Skill UI

A comprehensive guide detailing systematic steps to remediate Amazon S3 bucket misconfigurations that expose sensitive data. Procedures include enabling S3 Block Public Access, auditing and restricting overly permissive policies and ACLs, enforcing default server-side encryption (KMS/AES-256), and using AWS Config/Security Hub for automated compliance checks. Essential for achieving robust cloud storage security compliance.

This comprehensive tool manages the complete lifecycle of ML experiments, providing robust deployment capabilities across diverse environments. It supports running training jobs on local GPUs, dedicated remote servers, Vast.ai, and serverless platforms like Modal. The workflow handles environment detection, code synchronization (rsync/git), dependency pinning, and integrates advanced logging tools (e.g., W&B), ensuring reliable, scalable, and reproducible ML training runs.

A comprehensive guide detailing the use of Tenable Nessus, an industry-leading vulnerability scanner. Learn how to configure advanced scan policies, perform both authenticated and unauthenticated scans across servers, network devices, and web applications. This skill covers end-to-end processes from execution to result analysis and reporting.

This guide outlines a comprehensive methodology for hardening AWS Lambda execution roles. It focuses on implementing the principle of least privilege by auditing existing roles, analyzing actual API usage via CloudTrail and IAM Access Analyzer, and programmatically creating scoped IAM policies. Use this when deploying new serverless functions, remediating over-privileged roles found during security audits, or building secure, reusable role templates.

This skill guides the deployment and configuration of Microsoft Defender for Cloud (CNAPP) across Azure, multi-cloud, and hybrid environments. It covers enabling specialized security plans for various workloads (servers, containers, databases), managing the Secure Score, and implementing advanced security controls like Just-In-Time (JIT) access, ensuring comprehensive cloud workload protection and compliance.

This skill provides a comprehensive audit framework for securing process historian servers (e.g., OSIsoft PI, Honeywell PHD) within industrial Operational Technology (OT) environments. It guides users through assessing network exposure, implementing Purdue Model segmentation, and establishing secure data replication through a DMZ, ensuring process data integrity and preventing unauthorized access.

This guide details the design and configuration of secure, compliant remote access architectures for Operational Technology (OT) and Industrial Control Systems (ICS). It covers implementing jump server architectures, Multi-Factor Authentication (MFA), Privileged Access Management (PAM), session recording, and adhering to standards like IEC 62443 and NERC CIP-005. Ideal for network architects, security engineers, and operations teams needing to manage third-party vendor access securely.

A comprehensive guide to securing serverless compute platforms (AWS Lambda, Azure Functions, Google Cloud Functions). It covers critical security aspects including enforcing least-privilege IAM roles, integrating secrets management, vulnerability scanning of dependencies, input validation, and implementing runtime monitoring for robust DevSecOps practices.

A specialized skill for assessing REST and GraphQL APIs against Broken Object Level Authorization (BOLA/IDOR), a critical vulnerability highlighted by OWASP API1:2023. This process involves intercepting API calls, identifying object identifiers (numeric IDs, UUIDs, slugs), and systematically substituting these IDs with those belonging to other users or tenants. It verifies whether the API server correctly enforces per-object authorization checks, mitigating risks of horizontal privilege escalation and unauthorized data access in multi-tenant environments.

This script automates the testing of API endpoints for mass assignment (over-posting) vulnerabilities, adhering to OWASP API3:2023 guidelines. It systematically injects undocumented, privileged fields (like 'role', 'isAdmin', 'balance', 'price') into request bodies of typical endpoints (e.g., profile updates, order creation). It checks if the server binds these unexpected fields to the data model without proper filtering, potentially allowing unauthorized privilege escalation or data manipulation.

This skill guides comprehensive security testing for Host Header Injection vulnerabilities in web applications. It simulates attacks to identify critical risks such as password reset poisoning, web cache poisoning, Server-Side Request Forgery (SSRF), and virtual host routing manipulation. It is essential for penetration testers assessing backend security behind proxies and load balancers.

This skill provides advanced techniques and code examples for monitoring, mapping, and pivoting across adversary-controlled infrastructure. It leverages Passive DNS, Certificate Transparency logs, Shodan/Censys scanning, and network fingerprinting (JARM/JA3S) to discover C2 servers, phishing domains, and exploitable assets over time, which is crucial for advanced security operations and threat intelligence gathering.