Skill UI

A comprehensive guide for security teams on detecting and responding to unauthorized crypto mining operations in cloud environments (AWS, Azure). It details a multi-layered approach, utilizing cost anomaly detection, compute utilization monitoring, GuardDuty findings, and network flow log analysis (VPC/KQL) to identify resource hijacking attempts and suspicious activity across EC2, ECS, and EKS workloads.

This skill provides a comprehensive methodology for discovering and exploiting broken link hijacking vulnerabilities. By spidering a target site and extracting all external scripts, domains, and references, the skill checks the DNS and domain registration status. It is crucial for conducting subdomain takeover testing, supply-chain security reviews of third-party resources, and advanced bug bounty hunting.

This skill provides a comprehensive guide to hardening BGP using the Resource Public Key Infrastructure (RPKI). It covers the full lifecycle, including creating Route Origin Authorizations (ROAs) at Regional Internet Registries (RIRs), deploying RPKI validator software (e.g., Routinator), and configuring Route Origin Validation (ROV) on enterprise routers like Cisco IOS-XE and Juniper Junos. Use this when establishing critical network security controls to prevent route hijacking and leaks.