Skill UI

Leverage Certificate Transparency (CT) logs via crt.sh and Certstream to proactively monitor for suspicious SSL/TLS certificates. This skill helps detect lookalike domains, unauthorized certificate issuance, and potential phishing infrastructure targeting your organization before attacks launch. Includes querying logic and threat intelligence integration.

A powerful security tool for querying Certificate Transparency (CT) logs via crt.sh and pycrtsh. It detects potential security threats such as phishing domains, unauthorized certificate issuance, and shadow IT infrastructure. The tool specifically monitors new certificates for typosquatting and brand impersonation using advanced distance metrics, enabling proactive security threat detection.

This system builds an automated framework to track adversary Command and Control (C2) infrastructure. By leveraging passive DNS records, Certificate Transparency logs, and WHOIS data, it maps complex relationships between domains, IPs, and registrars. Use it to pivot from known indicators to discover entirely new, related threat actor infrastructure or maintain a continuous map of a threat group's network activity.

This guide outlines the process of passive external reconnaissance using Open Source Intelligence (OSINT) techniques. Users can map an organization's digital footprint by gathering comprehensive data, including DNS records, subdomains, certificate transparency logs, social media profiles, and leaked credentials. It is critical for the planning phase of penetration testing, asset mapping, or preparing for social engineering, all without actively interacting with target systems.

This comprehensive guide details how to perform thorough and passive subdomain enumeration using Subfinder. It is an essential process during the reconnaissance phase of penetration testing, bug bounty hunting, and security assessments. By integrating multiple passive sources (like Shodan, Censys, and Certificate Transparency logs), users can efficiently map the entire attack surface of a target organization, discover forgotten or misconfigured assets, and prepare for subsequent vulnerability scanning.

This skill provides advanced techniques and code examples for monitoring, mapping, and pivoting across adversary-controlled infrastructure. It leverages Passive DNS, Certificate Transparency logs, Shodan/Censys scanning, and network fingerprinting (JARM/JA3S) to discover C2 servers, phishing domains, and exploitable assets over time, which is crucial for advanced security operations and threat intelligence gathering.

This tool monitors Certificate Transparency (CT) logs to detect unauthorized certificate issuance for owned domains, discover hidden subdomains, and track suspicious certificate activity. By querying public CT logs and APIs (like crt.sh), it helps build continuous security pipelines, identify potential phishing infrastructure, and map the external attack surface for comprehensive threat intelligence.

Applies principles of behavioral economics and consumer psychology to optimize how pricing, packaging, and offers are structured and presented. This skill helps maximize the perceived value and fairness of products, guiding the use of anchors, decoy effects, and strategic framing to improve conversion rates and upsell opportunities while maintaining ethical transparency.

This skill simulates a Social Psychologist to diagnose specific trust barriers a target audience holds toward a brand, offer, or category. It prescribes the exact, strategic signals (e.g., credentials, transparency, proofs) needed to build credibility. Use it when communicating with skeptical audiences or when existing messaging fails to convert due to lack of trust. It calibrates trust across ability, benevolence, and integrity.

This skill details how to monitor Certificate Transparency (CT) logs using industry tools like crt.sh and Certstream. By analyzing publicly issued SSL/TLS certificates, users can proactively detect lookalike domains, unauthorized certificate issuance for owned assets, and early-stage phishing infrastructure targeting their organization. Ideal for SOC analysts and threat hunters.

A comprehensive tool designed to discover and map adversary-controlled assets, including C2 servers, phishing domains, and exploit kits. It utilizes sophisticated pivoting techniques across passive DNS records, Certificate Transparency logs, Shodan/Censys scans, and network fingerprints (JARM/JA3S) to generate actionable threat intelligence, perfect for CTI investigations and security operations.

This comprehensive guide provides stringent methodological standards for authors submitting papers to ACM Multimedia (ACM MM). It details how to rigorously validate cross-modal claims, ensuring that evidence supports the multimedia contributions. Key areas covered include designing ablations to isolate fusion mechanisms, conducting robust user studies, reporting performance against matched baselines, and maintaining transparency regarding datasets, media licenses, and compute costs.