Skill UI

Implement Okta as a centralized Identity Provider (IdP) for robust multi-cloud security across AWS, Azure, and GCP. This skill covers configuring Single Sign-On (SSO), deploying phishing-resistant Multi-Factor Authentication (MFA), automating user lifecycle management via SCIM, and enforcing adaptive access policies based on device posture and user risk, helping organizations achieve Zero Trust compliance.

A comprehensive guide to detecting and mitigating advanced Adversary-in-the-Middle (AiTM) phishing attacks, which bypass Multi-Factor Authentication (MFA) using reverse proxies (e.g., Evilginx, EvilProxy). Learn defensive strategies including implementing FIDO2, configuring Conditional Access policies, and monitoring session hijacking indicators in SIEM/Web Proxies.

EvilGinx3 is an advanced Adversary-in-the-Middle (AiTM) framework designed for red teaming simulations. It goes beyond traditional credential harvesting by acting as a transparent proxy to intercept the entire authentication flow, including session cookies and Multi-Factor Authentication (MFA) tokens. This capability allows security professionals to assess the robustness of an organization's security posture against sophisticated account takeover attacks.

This guide details the design and configuration of secure, compliant remote access architectures for Operational Technology (OT) and Industrial Control Systems (ICS). It covers implementing jump server architectures, Multi-Factor Authentication (MFA), Privileged Access Management (PAM), session recording, and adhering to standards like IEC 62443 and NERC CIP-005. Ideal for network architects, security engineers, and operations teams needing to manage third-party vendor access securely.

This guide implements a secure conduit architecture for Operational Technology (OT) remote access, adhering to IEC 62443 standards. It establishes a layered defense using DMZs, jump servers, and MFA gateways. Use it to secure third-party vendor access to SCADA/ICS equipment, replacing risky direct VPN connections and remediating audit findings on uncontrolled access.

A comprehensive guide for building a FIDO2/WebAuthn relying party server using python-fido2. This skill covers the entire lifecycle of passwordless authentication, including secure credential registration (enrollment of hardware keys like YubiKey and resident passkeys) and robust authentication ceremonies. It is essential for migrating traditional password-based systems to phishing-resistant Multi-Factor Authentication (MFA).

A guide for refining search queries when researching Indian or South Asian actors. It emphasizes the necessity of including domain keywords such as "Bollywood," "Hindi film," or specific Indian award names (e.g., "Filmfare Award") to filter out irrelevant Western search results and drastically improve search precision.

A speed-optimized, comprehensive checklist for rapid security assessments. This guide covers full-cycle penetration testing methodologies, including deep reconnaissance (WAF bypass, CDN mapping), access control testing (MFA, JWT, API keys), and session management vulnerabilities. Ideal for time-boxed engagements, CTF competition, or initial service triage.

This skill provides comprehensive guidance on implementing robust data governance and security guardrails within Snowflake. It covers advanced features such as network rules, mandatory authentication policies (MFA, Key Pair), session timeouts, and statement-level controls. Use this when enforcing strict security policies, achieving regulatory compliance, or structuring robust data access controls for a Snowflake environment.

This guide details essential security best practices for Snowflake data warehouses. It covers implementing network policies, managing key rotation, enabling Multi-Factor Authentication (MFA), and securing credentials using secret managers. Use this comprehensive resource to audit security configurations, restrict network access, and enforce least-privilege access within your Snowflake environment.

A comprehensive playbook for identifying authentication vulnerabilities in web applications. Covers advanced topics including SQL injection login bypass, predictable password reset tokens, account enumeration techniques, multi-factor authentication bypass, and brute-force resistance checks. Essential for penetration testers assessing login mechanisms and session management.

This guide details how to configure Microsoft Entra Privileged Identity Management (PIM) to enforce Zero Trust principles. It converts standing, permanent privileged roles into eligible, time-bound assignments, requiring mandatory justification, MFA, and approval workflows before activation. Ideal for achieving strict role-assignment auditing and comprehensive identity governance in hybrid cloud environments.