Skill UI

A comprehensive guide detailing the process of performing entitlement reviews and access certification campaigns using SailPoint IdentityIQ. This skill is critical for maintaining compliance (SOX, HIPAA) by automating manager reviews, targeted privileged access validation, and identifying Separation of Duties (SOD) violations. It ensures robust access governance and facilitates automated remediation workflows.

This guide details the process of file carving using the Foremost tool in digital forensics. It demonstrates how to recover deleted or fragmented evidence (such as documents, images, and archives) from raw disk images or unallocated space by analyzing file headers and footers, independent of the file system's index. It also covers advanced techniques using custom signatures and high-performance alternatives like Scalpel.

Perform comprehensive security assessments for Google Cloud Platform environments. This tool audits critical security components—including IAM policies, firewall rules, and storage permissions—against industry benchmarks like the CIS GCP Foundations Benchmark. It helps organizations establish secure baselines and ensure continuous compliance across multiple GCP projects.

This skill provides comprehensive functionality for integrating and interacting with Hardware Security Modules (HSMs) via the industry-standard PKCS#11 interface using python-pkcs11. It supports key generation, signing, encryption, and verification operations across various platforms, including SoftHSM2, AWS CloudHSM, and YubiHSM2. It is essential for implementing robust, tamper-resistant key management systems and validating compliance against standards like FIPS 140-2/3.

This skill details how to execute HTTP Parameter Pollution (HPP) attacks. HPP exploits differences in how web applications and Web Application Firewalls (WAFs) process duplicate parameters within a single request (e.g., query strings or POST bodies). It is crucial for penetration testing to bypass input validation, WAF rules, and uncover parameter parsing inconsistencies in APIs and web forms.

This script automates the process of conducting comprehensive ICS/OT asset discovery using the Claroty xDome API. It facilitates inventorying critical industrial assets (PLCs, RTUs, HMIs) across various Purdue Model levels. Ideal for brownfield environments, preparing for IEC 62443 compliance, and gaining visibility into undocumented operational technology networks.

EvilGinx3 is an advanced Adversary-in-the-Middle (AiTM) framework designed for red teaming simulations. It goes beyond traditional credential harvesting by acting as a transparent proxy to intercept the entire authentication flow, including session cookies and Multi-Factor Authentication (MFA) tokens. This capability allows security professionals to assess the robustness of an organization's security posture against sophisticated account takeover attacks.

A specialized tool for authorized penetration testing and security assessments. It exploits the vulnerability of JWT libraries that accept tokens with the "alg": "none" header, bypassing cryptographic signature verification. Users can craft tokens with arbitrary claims (e.g., elevated privileges, impersonation) to validate that a target server correctly rejects unsigned JSON Web Tokens.

This tool utilizes kube-bench to audit a Kubernetes cluster's security posture against the industry-standard CIS Kubernetes Benchmark. It verifies security best practices across the control plane, etcd, worker nodes, and RBAC/policy configurations, generating detailed pass/fail/warn reports for compliance, hardening, and security assessment purposes.

This skill details advanced techniques for performing stealthy lateral movement across Windows domains using Windows Management Instrumentation (WMI). It covers the abuse of native tools like Impacket's wmiexec.py and CrackMapExec, enabling remote command execution, Pass-the-Hash attacks, and fileless techniques, crucial for authorized red team engagements and security auditing.

A comprehensive guide detailing how to perform rapid malware triage and classification using YARA rules. Learn to write sophisticated rules that match file patterns, unique strings, byte sequences, and structural PE characteristics. Ideal for automating signature-based scanning, developing custom detection rules for zero-day threats, and building robust analysis pipelines.

A comprehensive guide detailing the process of acquiring and analyzing data from smartphones and tablets. It covers best practices for device isolation, physical/logical acquisition using tools like Cellebrite UFED and open-source alternatives (ALEAPP, iLEAPP), and subsequent deep analysis of communications, call logs, and application artifacts for legal or corporate investigations.