Skill UI

Guide to execute a phased DMARC rollout from monitoring (p=none) through quarantine to reject, ensuring every legitimate sender is authenticated before blocking unauthorized mail through SPF/DKIM configuration, report analysis, and ongoing maintenance.

Walks through authorized reconnaissance to enumerate DNS records, attempt zone transfers, brute-force subdomains, and map infrastructure so you can identify misconfigurations and exposed assets before targeting services or mail servers.

Automates prioritizing CVEs by risk, orchestrating patch and configuration changes through WSUS/SCCM/Intune, handling zero-day mitigations, and validating fixes to keep endpoints compliant with SLAs.

Defines the structured steps for onboarding log sources into SIEM platforms, covering discovery, collection configuration, parsing, normalization, and validation to ensure comprehensive security visibility and detection readiness.

Performs comprehensive assessments of OT networks (SCADA/DCS) by mapping Purdue layers, evaluating OT/IT convergence risks, analyzing industrial protocols, and validating firewall zones to detect misconfigurations or attack paths during compliance or incident response work.

This guide details advanced techniques used in red teaming and penetration testing to elevate user privileges from a low-level account to root access on a compromised Linux system. It covers exploiting misconfigurations, vulnerable services (like SUID/SGID binaries), improper sudo rules, kernel vulnerabilities (e.g., Dirty Pipe), and abuse of system services like Cron jobs and Systemd. Essential for authorized security assessments.

This tool performs deep security assessments on SOAP web services. It analyzes WSDL definitions and actively tests for critical vulnerabilities such as XML External Entity (XXE) injection, XPath injection, WS-Security misconfigurations, and SOAPAction spoofing. It is essential for securing complex, enterprise-level APIs and ensuring adherence to industry security standards.

Configures SSL/TLS inspection on security appliances to decrypt HTTPS, inspect for threats, deploy trusted certs, and manage exemptions so assessments and incident responses can validate controls.

This skill provides a comprehensive method for assessing SSL/TLS server configurations using the powerful Python library, sslyze. It evaluates crucial security aspects including supported protocol versions (e.g., TLS 1.2, 1.3), cipher suite strength, certificate chain validity, HSTS enforcement, and checks for common vulnerabilities like Heartbleed and ROBOT. Ideal for penetration testing, security auditing, and incident response.

Simulates VLAN hopping via switch spoofing, double-tagging and VTP techniques within authorized penetration tests to validate segmentation, DTP handling, and switch security configurations before sensitive deployments.

Performs authenticated and unauthenticated Nessus scans to find vulnerabilities, misconfigurations, default credentials, missing patches, and compliance issues while correlating CVEs and CVSS to prioritize remediation across networks, servers, and applications.

Provides step-by-step procedures to detect and remediate misconfigured Amazon S3 buckets, including enabling public access blocks, auditing policies and ACLs, enforcing encryption, and automating fixes with AWS Config and Lambda for compliance or incident response scenarios.