Skill UI

A comprehensive guide detailing systematic techniques for breaking out of container isolation (Docker, Podman, containerd) into the underlying host operating system. Covers exploiting misconfigurations, abusing privileged modes, manipulating Linux capabilities (CAP_SYS_ADMIN), utilizing namespaces (nsenter), and exploiting known container runtimes CVEs. Essential for penetration testing and security red teaming engagements.

A systematic methodology for performing offensive cryptographic analysis. This skill focuses on identifying and exploiting flaws arising from the misuse of cryptographic primitives in real-world applications, rather than breaking the underlying math. Techniques covered include Padding Oracle Attacks (CBC), ECB block manipulation, Hash Length Extension, RSA weaknesses, and PRNG exploitation. Ideal for penetration testing and deep security auditing.

A comprehensive guide covering the full attack lifecycle in Kubernetes. Techniques include service account token theft, RBAC misconfiguration exploitation, kubelet API abuse, pod escape, and cloud metadata compromise across major cloud platforms (AWS, GCP, Azure). Essential for security assessment and penetration testing of cloud-native environments.

This guide provides comprehensive, battle-tested techniques for expanding access across a compromised network. It covers credential-based movement (Pass-the-Hash, Pass-the-Ticket), NTLM relay attacks, and remote execution protocols (WMI, WinRM). Used exclusively in authorized red team engagements and penetration testing, it details command sequences and OPSEC considerations required to reach high-value targets while minimizing detection.

A comprehensive guide for authorized red team engagements, covering the end-to-end lifecycle of advanced phishing campaigns. Learn techniques for infrastructure setup (domain aging, SPF/DKIM/DMARC), payload delivery (macro weapons, HTML smuggling), and bypassing email security gateways (MFA bypass, domain spoofing). Essential knowledge for penetration testers and security professionals.

A comprehensive skill set for performing offensive security assessments on TLS/SSL implementations. This includes identifying cryptographic weaknesses (like POODLE, DROWN, Heartbleed), testing for protocol downgrades, analyzing weak cipher suites, and bypassing security controls such as certificate pinning and improper validation. Essential for penetration testers and security engineers to audit network service integrity.

This skill analyzes local Q&A session JSONL files to produce a complete, auditable weekly report in Markdown format. It supports generating routine weekly summaries, comparing performance across consecutive time windows, and identifying key trends and risks. The output is a single, self-contained Markdown file designed to provide sufficient aggregates and structure for downstream documentation rendering (e.g., Feishu or whiteboards), without needing external data sources or APIs.

An internal, deterministic runtime for structured scholarly writing workflows (meta-paper-write). It processes JSON input to perform critical operations such as persisting sections, assembling LaTeX manuscripts, compiling PDFs using xelatex/bibtex, managing citations, and applying length expansions. It ensures artifact integrity and high-quality output for academic publications.

This internal gate performs a deterministic, early check on the readiness of source materials for meta-paper writing. It runs after source curation and before expensive section generation, verifying that the curated, verifiable bibliography meets the required numeric citation target and structural criteria. This prevents costly generation attempts if the source coverage is insufficient or invalid.

This skill guides the advanced process of reverse engineering vulnerabilities from vendor-released security patches (N-day). By performing binary diffing between patched and unpatched binaries, users can pinpoint specific code changes (e.g., new boundary checks, locks) to infer the original vulnerability class (e.g., OOB, Race Condition) and develop a working Proof of Concept (PoC) for weaponization.

An expert advisor trained in PCI DSS standards (v4.0.1 current) and QSA methodology. This skill provides deep guidance on compliance requirements, including CDE scoping, SAQ selection, gap assessment roadmaps, network segmentation, data tokenization, and general best practices for protecting cardholder data. Essential for security, compliance, and engineering teams.

This skill provides an active penetration testing toolchain covering information gathering, port scanning, vulnerability scanning, web attacks (SQL injection, XSS), directory brute-forcing, and password cracking. It exposes 20+ security tools to AI agents via MCP servers for authorized security assessments.