Skill UI

A comprehensive guide and set of patterns for optimizing build processes using Bazel in large-scale monorepositories. Covers configuring WORKSPACE, managing remote caching/execution, defining custom rules (Python, TypeScript), and best practices for maintaining build performance and consistency across massive codebases.

This infrastructure provides a robust solution for running powerful AI agents in remote, sandboxed environments. It overcomes the limitations of local execution by ensuring unlimited concurrency, consistent environments, and collaborative features. Use this to build complex background coding agents, multi-client interfaces (e.g., Slack, Web), or scale agent workloads far beyond local machine constraints.

A comprehensive guide for authorized penetration testers on identifying and exploiting insecure deserialization vulnerabilities across multiple languages (Java, PHP, Python, .NET). Covers techniques for generating payloads using tools like ysoserial and phpggc, and testing various application components such as cookies, HTTP parameters, and message queues to achieve potential Remote Code Execution (RCE).

Detailed guide on exploiting the critical MS17-010 (EternalBlue) vulnerability in SMBv1 protocol. This technique allows for remote code execution (RCE) on unpatched Windows systems. Primarily used in authorized red teaming, penetration testing, and advanced security analysis to simulate real-world attacks and assess network defense posture.

A comprehensive skill for detecting and exploiting JavaScript prototype pollution vulnerabilities in both client-side and server-side applications. It demonstrates advanced property injection techniques to achieve critical security outcomes, including Cross-Site Scripting (XSS), Remote Code Execution (RCE), and authentication/authorization bypass, especially in Node.js environments and JSON merging scenarios.

A comprehensive guide and set of payloads for detecting and exploiting Server-Side Template Injection (SSTI) vulnerabilities. This skill covers various template engines like Jinja2, Twig, Freemarker, and more, allowing users to achieve Remote Code Execution (RCE) during penetration testing.

This guide provides a comprehensive methodology for performing directory traversal and path traversal testing on web applications. It covers identifying file path parameters, executing basic payloads (Linux/Windows), bypassing common security filters using encoding (URL, double, UTF-8), and automating the process with tools like ffuf and dotdotpwn. It also details advanced steps for local file inclusion (LFI) and potential escalation to Remote Code Execution (RCE) via log poisoning.

This skill details advanced techniques for performing stealthy lateral movement across Windows domains using Windows Management Instrumentation (WMI). It covers the abuse of native tools like Impacket's wmiexec.py and CrackMapExec, enabling remote command execution, Pass-the-Hash attacks, and fileless techniques, crucial for authorized red team engagements and security auditing.

This guide details how to analyze comprehensive Zeek network logs (conn.log, smb_files.log, ntlm.log, dce_rpc.log, etc.) to detect advanced attacker techniques. It specifically targets indicators of compromise related to lateral movement, such as SMB admin share access, NTLM account spraying, and remote service execution (DCE/RPC patterns). It is a critical network forensics tool for post-incident investigation.

This skill detects stealthy lateral movement by monitoring the abuse of DCOM objects (MMC20.Application, ShellBrowserWindow, ShellWindows). It correlates Sysmon telemetry (Process Creation, Network Connections), WMI analysis, and RPC traffic to identify unauthorized remote command execution, aiding threat hunters and red teams.

This skill provides a comprehensive, structured methodology and checklist for identifying Remote Code Execution (RCE) vulnerabilities across various web applications. It covers advanced attack vectors such as OS command injection, Server-Side Template Injection (SSTI), insecure deserialization, file upload flaws, and XXE. Use this guide during web application penetration testing or bug bounty hunting to systematically discover arbitrary code execution paths.

This skill provides a comprehensive checklist and methodology for identifying Server-Side Template Injection (SSTI) vulnerabilities. It covers template engine identification (e.g., Jinja2, Twig), polyglot payload generation, systematic detection methods, and executing engine-specific Remote Code Execution (RCE) payloads. Ideal for security professionals testing web application input sanitization.