Skill UI

A systematic skill for identifying similar vulnerabilities and bugs across large, complex codebases. It guides the user through generalizing initial bug patterns using techniques like CodeQL and Semgrep, ensuring comprehensive security audits beyond the initially discovered flaw. Ideal for advanced security research and robust code auditing.

A comprehensive skill for performing deep security audits on Ethereum smart contracts. Utilizes both static analysis (Slither) and symbolic execution (Mythril) to detect critical vulnerabilities such as reentrancy, integer overflows, and access control issues. This process is crucial for ensuring the security and immutability of financial assets before mainnet deployment.

Establishes a repeatable, structured operational process for managing Microsoft Patch Tuesday security updates. The workflow guides users through advisory review, vulnerability triaging (including zero-days), phased testing, and deployment across major platforms (Windows, Azure, Office). Ideal for maturing patch management programs and defining risk-based remediation SLAs.

This skill provides a comprehensive framework for tracking vulnerability aging and enforcing Service Level Agreements (SLAs). It calculates time-to-remediation against severity-based deadlines (e.g., 14 days for critical), incorporating adaptive modifiers and automated escalation paths. It is essential for establishing compliance policies, measuring remediation efficiency, and managing organizational risk.

DefectDojo is an open-source platform for comprehensive vulnerability management. It aggregates findings from over 200 security scanners (e.g., Nessus, ZAP), automatically deduplicates results, and provides detailed dashboards for tracking remediation progress. It integrates seamlessly with CI/CD pipelines, Jira for ticketing, and Slack for notifications, making it ideal for automated security reporting and compliance tracking in a DevSecOps environment.

This system provides a structured workflow for tracking security vulnerability exceptions and formally accepting related risks. It mandates documentation of compensating controls, manages required approval chains, and automatically handles expiration based on defined Service Level Agreements (SLAs). Essential for maintaining compliance and visibility into accepted risks, supporting frameworks like PCI DSS, SOC 2, and NIST CSF.

This workflow guides SOC teams in establishing a comprehensive, structured process for vulnerability management. It utilizes major scanning tools (Nessus, Qualys, OpenVAS) to discover, prioritize, and track remediation of security weaknesses across the infrastructure. It integrates threat intelligence (CISA KEV) and asset criticality into risk scoring, ensuring resources are focused on the most critical threats.

Simulates advanced persistent threat (APT) activity across the entire cyber kill chain, from reconnaissance to data exfiltration. It evaluates an organization's detection, prevention, and response capabilities using MITRE ATT&CK-aligned techniques, moving beyond typical vulnerability scanning. Ideal for objective-based assessments and purple teaming.

A comprehensive framework for assessing network security posture. This skill guides the tester through the entire penetration testing lifecycle, from reconnaissance and host discovery (using tools like Nmap) to service enumeration, vulnerability identification (CVEs), and controlled exploitation (Metasploit). It is essential for validating firewall rules, ensuring compliance (e.g., PCI-DSS), and stress-testing critical infrastructure security.

This guide details the exploitation of the Active Directory Certificate Services (AD CS) ESC1 vulnerability. By leveraging misconfigurations, an attacker can request certificates impersonating high-privileged users (e.g., Domain Admins). The workflow covers AD enumeration, forging certificates with arbitrary Subject Alternative Names (SANs), authenticating via PKINIT, and ultimately escalating domain privileges using tools like mimikatz. Essential for authorized red team and penetration testing.

This comprehensive guide outlines methods to identify and exploit specific IPv6 vulnerabilities, including SLAAC spoofing, Router Advertisement (RA) manipulation, and Neighbor Discovery Protocol (NDP) attacks. It is designed strictly for authorized penetration testing to assess dual-stack security controls, detect unauthorized tunnels (like Teredo or 6to4), and validate network defenses against IPv6-specific threats. Always obtain explicit written authorization before use.

This guide details the detection and exploitation of the critical MS17-010 (EternalBlue) vulnerability in SMBv1. It covers the full red-teaming lifecycle, including vulnerability scanning using Nmap and executing payloads via Metasploit. It is designed for authorized penetration testing and simulated adversary engagements against legacy Windows environments.