Skill UI

This expert playbook details advanced techniques for converting an arbitrary memory write primitive into full Remote Code Execution (RCE). It covers targeting multiple system structures across different glibc versions, including GOT entries, __malloc_hook, __free_hook, _IO_FILE vtables, and function arrays. Essential for exploiting modern, hardened binaries and mastering advanced binary exploitation.

A comprehensive playbook detailing identification and bypass techniques for major binary protections, including ASLR, PIE, NX/DEP, RELRO, and stack canaries. This guide is essential for understanding how to exploit modern, difficult-to-break systems in advanced security research and CTF competitions.

This advanced playbook details expert techniques for format string exploitation. It covers arbitrary stack reading (%p), memory writing (%n), and exploiting weaknesses like GOT/hook overwrites. Essential for CTF challenges and binary vulnerability analysis to achieve reliable Remote Code Execution (RCE).

A comprehensive playbook for advanced mobile security assessments of iOS applications. Covers both jailbroken and non-jailbroken environments, focusing on critical attack vectors such as keychain extraction, URL scheme hijacking, Universal Links exploitation via AASA misconfigurations, runtime memory manipulation (Frida/Objection), and binary protection analysis.

This playbook provides advanced techniques for symbolic execution using angr, Z3, and Unicorn Engine. It covers automating CTF challenges, handling constraint solving patterns, function hooking, memory manipulation, and emulating custom virtual machines for binary analysis and key recovery.

PBIP is the developer-mode file format for Power BI, transforming the opaque PBIX binary into a human-readable, folder-based structure. This structure is crucial for enabling robust source control (Git diffing), external editing using specialized tools like VS Code, and seamless multi-author collaboration. It standardizes how reports and semantic models are structured for professional BI development pipelines.

This tool performs static security scanning of declared MCP surfaces using the `harness mcp-scan` command. It reads configuration files like `.mcp/servers.json` and `.harness/claims.json` without executing any tools. The tool flags policy, permission, and dependency issues, exiting with code 1 if findings meet the specified severity threshold. It supports CI integration and graceful degradation when the harness binary is unavailable.

This skill generates an enterprise-grade threat model report for MCP surfaces. It categorizes security threats and outputs severity levels like clean, low, medium, or high. Suitable for pre-launch security reviews and periodic audits. It integrates with the harness binary and supports JSON or table formats.

A comprehensive set of programmatic interfaces for RuView's Wi-Fi sensing capabilities, including the CLI binary, REST API, and WebAssembly builds. This toolkit allows developers to integrate sophisticated disaster survivor detection and signal analysis into various environments, such as scripting, web browsers, and edge devices (ESP32-WASM3). Ideal for systems requiring cross-platform, scalable sensing data streams.

This skill facilitates cross-version symbol migration and binary diffing. When existing symbols or reverse engineering results from an old version need to be quickly mapped to a new binary version, this tool is used. It leverages LLMs to perform structured structural comparisons between corresponding functions in different versions, enabling the programmatic transfer of function names and offsets even when original PDB files are lost. Ideal for kernel debugging, application updates, and binary analysis.

This specialized skill automates advanced forensic network analysis on captured packet data (PCAP). It is designed for reconstructing complex network sessions (TCP/UDP), decoding obscure or custom protocols (e.g., C2, custom binary), and correlating packet sequences with host or malware behavior. Use when evidence is embedded in protocol framing, timing, or session state, requiring reassembly beyond simple packet inspection.

This specialized skill guides deep-dive analysis for binary-heavy challenges, including CTF, malware analysis, and advanced forensics. It covers reverse engineering binaries, unpacking samples, inspecting memory dumps, debugging crashes, and building exploit chains by correlating artifacts like files, memory, and network packets.