Skill UI

A comprehensive guide covering advanced offensive techniques for AWS cloud environments. Techniques include detailed IAM enumeration, privilege escalation paths, SSRF exploitation targeting metadata endpoints (IMDSv1/v2), S3 bucket exploitation, and Lambda function code extraction. Essential for security professionals and red team operations conducting authorized cloud vulnerability assessments.

An expert guide for building scalable, cloud-native enterprise applications using the latest Java 21+ features, including Virtual Threads and Pattern Matching. Deep mastery of the Spring Boot 3.x ecosystem, Spring Cloud, and microservices architecture. Covers full development lifecycle, from JVM performance tuning (GraalVM, ZGC) to robust testing (Testcontainers) and secure DevOps practices (Kubernetes, CI/CD).

This skill provides expert guidance on creating, reviewing, and managing production-grade AWS infrastructure using Terraform. It focuses on best practices for reusable module design, robust remote state management (S3 + DynamoDB), and adhering to modern HashiCorp Configuration Language (HCL) patterns like using 'for_each'. Ideal for teams building or auditing complex, scalable AWS environments.

A comprehensive skill set for building modern, scalable Vue 3 applications. Expertise covers implementing features using the Composition API, managing global state with Pinia, configuring Nuxt 3 for SSR/SSG, and developing hybrid mobile apps with Quasar/Capacitor. Includes optimization for Vite builds, PWA implementation, and strict TypeScript enforcement.

Arboreto infers gene regulatory networks from bulk or single-cell RNA-seq data using scalable GRNBoost2 and GENIE3 algorithms, letting researchers filter transcription-factor targets, run distributed Dask jobs, and export ranked links for downstream analysis.

This skill analyzes Active Directory (AD) Access Control Lists (ACLs) to detect dangerous misconfigurations. It uses the ldap3 Python library to query domain controllers, parse security descriptors (SDDL), and identify instances where non-privileged users or groups are granted dangerous permissions like GenericAll, WriteDACL, or WriteOwner on sensitive objects. Essential for security incident response and privilege escalation path discovery.

This skill analyzes AWS CloudTrail logs to detect suspicious API call patterns, such as new event sources, geographic anomalies, or high-frequency usage. It establishes a statistical baseline of normal activity and flags deviations indicative of compromised credentials, privilege escalation, or insider threats, providing a detailed JSON report for security investigation and threat hunting.

This skill analyzes AWS IAM policies using boto3 and Cloudsplaining principles to detect potential privilege escalation paths in AWS accounts. It identifies overly permissive policies, dangerous permission combinations (such as combining role passing and resource creation), and violations of least-privilege principles. It is designed for security incident investigation, threat hunting, and validating overall cloud security posture.

This skill defines the process and framework for establishing mandatory Service Level Agreements (SLAs) for mitigating identified vulnerabilities. It guides users on how to calculate remediation timeframes based on vulnerability severity (CVSS, KEV), asset criticality (Tier 1, 2, 3), and exploit availability. The process includes setting up escalation chains, defining exception processes, and tracking key performance indicators (KPIs) like Mean Time to Remediate (MTTR) to ensure robust security governance and compliance.

A comprehensive guide and workflow for performing authorized penetration testing on AWS environments using the open-source Pacu framework. This skill covers enumerating IAM configurations, identifying privilege escalation paths, testing credential harvesting, and validating security controls across S3, EC2, Lambda, and Secrets Manager. It is designed for red team exercises and risk assessment when auditing cloud infrastructure security.

Provides a structured workflow for performing initial triage of security incidents. This process uses established frameworks (NIST SP 800-61r3 and SANS PICERL) to classify the incident type, assign severity based on business impact, and determine the necessary containment and escalation steps. Ideal for analyzing SIEM/EDR alerts, suspicious user reports, or matching threat intelligence.

This skill focuses on detecting and mitigating sophisticated code injection and privilege escalation attacks across the entire serverless ecosystem (AWS Lambda, Azure, GCP). It combines static analysis of dangerous code sinks (e.g., eval, exec) with continuous monitoring of event sources (S3, SQS, API Gateway) and rigorous IAM auditing. It provides a comprehensive framework to secure the expanding serverless attack surface.