Skill UI

A comprehensive framework for setting up and processing Linear webhooks. This skill demonstrates best practices for real-time event handling, including mandatory HMAC signature verification, replay attack prevention, and robust event routing for various data types (Issues, Comments, Projects). Ideal for building reliable, real-time integrations between Linear and external systems.

This guide details methods for detecting and mitigating OAuth token theft and replay attacks in cloud environments, specifically targeting Microsoft Entra ID (Azure AD). It covers protection against access token theft, Primary Refresh Token (PRT) abuse, and pass-the-cookie attacks. Users can leverage Conditional Access and Token Protection features to cryptographically bind tokens to devices, significantly enhancing cloud identity security and preventing session hijacking.

A comprehensive skill for conducting authorized Bluetooth Low Energy (BLE) security assessments. It covers detecting various attacks, including sniffing, Man-in-the-Middle interception, replay attacks, and GATT enumeration abuse. The workflow guides users through packet capture using specialized sniffers (Ubertooth, nRF Sniffer), analyzing services and characteristics via Python/bleak, and performing cryptographic analysis using tools like crackle.

This comprehensive guide outlines best practices for securing SalesLoft API access and integrations. It details secure token lifecycle management (OAuth refresh), implementing robust webhook signature verification using HMAC-SHA256 to prevent replay attacks, and enforcing scope minimization for least-privilege access. Use this when designing production-grade, secure enterprise integrations.

Methodology for capturing, analyzing, and replaying LoRaWAN and sub-GHz wireless traffic. Useful for testing IoT deployments, fixed-code remotes, garage doors, TPMS, and other devices in 433/868/915 MHz bands.

Covers offensive workflows for Zigbee, Thread, and Matter mesh networks, including 802.15.4 sniffing, commissioning abuse, key capture, replay/injection, and control-command exploitation in smart-home deployments.

A comprehensive guide detailing attack methodologies for Z-Wave smart home networks. Techniques covered include sniffing during inclusion (S0/S2), exploiting key derivation flaws, performing replay attacks on unauthenticated nodes, and crucial hub compromise (pivoting) to gain full control over the entire mesh network. Essential reading for IoT penetration testing.

A comprehensive guide detailing detection and defense strategies against OAuth token theft, session hijacking, and token replay in Microsoft Entra ID (Azure AD). It covers advanced attacks like Primary Refresh Token (PRT) abuse and Adversary-in-the-Middle (AitM) phishing, and provides actionable steps for configuring Conditional Access and Token Protection policies.

This specialized skill is designed for Digital Forensics and Incident Response (DFIR) scenarios. It correlates evidence from multiple disparate sources—including EVTX, PCAP, registry, memory, and filesystem artifacts—to build a comprehensive, ordered, and replayable forensic timeline. Use it when the goal is to map the full sequence of attacker actions, establishing initial access, lateral movement, and persistence chains based on cross-source evidence correlation.

Hunting methodology for OAuth vulnerabilities from 22 bug bounty reports, covering redirect_uri bypass, CSRF state, nonce replay, referrer leakage, and mobile deep link attacks for authorized security assessments.

This skill enables authorized security research on RF and Software Defined Radio signals. It focuses on signal identification, protocol analysis, and replay attack feasibility studies within shielded laboratory environments. Users must obtain explicit written permission before probing or exploiting targets. It supports tools like RTL-SDR, HackRF, GNU Radio, and URH for analyzing wireless protocols outside regulated bands without causing interference.