Skill UI

Deploy and configure an OpenTAXII-based TAXII 2.1 server to share STIX 2.1 threat intelligence collections, define access roles, and automate indicator ingestion into SIEM/SOAR pipelines for collaborative CTI exchange.

Guide for deploying Velociraptor to scale forensic artifact collection across Windows, Linux, and macOS, including server/client setup, Docker options, and VQL artifacts used during incident response hunts and compliance-driven monitoring.

Implements Schnorr-based zero-knowledge proofs for authentication, including interactive and Fiat-Shamir non-interactive flows plus zero-knowledge password proofs so servers verify identities without learning secrets.

Intercepts mobile app HTTP/HTTPS traffic through a Burp Suite proxy to analyze insecure APIs, authentication flaws, certificate pinning, data leakage, and server-side responses during mobile penetration tests or API security assessments.

Guides building MCP servers with Node/TypeScript SDKs, covering registration of tools, resources, prompts, and choosing stdio or streaming HTTP transports, plus Zod validation and best practices.

Guide to detect and exploit blind Server-Side Request Forgery risks via out-of-band callbacks, DNS/timing analysis, and cloud metadata enumeration when assessing webhooks, document processors, or internal services.

Provides a workflow for authorized penetration testing across AWS, Azure, and GCP to discover IAM, storage, serverless, and compute weaknesses, leveraging Pacu, ScoutSuite, Prowler, and cloud-native tools.

Walks through authorized reconnaissance to enumerate DNS records, attempt zone transfers, brute-force subdomains, and map infrastructure so you can identify misconfigurations and exposed assets before targeting services or mail servers.

A guided workflow for auditing AWS Lambda, Azure Functions, and GCP Cloud Functions to catch permissive execution roles, exposed secrets, and missing runtime protections before deployment.

This skill provides a comprehensive method for assessing SSL/TLS server configurations using the powerful Python library, sslyze. It evaluates crucial security aspects including supported protocol versions (e.g., TLS 1.2, 1.3), cipher suite strength, certificate chain validity, HSTS enforcement, and checks for common vulnerabilities like Heartbleed and ROBOT. Ideal for penetration testing, security auditing, and incident response.

This tool is designed for security professionals to test for Server-Side Request Forgery (SSRF) vulnerabilities. It systematically probes user-controllable URL parameters to identify access to internal network services, cloud metadata endpoints (AWS/GCP/Azure), and restricted local resources. It supports various payload techniques, including protocol handlers (gopher, file), IP encoding, and DNS rebinding, making it essential for thorough security assessments and penetration testing.

Performs authenticated and unauthenticated Nessus scans to find vulnerabilities, misconfigurations, default credentials, missing patches, and compliance issues while correlating CVEs and CVSS to prioritize remediation across networks, servers, and applications.