Skill UI

A comprehensive guide for authorized penetration testers on identifying and exploiting Cross-Site Request Forgery (CSRF) vulnerabilities. This skill covers analyzing state-changing requests, testing anti-CSRF token implementations, and verifying defenses like SameSite cookies and Origin/Referer header validation using tools like Burp Suite.

EvilGinx3 is an advanced Adversary-in-the-Middle (AiTM) framework designed for red teaming simulations. It goes beyond traditional credential harvesting by acting as a transparent proxy to intercept the entire authentication flow, including session cookies and Multi-Factor Authentication (MFA) tokens. This capability allows security professionals to assess the robustness of an organization's security posture against sophisticated account takeover attacks.

This guide details how to use GoPhish, an open-source framework, to conduct authorized phishing simulations. You will learn the complete lifecycle, from deploying the tool and configuring SMTP profiles, to creating realistic email templates and cloning secure landing pages. The skill culminates in analyzing campaign results to assess organizational security posture and improve employee resilience against social engineering attacks.

This skill provides a comprehensive automation solution for conducting red team phishing simulations using the Python gophish library. It streamlines the entire campaign lifecycle, including creating sophisticated email templates with tracking pixels, configuring SMTP profiles, importing user groups from CSV, launching targeted attacks, and generating detailed reports on open rates, click-through rates, and credential submission statistics for robust security awareness assessments.

This skill automates red team operations using the Covenant C2 framework, providing comprehensive capabilities for authorized adversary simulation. It covers the full attack lifecycle, including listener setup, deploying agents (grunts), executing tasks on compromised hosts, and tracking lateral movement via the Covenant API. Ideal for professional penetration testing and security auditing.

A comprehensive security tool designed to simulate and detect critical software supply chain attacks. It identifies risks such as typosquatting via Levenshtein distance, dependency confusion against private registries, package integrity failures through SHA-256 hash verification, and known vulnerabilities using pip-audit. Essential for security auditing and assessing project dependency risk.

This skill simulates advanced Layer 2 network attacks, including VLAN hopping, using techniques like switch spoofing (DTP) and 802.1Q double tagging. It is designed exclusively for authorized penetration testing environments to validate network segmentation, test trunk port hardening, and assess the risk of unauthorized VLAN access across the network infrastructure.

Run NVIDIA Cosmos Policy evaluations on LIBERO and RoboCasa simulations, enabling headless EGL GPU rendering, inference profiling, and benchmark workflows via public eval entrypoints.

Structured red team engagement planning that blends MITRE ATT&CK kill-chain ordering, technique scoring, choke point and OPSEC analysis, and crown-jewel targeting into authorized offensive simulations with tooling like the engagement planner.

Accelerates CPU-bound Python workflows by translating NumPy, pandas, ML, graph, image, simulation, and IO code into NVIDIA GPU kernels using CuPy, Numba CUDA, Warp, cuDF/cuML/cuGraph, KvikIO, cuSpatial, and RAFT for dramatic speedups.

A design skill for architecting web interfaces with industrial brutalism and tactical telemetry aesthetics. It merges mid-century Swiss typography, industrial manuals, and retro-futuristic aerospace terminals, using rigid grids, extreme scale contrast, utilitarian colors, and analog degradation simulations. Opt-in, invoked by name.

A comprehensive skill guide for building complex, feature-rich web games and game engines using modern web technologies like HTML5, Canvas, WebGL, and JavaScript. Covers full 2D and 3D game development workflows, including implementing the game loop, physics simulation (collision detection, Newtonian physics), handling diverse input methods (touch, gamepad), managing assets, and integrating multiplayer features via WebRTC. Ideal for creating everything from simple platformers to advanced 3D simulations.