Skill UI

Guides learners through reconnaissance, scanning, vulnerability analysis, exploitation, and reporting phases of authorized penetration testing, pairing command examples with tool choices and professional deliverables.

A comprehensive methodology for executing external Open Source Intelligence (OSINT) reconnaissance and authorized red-team operations. It guides users through a multi-stage attack surface assessment pipeline, covering asset discovery, confidence scoring, vulnerability prioritization, breach correlation, and structured client reporting for professional security assessments.

Expert advisor on EU Cyber Resilience Act (Regulation 2024/2847) for products with digital elements. Use for gap analysis, product classification, conformity assessment route selection, CE marking, SBOM requirements, ENISA vulnerability reporting, support periods, and manufacturer/importer/distributor compliance duties.

Assesses compliance with the EU Cyber Resilience Act (CRA). It determines if a product is in scope, classifies the risk, and outlines specific duties for vulnerability handling and incident reporting. It integrates live CVE and CISA data with official legal texts to provide cited, actionable compliance advice.

This skill helps organizations determine mandatory reporting duties, receiving authorities, and precise deadlines following a security incident, data breach, or vulnerability exploitation. It synthesizes reporting requirements from major EU regimes, including GDPR, NIS2, DORA, and the Cyber Resilience Act, providing a cited map of obligations based on the entity's role and location. It determines *what* must be reported, citing official legal texts.

An advanced, automated pipeline designed for comprehensive, deep-dive Open Source Intelligence (OSINT) gathering and reconnaissance against authorized domains. It executes the full methodology—from passive data harvesting and subdomain discovery to multi-agent content fan-out, vulnerability identification (BOLA/IDOR), and automated findings generation. The output is a single, consolidated, multi-tab deliverable (XLSX), eliminating the need for manual follow-up or superficial reporting.

This skill provides a structured methodology for authorized security assessments of REST, GraphQL, WebSocket, and SOAP APIs. It covers discovery, authentication flaws (JWT/OAuth), authorization issues (BOLA/IDOR), rate-limit testing, and CI/CD integration. Includes 10-phase workflow from reconnaissance to reporting, utilizing tools like Entropy, Burp, and FireTail for comprehensive vulnerability identification.

Provides Bugcrowd-specific vulnerability reporting tactics, including VRT category selection, manual severity overrides, and evidence-based severity rationale for bounty submissions.

Audit authorized codebases for exploitable vulnerabilities using scoped reconnaissance, adversarial review, validation, and structured reporting. Use for security reviews, pen-testing, and vulnerability hunting in web apps, APIs, services, CLI tools, libraries, and daemons.

Master the full penetration testing lifecycle: reconnaissance, scanning, vulnerability analysis, exploitation and reporting. Covers tools like Nmap, Nikto, theHarvester, OSINT techniques, OWASP web testing and professional report deliverables for authorized security assessments only.

A comprehensive five-phase methodology for bug bounty and SRC vulnerability hunting, covering intake, reconnaissance, enumeration, active hunting, and reporting. Includes attack playbooks for SQLi, XSS, RCE, SSRF, IDOR, and more, with WAF bypass techniques and prioritization strategies for efficient security assessments.