Download

Skill UI

Browse and discover 11130+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search TLS , found 54 results

Default Newest Most Downloaded

Detecting Cobalt Strike Beacon Network Activity

hunting-for-cobalt-strike-beacons

mukul975/Anthropic-Cybersecurity-Skills

This skill guides threat hunters in detecting Cobalt Strike Command and Control (C2) beacons. It utilizes advanced network forensic techniques, including analyzing default TLS certificate serials, JA3/JA3S/JARM fingerprints, beacon jitter, and HTTP profile matching. Detection is achieved by correlating data from Zeek logs, Suricata rules, and Python PCAP analysis to identify suspicious outbound communications.

Detecting Domain Fronting C2 Traffic

hunting-for-domain-fronting-c2-traffic

mukul975/Anthropic-Cybersecurity-Skills

This skill detects domain fronting, an advanced technique used by attackers to mask Command and Control (C2) traffic. It analyzes proxy/web gateway logs for mismatches between the TLS SNI field and the HTTP Host header, combined with deep TLS certificate inspection using pyOpenSSL. This is crucial for security teams investigating sophisticated network threats and validating detection coverage.

Implementing mTLS for Zero Trust Services

implementing-mtls-for-zero-trust-services

mukul975/Anthropic-Cybersecurity-Skills

This guide details the configuration and implementation of mutual TLS (mTLS) authentication between microservices. It utilizes Python's cryptography library for robust certificate generation, validation, and secure service-to-service authentication, essential for adopting zero-trust security models.

Network Traffic Analysis with Arkime

implementing-network-traffic-analysis-with-arkime

mukul975/Anthropic-Cybersecurity-Skills

This skill details the deployment and advanced querying techniques for Arkime (Moloch), enabling comprehensive full packet capture network traffic analysis. Users can leverage the Arkime API v3 to search connections, download PCAPs, detect sophisticated C2 beaconing, and analyze connection patterns and anomalies across DNS, HTTP, and TLS traffic. Essential for security monitoring and network forensics.

Implementing Centralized Syslog with Rsyslog

implementing-syslog-centralization-with-rsyslog

mukul975/Anthropic-Cybersecurity-Skills

This skill outlines how to configure rsyslog for robust, centralized log collection. It covers establishing high-availability syslog infrastructure using TLS encryption, X.509 certificate authentication, and reliable disk-assisted queuing. Learn to generate and deploy both server and client configurations for secure, segregated, and reliable security operations logging.

Cryptographic Audit Tool For Applications

performing-cryptographic-audit-of-application

mukul975/Anthropic-Cybersecurity-Skills

This skill provides a systematic cryptographic audit tool designed to review applications for security vulnerabilities. It scans source code and configuration files to detect weak hashing algorithms (MD5, SHA-1), insecure cipher modes (ECB), hardcoded secrets, and deprecated protocols like TLS 1.0. Essential for security assessments, compliance checks, and maintaining secure coding practices.

Kubernetes Etcd Security Assessment Guide

performing-kubernetes-etcd-security-assessment

mukul975/Anthropic-Cybersecurity-Skills

This guide provides a comprehensive methodology for assessing the security posture of Kubernetes etcd clusters. It covers critical areas including encryption at rest (for secrets), TLS transport security, access control validation, secure backup procedures, and network isolation checks, ensuring cluster data integrity and confidentiality.

Mobile App Certificate Pinning Bypass Tool

performing-mobile-app-certificate-pinning-bypass

mukul975/Anthropic-Cybersecurity-Skills

This skill provides advanced techniques for bypassing SSL/TLS certificate pinning in Android and iOS applications. It supports interception of HTTPS traffic during authorized security assessments, covering pinning mechanisms like OkHttp, TrustManager, NSURLSession, and utilizes tools such as Frida and Objection for comprehensive testing.

Network Traffic Analysis with Zeek

performing-network-traffic-analysis-with-zeek

mukul975/Anthropic-Cybersecurity-Skills

Zeek is a powerful, open-source network security monitoring framework that generates high-fidelity structured logs and metadata from raw network traffic. This skill covers deploying Zeek, analyzing various protocol logs (HTTP, DNS, TLS, etc.), writing custom detection scripts to identify anomalies, and integrating resulting security insights with SIEM platforms for comprehensive threat detection and forensic investigation.

Automating SSL Certificate Lifecycle Management

performing-ssl-certificate-lifecycle-management

mukul975/Anthropic-Cybersecurity-Skills

This skill covers the end-to-end automation of SSL/TLS X.509 certificate management. It guides users in generating Certificate Signing Requests (CSRs), monitoring expiration, automating renewal via ACME protocol (e.g., Let's Encrypt), and handling revocation checking. Essential for security assessments, incident response, and maintaining robust cryptographic infrastructure.

Simulating SSL Stripping and MITM Attacks

performing-ssl-stripping-attack

mukul975/Anthropic-Cybersecurity-Skills

This skill simulates SSL stripping and Man-in-the-Middle (MITM) attacks using specialized tools like Bettercap and sslstrip. It is designed for authorized penetration testing to assess a web application's resilience against downgrade attacks. Users can test if HSTS headers are properly enforced, if TLS certificates are correctly validated, and if sensitive data remains encrypted throughout the session.

Configuring SSL/TLS Inspection for Security

performing-ssl-tls-inspection-configuration

mukul975/Anthropic-Cybersecurity-Skills

This guide provides a comprehensive workflow for configuring SSL/TLS inspection on network security devices. It covers deploying root CA certificates across various operating systems (Windows, macOS, Linux), setting up forwarding proxies, and configuring next-generation firewalls to decrypt, inspect, and re-encrypt encrypted HTTPS traffic for advanced threat detection and compliance.

Prev 1 234 5 Next

Language