Skill UI

Performs sector-specific threat landscape assessments by analyzing targeting patterns, attack vectors, TTPs, and vulnerability trends so security teams can prioritize risk management, investment, and reporting for verticals such as finance, healthcare, energy, and government.

Step-by-step Nikto guidance covering basic and advanced scans, tuning options, report exports, and integrations so security teams can validate web servers, SSL settings, and CVEs during vulnerability assessments.

A comprehensive guide to advanced network reconnaissance using Nmap. This skill covers multi-stage asset discovery, deep service enumeration, vulnerability scanning via the Nmap Scripting Engine (NSE), and advanced evasion techniques (e.g., fragmentation, decoys). It is designed for authorized penetration testing and thorough assessment of enterprise infrastructure.

Test JWT implementations for algorithm confusion, none bypass, kid/jku injections, and weak secrets to validate authentication and privilege controls during security assessments.

Covers comprehensive HTML injection attack scenarios, detection tips, and tooling so security testers can validate and document injection points, phishing overlays, and reflected or stored payloads during vulnerability assessments.

This skill guides the comprehensive process of crash triage, enabling the assessment of vulnerability exploitability. It covers advanced techniques using debuggers (WinDbg/GDB), sanitizers (ASAN/MSAN), and interpreting low-level data like stack traces and register dumps. It is essential for vulnerability researchers analyzing crash dumps or fuzzer-generated failures to identify root causes and potential attack vectors.

A comprehensive checklist and methodology for penetration testing file upload endpoints. Covers critical vulnerabilities such as MIME type bypass, extension bypass, magic byte manipulation, path traversal, and stored XSS. Essential for web application security assessment and bug bounty hunting, guiding testers through basic testing to advanced exploitation techniques like Null Byte injection and double extensions.

A comprehensive checklist designed for assessing the security posture of GraphQL endpoints. It covers advanced vulnerabilities such as introspection abuse, IDOR, query depth/complexity DoS, injection attacks (SQLi/NoSQLi), and authorization bypass mechanisms. Essential for professional penetration testing and bug bounty hunting.