Skill UI

This skill guides the comprehensive hardening of LDAP directory services. It addresses common vulnerabilities such as LDAP injection, anonymous binding, and credential harvesting. Users can enforce strong security controls, including LDAPS, channel binding, and granular access control lists (ACLs). It is essential when establishing robust identity access management (IAM) architecture or meeting stringent compliance requirements like NIST standards.

This technique exploits the Active Directory attribute `msDS-KeyCredentialLink` by injecting attacker-controlled public keys (Shadow Credentials). Using tools like pyWhisker and Certipy, the attacker forces the target account to register a new key. Subsequently, by leveraging PKINIT (Public Key Cryptography for Initial Authentication in Kerberos), the attacker can obtain a service ticket and recover the target's NT hash, achieving a stealthy, password-less, complete account takeover.

A comprehensive security auditing tool designed to identify over-permissive Role-Based Access Control (RBAC) roles and potential service-account token abuse paths within a Kubernetes cluster. It systematically reviews cluster bindings, effective permissions, and common escalation primitives using advanced tools like `kubectl auth can-i`, `rbac-police`, and `rakkess`, ensuring adherence to the principle of least privilege.

This skill details the advanced red-teaming technique of exploiting Active Directory Certificate Services (AD CS) via the ESC8 path. By abusing the HTTP web-enrollment endpoint and relaying coerced NTLM credentials, an attacker can compel a domain controller to request a machine certificate. This certificate is then used to compromise the domain via PKINIT and DCSync.

This skill provides comprehensive guidance on designing complex system integrations, including event-driven architectures (EDA), webhook flows, API chaining, and robust ETL pipelines. It covers advanced patterns like Saga, Outbox, and resilience mechanisms (Idempotency, Circuit Breaker), making it ideal for connecting multiple microservices and managing asynchronous data flows.

A comprehensive Rust client library for integrating with Azure Service Bus. It allows developers to send and receive messages reliably using both point-to-point queues (for competing consumers) and publish-subscribe topics. This skill is essential for building robust, event-driven, and highly available distributed applications in Rust that require durable message passing within the Azure cloud environment.

This official Rust client library provides comprehensive functionality for interacting with Azure Queue Storage. It allows developers to reliably send, receive, manage, and peek messages within an Azure cloud environment. Use it in Rust applications that require asynchronous message queuing, ensuring robust communication and data synchronization between services. Supports full lifecycle management including deletion and peeking.

This specialized guide assists service-area businesses (e.g., plumbing, HVAC, appliance repair) in mastering local SEO. It provides comprehensive strategies for auditing Google Business Profiles (GBP), generating high-ranking neighborhood service pages, ensuring NAP consistency, and implementing local schema markup to dominate the Google Map Pack.

This skill provides comprehensive monitoring advisory services for data assets and AI agents. It helps users assess data coverage gaps, analyze use-case criticality, and automatically create data quality monitors (table, metric, validation). Furthermore, it enables monitoring of AI agent performance, latency, and observability, ensuring robust data governance across the entire ML lifecycle.

rclone is a powerful, feature-rich command-line utility designed to manage files across diverse cloud storage backends, including S3-compatible services. It provides robust, reliable equivalents to core Unix commands (sync, copy, move, mount). Use this skill for all terminal-based cloud operations, such as syncing, backing up, downloading, or managing remote data securely.

Performs comprehensive, multi-page Lighthouse audits across an entire website. This tool is a robust, quota-free alternative to services like PageSpeed Insights, making it ideal for large sites or CI/CD pipelines where API limits are a concern. It aggregates key metrics such as performance, accessibility, and SEO scores across all audited routes.

This skill generates comprehensive end-to-end (E2E) automation tests using WebdriverIO (WDIO) in JavaScript or TypeScript. It supports various frameworks (Mocha, Jasmine, Cucumber) and includes advanced patterns like the Page Object Model (POM) and robust selector strategies. Users can configure tests for local execution or integrate with cloud services like LambdaTest, making it ideal for simulating complex user interactions and ensuring application quality across multiple browsers and environments.