Skill UI

This skill optimizes articles for Answer Engine Optimization (AEO), ensuring content is structured for maximum extractability by AI models like ChatGPT and Perplexity. It rewrites vague headings into direct questions, inserts self-contained 50-80 word answer capsules, audits and trims long paragraphs, and highlights trust signals, making your content highly readable and citable by AI search engines.

This skill generates comprehensive, structured redline edits for Word documents. It captures insertions, deletions, and detailed margin comments, allowing users to conduct professional reviews (legal, copy-editing, technical). The output provides a detailed summary, top-level changes, line-by-line tracking, and clear instructions for applying revisions, ensuring the review process is systematic and actionable.

This skill optimizes your entire job application package by tailoring your CV summary, rewrites key experience points, and crafting a personalized cover letter based on a specific job description. It is designed to maximize ATS compatibility while maintaining a human, compelling tone. Use it when you need to apply for a role, optimize for keywords, or identify gaps between your profile and the job requirements.

A comprehensive guide for conducting memory forensics to extract cached credentials, password hashes, Kerberos tickets, and authentication tokens from Windows memory dumps (LSASS). This technique is crucial during incident response or breach assessment to identify compromised accounts or investigate lateral movement.

A comprehensive guide to configuring and hardening SAML 2.0 Single Sign-On (SSO) using Okta as the Identity Provider (IdP). This skill covers end-to-end flow implementation, attribute mapping, advanced security controls like SHA-256 signatures and AES-256 encryption, and testing procedures for robust, enterprise-grade identity access management systems.

This skill provides advanced detection methods for credential dumping, covering LSASS memory access, SAM hive extraction, and NTDS.dit theft (e.g., using Mimikatz). It utilizes Sysmon Event ID 10 and Windows Security logs to enable threat hunting, assisting SOC analysts in triaging EDR alerts and building robust SIEM correlation rules.

Automated system designed to monitor paste sites (e.g., Pastebin, GitHub Gists) for leaked credentials, API keys, and sensitive data dumps. It uses advanced scraping, keyword matching, and regex patterns to provide early detection of data breaches and security incidents.

This skill details how to abuse the Windows DPAPI (Data Protection API) to extract and decrypt sensitive secrets protected by the OS. It covers multiple scenarios: online decryption (using the target user's context), offline decryption (requiring passwords or NTLM hashes), and advanced domain-wide decryption via the DPAPI backup key. Essential for red-teaming and post-exploitation activities to harvest credentials, browser logins, and Wi-Fi passwords.

This technique abuses the Active Directory's `msDS-KeyCredentialLink` attribute to inject attacker-controlled public keys (Shadow Credentials). After gaining write access (e.g., via BloodHound), the attacker uses tools like pyWhisker or Certipy to append their key. They then authenticate via PKINIT to recover the target's NT hash, achieving complete account takeover without the disruptive step of a password reset. Ideal for stealthy red-teaming engagements.

Exploits privileged pods, host mounts, runC CVEs, and exposed Docker sockets to break out of a container and reach the underlying host during an authorized container-security assessment. Use when executing an approved breakout test, demonstrating the real impact of a privileged or hostPath workload, or validating that escape mitigations actually hold. Keywords: container breakout, privileged, hostPath, docker.sock, runC CVE-2019-5736, CVE-2024-21626, release_agent, nsenter. Do not use for defensive detection of these techniques - use detecting-container-escape-attempts.

Chainsaw is a fast, Rust-based forensic tool designed for first-response threat hunting. It analyzes collected Windows EVTX files using the comprehensive Sigma rule corpus, built-in detection rules, and high-speed keyword/regex searching. Furthermore, it uniquely analyzes critical artifacts such as shimcache, SRUM, and event-log gaps, providing robust, offline detection capabilities without needing a SIEM pipeline. It is essential for digital forensic triage and hypothesis confirmation.

NetExec is a comprehensive, multi-protocol tool designed for authorized penetration testing and red-teaming. It functions as a 'swiss-army knife' for assessing Windows, Active Directory, and Linux environments. Key capabilities include validating credentials, performing password spraying, enumerating network shares, executing commands across multiple protocols (SMB, WinRM, LDAP, MSSQL, SSH), and dumping critical credentials (SAM, LSA, NTDS). It directly supports techniques for lateral movement and post-exploitation activities.