Skill UI

Guides comprehensive API security testing for REST, GraphQL, and gRPC services using the OWASP API Security Top 10, combining Burp Suite, Postman, and custom scripts to validate authentication, authorization, rate limiting, input validation, and business logic defenses.

Provides structured methodologies for authorized AWS, Azure, and GCP penetration tests, covering scoping, reconnaissance, IAM privilege escalation, SSRF-to-metadata validation, and MITRE ATT&CK Cloud reporting.

Use BloodHound CE to map Active Directory attack paths, import SharpHound collections, run custom Cypher queries, and prioritize escalation chains for red team reconnaissance and security validation.

Simulates MITM attacks with Ettercap, mitmproxy, and Bettercap in authorized labs to test TLS validation, spoofing detection, and incident response controls while validating logging and credential interception workflows.

Guides comprehensive pen tests covering discovery, scanning, enumeration, vulnerability validation, controlled exploitation, and reporting to benchmark network security and compliance readiness.

Configures OAuth 2.0 flows (Authorization Code with PKCE, Client Credentials, Device Authorization) with secure scope, token lifecycle, PKCE validation, and RFC 9700 guidance so teams can deploy compliant IAM controls.

Analyzes Zeek dns.log to flag DNS tunneling by computing subdomain entropy, long labels, unique counts and query volumes, scoring domains and emitting structured JSON reports for SOC investigations and monitoring validation.

Detect Kerberos Pass-the-Ticket attacks by correlating Windows Security Event IDs 4768, 4769, and 4771 inside Splunk or Elastic SIEM, flagging ticket reuse, RC4 downgrades, and unusual service ticket volumes for SOC hunting and coverage validation.

Structured threat-hunting workflow that detects anomalous service-account logons, lateral movement, and privilege escalation by guiding analysts through hypothesis formation, SIEM/EDR querying, correlation and validation for proactive response.

This skill transforms a raw research proposal or method idea into a rigorous, paper-ready experimental roadmap. It guides the user through defining core claims, identifying necessary ablations (e.g., novelty, simplicity, frontier necessity), and structuring experiments into actionable, phased stages (Sanity, Baseline, Main, Decision). Ideal for advanced academic research in AI/LLM/VLM fields that requires strong validation and systematic reporting.

Guide to using the Metasploit Framework to validate and exploit verified vulnerabilities, document impact, scan auxiliary vectors, and confirm patches within a risk-based vulnerability management cycle.

Extract embedded Agent Tesla RAT configuration such as SMTP/FTP/Telegram exfiltration credentials, keylogger settings, and C2 data from .NET assemblies via dnSpy/ILSpy decompilation and memory analysis for malware research or red-team validation.