Skill UI

This comprehensive guide provides essential security best practices for deploying applications on Fly.io. It covers critical areas such as secrets management, private networking using WireGuard, securing TLS certificates, and properly scoping deploy tokens. The included functions demonstrate how to validate API tokens, verify webhook signatures, and validate deployment configurations to mitigate common cloud and application-level vulnerabilities.

This comprehensive guide details the end-to-end process of migrating data and connecting to Oracle Cloud Infrastructure's Autonomous Database (ADB). It walks through provisioning the ADB using the Python SDK, securely downloading the necessary mTLS wallet, establishing a connection using `python-oracledb`, and executing compatibility-aware data migration via Data Pump.

Techniques for attacking WPA/WPA2/WPA3-Enterprise 802.1X networks, including EAP method identification, evil-twin RADIUS credential capture, MSCHAPv2 cracking, and EAP-TLS certificate theft paths in corporate Wi-Fi environments.

A comprehensive, advanced playbook for conducting deep network traffic analysis and PCAP forensics. Covers essential skills like PCAP repair, advanced Wireshark filtering (HTTP, DNS, TLS), data extraction (file carving, credential harvesting), and detecting covert channels. It guides users through sophisticated techniques, including TLS decryption workflows and DNS tunneling identification.

This skill details how to monitor Certificate Transparency (CT) logs using industry tools like crt.sh and Certstream. By analyzing publicly issued SSL/TLS certificates, users can proactively detect lookalike domains, unauthorized certificate issuance for owned assets, and early-stage phishing infrastructure targeting their organization. Ideal for SOC analysts and threat hunters.

This guide details setting up advanced Command and Control (C2) redirectors, acting as protective intermediaries between implant beacons and the hidden team server. It covers using Nginx and Apache for request filtering based on Malleable C2 profiles, layering Let's Encrypt TLS, and implementing advanced OPSEC controls like domain fronting, geo/UA filtering, and decoy diversion. Essential for red-teaming operations requiring high resilience against blue-team detection and takedown.

A comprehensive guide for engineering the migration from classical public-key cryptography to quantum-resistant standards. This skill covers building a Cryptographic Bill of Materials (CBOM) to inventory assets, prioritizing migration based on Harvest-Now-Decrypt-Later (HNDL) risk, and deploying hybrid PQC key exchange (e.g., X25519MLKEM768) on critical channels like TLS, VPN, and SSH. Essential for achieving long-term quantum readiness and crypto-agility.

Sliver is an open-source, cross-platform Command and Control (C2) framework used for adversary emulation in authorized red-team engagements. This skill guides users through deploying the C2 server, establishing multi-protocol listeners (mTLS, DNS, HTTPS), generating cross-platform implants, and executing advanced post-exploitation techniques, including pivoting and in-memory execution via the Armory.

A comprehensive skill set for performing offensive security assessments on TLS/SSL implementations. This includes identifying cryptographic weaknesses (like POODLE, DROWN, Heartbleed), testing for protocol downgrades, analyzing weak cipher suites, and bypassing security controls such as certificate pinning and improper validation. Essential for penetration testers and security engineers to audit network service integrity.

Use Upstash Redis over HTTP in serverless and edge runtimes with @upstash/redis. Covers client setup, cache-aside with TTLs, sliding-expiration sessions, and 429 rate limiting via fixed window, sliding window, or token bucket.

This skill covers implementing service mesh patterns for AI inference traffic management using Istio or Linkerd. It includes configuring mTLS for security, setting up authorization policies for service accounts, managing egress for model endpoints, and implementing traffic splitting for canary releases and A/B testing. It ensures cross-cluster resilience and protects GPU-backed services from cascading failures without modifying application code.

Authorized security assessment of PostgreSQL, MySQL, MSSQL, MongoDB, and Redis: exposure and TLS review, account role and grantee analysis, dangerous configuration checks (file_priv, xp_cmdshell, COPY PROGRAM, UDF), NoSQL injection, and audit log posture.