Skill UI

Automates the static security analysis of Android APK/AAB files using the Mobile Security Framework (MobSF). This skill identifies critical vulnerabilities such as hardcoded secrets, insecure permissions, weak cryptography, and structural flaws (mapping to OWASP Mobile Top 10) without requiring application execution. It is essential for integrating security gates into CI/CD pipelines, performing pre-release quality assurance, and enhancing penetration testing coverage.

This tool utilizes Microsoft RESTler to perform stateful REST API fuzzing. It compiles OpenAPI/Swagger specifications into a usable grammar, allowing users to test complex API interaction sequences. It is crucial for discovering state-related bugs, injection vulnerabilities, authentication bypasses, and resource leaks that standard testing might miss. Ideal for continuous security validation in CI/CD pipelines.

This tool performs comprehensive API inventory and discovery across an organization's environment. It identifies all API endpoints—including documented, undocumented, shadow, and deprecated APIs—by combining passive traffic analysis (HAR files), active scanning, DNS enumeration, and cloud resource auditing. It helps map the complete API attack surface, crucial for security assessments and compliance requirements like PCI-DSS and SOC2.

A comprehensive security assessment guide and script to test API rate limit vulnerabilities. It evaluates if an API's security controls can be bypassed using advanced techniques such as IP spoofing (manipulating X-Forwarded-For headers), HTTP method variations, and endpoint path traversal. Designed for penetration testing, it helps assess resilience against brute-force or resource exhaustion attacks, aligning with OWASP API Top 10 findings.

A comprehensive guide for performing structured API security testing using Postman. It covers critical OWASP API Security Top 10 vulnerabilities, including BOLA, authentication bypass, and injection flaws. Ideal for building repeatable security regression tests, simulating multi-role user access, and integrating automated validation into CI/CD pipelines via Newman and OWASP ZAP.

This skill simulates Man-in-the-Middle (MitM) attacks and ARP cache poisoning using advanced tools like Ettercap and Scapy. It is designed exclusively for authorized, controlled lab environments or penetration tests. Use cases include validating the efficacy of Dynamic ARP Inspection (DAI), assessing port security mechanisms, and testing whether IDS/IPS or SIEM systems detect Layer 2 spoofing attempts.

Implements a robust, multi-factor model to calculate the criticality score of IT assets. The scoring incorporates data sensitivity, business function dependency, regulatory scope, and network exposure, moving beyond simple CVSS scores. The resulting 1-5 criticality tier directly modifies vulnerability remediation Service Level Agreements (SLAs), ensuring security resources are focused on the organization's most valuable and risky systems.

This guide details how to configure and execute deep, authenticated vulnerability scans using OpenVAS/Greenbone Vulnerability Management (GVM). By utilizing valid credentials (SSH, SMB, or ESXi), users can log into target systems to detect local vulnerabilities, missing security patches, and misconfigurations, which are typically missed by unauthenticated scans. Essential for professional security auditing and penetration testing.

This guide details how to perform authenticated (credentialed) vulnerability scans using industry-leading tools like Nessus, Qualys, and OpenVAS. By utilizing service credentials (SSH, SMB, WinRM, SNMPv3), the scan moves beyond superficial banner checks to deeply inspect installed patches, configurations, and local system settings on Linux, Windows, and network devices. This is crucial for detecting vulnerabilities that unauthenticated scans often miss, significantly improving security assessment accuracy.

CAPE is an open-source sandbox derived from Cuckoo, designed for automated dynamic malware analysis. It features advanced behavioral instrumentation, capturing system changes, network traffic (PCAP), and specialized parsers to extract malware configurations (e.g., Emotet, Cobalt Strike). Use this skill for incident response, security assessments, and validating security controls against complex payloads and evasion techniques.

ScoutSuite is an open-source, agentless tool designed for comprehensive AWS security posture assessment. It queries AWS APIs to automatically enumerate resources across various services, identify critical misconfigurations (like public S3 buckets or overly permissive IAM roles), and generate an interactive HTML report. It is ideal for conducting cloud security audits, compliance checks, or incident response procedures using read-only credentials.

Perform comprehensive security audits on Bluetooth Low Energy (BLE) devices, identifying potential vulnerabilities in IoT, healthcare, and smart home applications. This skill uses Python to discover devices, enumerate GATT services, and flag unencrypted or unauthenticated read/write access to sensitive data fields, helping organizations validate security controls.