Skill UI

A comprehensive playbook detailing how web applications can be vulnerable to attacks by manipulating the HTTP Host header. Covers critical techniques such as password reset poisoning, Web Cache Poisoning, Server-Side Request Forgery (SSRF), and Virtual Host bypass. Essential reading for penetration testers and security researchers.

A comprehensive guide for managing and operating the KubeSphere network extension. This skill provides detailed instructions on installing, upgrading, enabling, or disabling the network extension, managing Calico IPPool resources, configuring NetworkPolicies, and troubleshooting network isolation flows within a Kubernetes cluster environment. Essential for platform engineers and DevOps teams.

This expert playbook provides a comprehensive guide to lattice-based cryptanalysis techniques. It covers fundamental concepts like SVP and CVP, and deep dives into advanced algorithms such as LLL and BKZ reduction. Key attack applications include Coppersmith's method for finding small roots in RSA, solving the Hidden Number Problem for recovering DSA/ECDSA nonces, and analyzing knapsack ciphers. Essential for CTF and academic cryptanalysis.

This expert playbook details advanced techniques for bypassing SSL pinning mechanisms (Certificate, Public Key, SPKI) on mobile applications running on Android and iOS. It provides practical methods using tools like Frida and Objection, covering various frameworks (Flutter, React Native, Xamarin) and multiple pinning types to enable the interception and analysis of encrypted HTTPS traffic.

This skill provides comprehensive operations for managing NodeGroup resources. It allows users to query, create, update, delete, and manage bindings for nodes, namespaces, and workspaces within the edgewize nodegroup environment. Ideal for infrastructure automation, troubleshooting, and API-driven cluster management.

A comprehensive methodology for exploiting Time-of-Check / Time-of-Use (TOCTOU) race conditions across diverse system layers. This covers symlink swaps, file-descriptor races, kernel double-fetch vulnerabilities, and advanced window-widening primitives like FUSE slow filesystems and userfaultfd. Essential for security researchers targeting race-based privilege escalation in binaries, kernels, and container orchestrators.

End-to-end pipeline turning a completed paper into a conference-ready talk: slide outline, Beamer source, editable PPTX, speaker notes, script, visual polish, and claim/citation/anonymity assurance checks for venues like NeurIPS, ICML and ICLR.

Per-page Codex review plus targeted python-pptx and Beamer fixes for existing academic talk decks: scales PPTX fonts to projector-readable size, resizes text frames, removes italic style leaks, fixes overflow, and aligns visual weight with a reference PDF.

This expert playbook details advanced techniques for exploiting stack-based vulnerabilities, including classic buffer overflows, Return-Oriented Programming (ROP), ret2libc, and specialized gadgets like ret2csu and SROP. It provides comprehensive guidance on bypassing modern memory mitigations (NX, ASLR, PIE) to hijack program control flow and achieve reliable remote code execution in userland binaries.

This playbook provides expert techniques for reverse engineering custom virtual machines and proprietary bytecode. It guides users through identifying dispatchers (switch/table), mapping unknown opcodes, reconstructing custom ISAs, and writing dedicated disassemblers. Essential for solving complex CTF challenges, analyzing protected software, or tackling custom runtime environments.

This catalog provides essential database abstractions and specialized clients for robust data persistence. It includes core components like DbRegistry, DynamoDBClient, and various filtering utilities. By utilizing these standardized imports, developers can standardize data access logic, ensuring clean code separation, type safety, and scalable architecture in their applications.

This API module provides eleven core abstractions for managing email functionality. It includes interfaces for repositories (e.g., GetSettingsRepository, SaveSettingsRepository), use cases (e.g., SendMailUseCase), and event handlers (e.g., MailAfterSendEventHandler). It follows clean architectural patterns to ensure the separation of concerns and provides a robust, scalable foundation for all mailing-related features.