Skill UI

A production-grade framework for executing high-performance, robust browser automation and web scraping using Playwright with the Go language. This skill specializes in handling complex Single Page Applications (SPAs), emulating human behavior (e.g., random typing delays, Bezier mouse movements), and implementing advanced stealth techniques to bypass anti-bot systems like Cloudflare. It emphasizes architectural best practices, such as using contexts for isolation and structured logging.

Comprehensive Go guidance for browser automation and web scraping using Rod’s direct Chrome DevTools Protocol integration plus stealth anti-detection patterns, ideal for headless SPA testing, concurrent scraping, and request interception.

This skill provides comprehensive detection rules for advanced defense evasion techniques used by adversaries, including log tampering (T1070), timestomping, process injection (T1055), and disabling security tools (T1562). It is ideal for threat hunting, building detection rules, and investigating stealthy attacker activity using Sysmon and SIEM data.

This skill details advanced techniques for performing stealthy lateral movement across Windows domains using Windows Management Instrumentation (WMI). It covers the abuse of native tools like Impacket's wmiexec.py and CrackMapExec, enabling remote command execution, Pass-the-Hash attacks, and fileless techniques, crucial for authorized red team engagements and security auditing.

This skill detects stealthy lateral movement by monitoring the abuse of DCOM objects (MMC20.Application, ShellBrowserWindow, ShellWindows). It correlates Sysmon telemetry (Process Creation, Network Connections), WMI analysis, and RPC traffic to identify unauthorized remote command execution, aiding threat hunters and red teams.

A comprehensive playbook detailing advanced techniques for bypassing modern Endpoint Detection and Response (EDR) and Antivirus (AV) solutions on Windows. Covers exploiting vulnerabilities in AMSI, ETW, and implementing sophisticated process injection methods (e.g., Process Hollowing, Early Bird) to execute payloads while maintaining stealth.