Skill UI

A comprehensive guide to using the Metasploit Framework for advanced penetration testing and vulnerability validation. This skill details how to confirm exploitability of identified CVEs, gather post-exploitation evidence, and validate patch remediation effectiveness. It is essential for risk-based vulnerability management and red team exercises, providing proof of real-world impact beyond simple scanner scores.

This guide details the exploitation of the critical Zerologon vulnerability (CVE-2020-1472) in Active Directory Domain Controllers. It demonstrates the methodology for resetting the DC machine account password to empty, achieving full domain compromise. Subsequent steps include dumping domain credentials using DCSync. Essential for authorized red-teaming and security validation.

A comprehensive toolkit for analyzing ELF binaries to locate memory-corruption vulnerabilities, such as buffer overflows and ROP chains. This skill is vital for authorized penetration testing and CTF challenges, allowing users to evaluate compiler mitigations (ASLR, NX, Canary, PIE) and develop robust proof-of-concept exploits.

This skill provides a comprehensive framework for vulnerability prioritization by combining three crucial data points: CISA's Known Exploited Vulnerabilities (KEV) catalog (confirming real-world exploitation evidence), EPSS scores (predicting exploitation probability), and CVSS metrics (assessing intrinsic severity). It builds a multi-factor prioritization engine to determine the most critical CVEs for immediate remediation, assisting security teams in managing large vulnerability backlogs efficiently.

A comprehensive guide simulating real-world attacks against internet-facing infrastructure (firewalls, web servers, DNS, etc.). It covers the entire penetration testing lifecycle, including passive and active reconnaissance, vulnerability scanning (using tools like Nmap, Nessus, and Nuclei), manual validation, and simulated exploitation, adhering to standards like PTES and OSSTMM.

This tool automates the testing of web application URL parameters for Server-Side Request Forgery (SSRF). It probes sensitive endpoints, including cloud metadata services (AWS, GCP, Azure), internal network resources, and various URI schemes (file://, gopher://). It is designed for authorized penetration testing environments to confirm SSRF vulnerabilities and generate detailed threat reports.

A structured methodological framework for prioritizing vulnerabilities beyond raw CVSS scores. It utilizes CISA’s SSVC model, integrating real-time data like exploitation status (CISA KEV), EPSS scores, and technical impact to assign actionable outcomes: Track, Track*, Attend, or Act. Essential for mature security operations and remediation planning.

Guides learners through reconnaissance, scanning, vulnerability analysis, exploitation, and reporting phases of authorized penetration testing, pairing command examples with tool choices and professional deliverables.

A comprehensive checklist and methodology for penetration testing file upload endpoints. Covers critical vulnerabilities such as MIME type bypass, extension bypass, magic byte manipulation, path traversal, and stored XSS. Essential for web application security assessment and bug bounty hunting, guiding testers through basic testing to advanced exploitation techniques like Null Byte injection and double extensions.

This advanced playbook details expert techniques for format string exploitation. It covers arbitrary stack reading (%p), memory writing (%n), and exploiting weaknesses like GOT/hook overwrites. Essential for CTF challenges and binary vulnerability analysis to achieve reliable Remote Code Execution (RCE).

A comprehensive playbook detailing advanced JNDI injection techniques. Covers the abuse of JNDI lookups via RMI and LDAP, focusing on critical vulnerabilities like Log4Shell (CVE-2021-44228), deserialization gadgets, and post-8u191 bypass methods. Essential for deep-dive security testing and vulnerability research.

An expert playbook detailing advanced techniques for Linux kernel exploitation. Covers vulnerability classes (UAF, OOB, Race Condition), building primitives, bypassing modern mitigations (KASLR, SMEP, SMAP, KPTI), and achieving root privilege escalation via functions like commit_creds or modprobe_path overwrite. Essential for CTF and advanced security research.