Skill UI

Performs comprehensive assessments of OT networks (SCADA/DCS) by mapping Purdue layers, evaluating OT/IT convergence risks, analyzing industrial protocols, and validating firewall zones to detect misconfigurations or attack paths during compliance or incident response work.

Guides safe OT/ICS vulnerability scanning workflows with Tenable OT Security, combining passive monitoring, native protocol queries, and controlled active checks to avoid disrupting industrial processes while gathering compliance-ready risk data.

Crafts and injects tailored packets with Scapy, hping3, and Nemesis so security teams can validate firewall rules, IDS/IPS, protocol handling, and stack resilience through spoofed, malformed, and fragmented traffic during authorized assessments.

Guides structured cybersecurity assessments of electric power grid infrastructure, covering EMS/SCADA, substations, synchrophasor networks, and NERC CIP compliance to uncover protocol gaps and readiness for advanced threats like Industroyer.

This skill provides a comprehensive methodology for simulating privilege escalation attacks on compromised Linux and Windows environments. It guides the user through identifying vectors—including SUID abuse, misconfigured services, kernel vulnerabilities, cron job exploitation, and credential harvesting—to elevate initial low-privilege access to root or SYSTEM control. It is crucial for deep-dive penetration testing and assessing system security hardening.

This guide details advanced techniques used in red teaming and penetration testing to elevate user privileges from a low-level account to root access on a compromised Linux system. It covers exploiting misconfigurations, vulnerable services (like SUID/SGID binaries), improper sudo rules, kernel vulnerabilities (e.g., Dirty Pipe), and abuse of system services like Cron jobs and Systemd. Essential for authorized security assessments.

Performs comprehensive discovery and inventorying of privileged accounts across enterprise infrastructure, scanning admins, service, database, IAM, and app roles before feeding insights into PAM and compliance workflows.

This skill automates the execution of red team phishing campaigns using the Python gophish library. It enables users to create sophisticated email templates with tracking pixels, configure SMTP profiles, import target lists from CSV, and launch full-scale simulations. The system tracks key metrics, including open rates, click rates, and submitted credentials, providing essential data for security awareness training and vulnerability assessments.

Implements Snyk-driven SCA scans inside CI/CD pipelines to catch vulnerable OSS dependencies, auto-generate fix PRs, enforce license policies, and continuously monitor deployments.

Guide to detecting and exploiting second-order SQL injections where malicious input is stored safely but later resurfaces in a different query, covering discovery, payload storage, triggering, blind extraction, and escalation steps for web apps.

Use steganalysis and metadata tools to detect concealed payloads inside images, audio, and video, guiding investigators through metadata review, automated scans, LSB statistics, and extraction attempts for covert channel detection.

Simulates and detects software supply chain attacks by checking typosquatting risks with Levenshtein distance, probing dependency confusion across registries, verifying package hashes, and running pip-audit vulnerability scans for security assessments.