok, YouTube, and LinkedIn by combining native platform tools and generative models to automate asset creation, fatigue management, and performance testing while driving ROAS.

This guide details the methodology for conducting internal network penetration tests, simulating an attacker operating from an assumed breach state. It covers initial network reconnaissance, Active Directory enumeration, advanced credential harvesting techniques (e.g., Kerberoasting, Pass-the-Hash), and lateral movement exploitation to determine the full blast radius of a potential breach. Essential for comprehensive security auditing.

Implements Microsoft's Enhanced Security Admin Environment (ESAE) tiered administration model for Active Directory. This skill guides the hardening of AD privileged access architecture by establishing strict separation between Tier 0, Tier 1, and Tier 2 accounts. It is essential for mitigating advanced threats like pass-the-hash, Kerberoasting, and ensuring compliance with industry standards (NIST 800-53).

A comprehensive guide for detecting Kerberoasting attacks by monitoring for anomalous Kerberos TGS requests (Event ID 4769). This technique targets service accounts with Service Principal Names (SPNs), which are requested offline by attackers to crack service account passwords. Use this during threat hunting or incident response to scope MITRE T1558 credential access activities in Active Directory environments.

Executes authorized, advanced attack simulations against Active Directory environments to identify critical misconfigurations, weak credentials, and exploitable trust relationships. Utilizing industry tools like BloodHound, Mimikatz, and Impacket, this process simulates complex attacks such as Kerberoasting, Golden Ticket forging, and domain compromise path analysis, helping organizations validate their security posture against real-world threats.

Kerberoasting is a credential access attack (T1558.003) targeting Active Directory service accounts with Service Principal Names (SPNs). This skill demonstrates using Impacket to request Kerberos TGS tickets for these accounts. The resulting RC4 or AES-encrypted tickets are then cracked offline using tools like Hashcat or John the Ripper, allowing attackers to recover service account credentials for lateral movement during authorized penetration testing or red-team engagements.

This skill provides a comprehensive guide to hardening BGP using the Resource Public Key Infrastructure (RPKI). It covers the full lifecycle, including creating Route Origin Authorizations (ROAs) at Regional Internet Registries (RIRs), deploying RPKI validator software (e.g., Routinator), and configuring Route Origin Validation (ROV) on enterprise routers like Cisco IOS-XE and Juniper Junos. Use this when establishing critical network security controls to prevent route hijacking and leaks.