Skill UI

This guide details the exploitation of the Active Directory Certificate Services (AD CS) ESC1 vulnerability. By leveraging misconfigurations, an attacker can request certificates impersonating high-privileged users (e.g., Domain Admins). The workflow covers AD enumeration, forging certificates with arbitrary Subject Alternative Names (SANs), authenticating via PKINIT, and ultimately escalating domain privileges using tools like mimikatz. Essential for authorized red team and penetration testing.

This comprehensive guide details the professional process of detecting and exploiting SQL injection vulnerabilities using the powerful sqlmap tool. It covers the entire workflow, from initial vulnerability identification and basic scanning to database enumeration, data dumping, advanced exploitation (like file reading and OS command execution), and WAF bypass techniques, ensuring thorough penetration testing reporting.

The Metasploit Framework is the industry standard platform for penetration testing and vulnerability validation. It provides numerous modules (exploits, payloads, auxiliaries) used to confirm if identified security weaknesses are genuinely exploitable. This guide details using Metasploit in a structured, risk-based workflow for authorized testing, including vulnerability checking, post-exploitation assessment, and patch verification.

This skill provides a comprehensive workflow to extract Indicators of Compromise (IOCs) from malware samples and analysis reports. It covers file hashes (SHA256, MD5), network artifacts (IPs, domains, URLs from strings and PCAPs), and host-based indicators (registry keys, file paths, mutexes) from sandbox reports. It is essential for threat intelligence sharing, building blocklists, and creating detection signatures (YARA, Snort).

A comprehensive workflow for extracting, parsing, and analyzing Windows Event Logs (EVTX). It guides security professionals in using advanced tools like Chainsaw and Hayabusa, combined with Sigma rules, to detect critical security incidents such as lateral movement, privilege escalation, and persistence mechanisms during incident response and digital forensic investigations.

This skill guides the security hardening of Windows endpoints (10/11, Server 2019/2022) using established CIS Benchmarks. It provides a comprehensive workflow for establishing secure organizational baselines, configuring Group Policy Objects (GPOs), and enforcing security controls across critical areas like password policies, audit logs, and firewall rules. It is essential for achieving compliance with standards like PCI DSS, HIPAA, and SOC 2.

This guide provides a structured methodology for proactively hunting adversaries who establish persistence using Windows Scheduled Tasks (T1053). It outlines the necessary prerequisites (EDR, SIEM, Sysmon) and a comprehensive workflow—from hypothesis formulation to threat correlation—for detecting suspicious task creation, unusual scheduling patterns, and attacker TTPs during incident response or red teaming.

This guide details proactive threat hunting techniques focused on detecting supply chain compromises. Use it when investigating trojanized software updates, compromised dependencies (npm/PyPI), or tampered build artifacts. It outlines a structured workflow using EDR/SIEM data (CrowdStrike, Splunk) to identify hidden threats and scope the impact of sophisticated attacks.

This tool systematically generates, validates, and ranks concrete, publishable research ideas based on a broad research direction provided by the user. It guides the user through the entire idea discovery pipeline, from initial landscape survey (Phase 1) to validation (novelty checks, experiments) and review, ensuring the generated ideas are novel and relevant for academic publication. It manages complex workflow orchestration and utilizes multiple external tools.

This advanced workflow orchestrates the entire research idea lifecycle. Starting from a broad research direction, it systematically executes literature mapping, creative brainstorming, novelty verification, and proposal refinement. The final output is a validated IDEA_REPORT, a detailed proposal, and a concrete experiment plan, transforming preliminary concepts into actionable, structured research projects. Ideal for users needing a full, end-to-end research guidance system.

Implements comprehensive security controls for the entire API key lifecycle, including secure generation, hashing, storage, rotation, and revocation. This skill involves designing keys with sufficient entropy, enforcing per-key scoping, setting rate limits, and building automated workflows to prevent leakage and unauthorized access. Essential for robust server-to-server authentication.

This skill details how to establish continuous compliance monitoring for AWS resources. It covers deploying managed and custom Config rules aligned with industry standards like CIS and PCI DSS. The workflow includes setting up recording, implementing automated remediation using SSM, and aggregating compliance data across multiple AWS accounts using AWS Organizations. Ideal for security auditing and guardrail deployment.