Skill UI

A comprehensive guide for authorized security assessments, detailing systematic methods to escalate user privileges from low-level access to root control on Linux systems. Techniques covered include comprehensive system enumeration, exploiting kernel vulnerabilities (e.g., dirty pipe), abusing misconfigured sudo permissions (using gtfobins), and exploiting vulnerable SUID binaries.

This skill provides a comprehensive framework for performing privilege escalation assessments post-initial compromise. It guides testers in identifying paths from low-privilege access to root or SYSTEM-level control on both Linux and Windows operating systems. Techniques covered include abusing SUID binaries, exploiting misconfigured services, leveraging kernel vulnerabilities, and harvesting credentials.

Walks through systematic Linux privilege escalation, covering enumeration, automation with linpeas/linenum, kernel exploit hunting, sudo/SUID abuse, and exploitation of cron, LD_PRELOAD, and GTFOBins for gaining root access.

A comprehensive debug bundle designed to collect diagnostic evidence from AppFolio property management API integrations. It captures essential data points including API connectivity status for properties, tenants, and work orders; authentication status using client credentials; recent integration error logs; and environment metadata. This allows support engineers to perform root cause analysis and diagnose issues like connectivity failures or authentication rejections without needing live environment access.

This skill covers managing block storage volumes including LVM, cloud-based EBS, filesystem creation, snapshots, and RAID configurations. It guides users through provisioning raw disks, partitioning, formatting, and extending volumes in production environments. Prerequisites include root access and relevant packages like lvm2 and mdadm.