Skill UI

Automated assistant for SOC2 compliance checks that guides security teams through best practices, code/configuration generation, and validation within advanced enterprise frameworks.

This comprehensive guide details how to deploy and configure a resilient Command and Control (C2) infrastructure using the advanced Sliver framework. It covers setting up multi-protocol listeners (HTTPS, mTLS, DNS, WireGuard), implementing complex redirectors, domain fronting, and establishing operational security controls for professional red team engagements and advanced security assessments.

This guide provides a comprehensive walkthrough for deploying and configuring a production-grade Command and Control (C2) infrastructure using the open-source Havoc framework. It covers setting up the Teamserver, configuring secure HTTPS listeners, implementing redirectors (e.g., Nginx), and deploying Demon agents for advanced post-exploitation red team operations. This skill is essential for authorized security assessments and building robust defensive countermeasures.

A comprehensive guide and workflow for performing authorized penetration testing on AWS environments using the open-source Pacu framework. This skill covers enumerating IAM configurations, identifying privilege escalation paths, testing credential harvesting, and validating security controls across S3, EC2, Lambda, and Secrets Manager. It is designed for red team exercises and risk assessment when auditing cloud infrastructure security.

Automates complex red team operations using the Covenant C2 framework. This guide covers the entire lifecycle of authorized adversary simulation, including configuring HTTP/HTTPS listeners, deploying agents (grunts), executing tasks remotely, and tracking lateral movement. It is essential for performing comprehensive penetration testing and security auditing.

This skill guides the deployment and operation of the Havoc C2 framework, enabling advanced adversary emulation. It utilizes Yaotl profiles to generate highly evasive agents (Demon) that employ sophisticated techniques like indirect syscalls and sleep obfuscation. The scope covers the full red-teaming lifecycle, including C2 setup, payload generation, post-exploitation, and lateral movement, making it ideal for authorized security testing and validating EDR detection capabilities.

A comprehensive guide to setting up the open-source Sliver C2 framework. It covers deploying the server, generating cross-platform implants and beacons, establishing resilient multi-protocol listeners (mTLS, DNS, HTTPS), and executing advanced post-exploitation and pivoting techniques using the built-in armory for adversary emulation.

This tool facilitates querying structured federation audit logs, providing deep visibility into system access and changes. It supports advanced filtering based on major compliance frameworks (HIPAA, SOC2, GDPR) and event severity levels. By summarizing total events, PII detections, and trust changes, it is an essential resource for performing security audits, ensuring data privacy, and maintaining regulatory compliance.