Skill UI

Performs a comprehensive external audit of a deployed repository's state, going beyond simple code review. It checks for critical production gaps, including RLS misconfigurations, webhook idempotency issues, secret exposure, deployment health, and prompt injection vulnerabilities. Ideal for pre-launch gates and ensuring code stability before going live.

A comprehensive playbook detailing advanced attack techniques against Active Directory Certificate Services (AD CS). It covers exploiting misconfigured templates (ESC1-ESC13), performing NTLM relay attacks, and achieving privilege escalation via CA officer abuse. This guide is essential for offensive security practitioners conducting penetration testing simulations.

This comprehensive playbook guides the testing of Cross-Origin Resource Sharing (CORS) misconfigurations. It focuses on detecting critical vulnerabilities such as reflected origins, wildcard trust misuse, credentialed cross-origin reads, and bypasses in origin allowlists. Use this when analyzing browser-based access and trust boundaries for authenticated APIs.

A comprehensive playbook for advanced mobile security assessments of iOS applications. Covers both jailbroken and non-jailbroken environments, focusing on critical attack vectors such as keychain extraction, URL scheme hijacking, Universal Links exploitation via AASA misconfigurations, runtime memory manipulation (Frida/Objection), and binary protection analysis.

A comprehensive playbook for testing security flaws in OAuth 2.0 and OpenID Connect (OIDC) implementations. Use this guide to systematically check for misconfigurations in redirect URI handling, state and nonce validation, PKCE enforcement, token audience/issuer checks, and account binding vulnerabilities. Essential for reviewing applications linked to external identity providers.

CloudFox is an open-source, attacker-centric tool designed for authorized cloud penetration testing. It maps attack paths and identifies exploitable misconfigurations across AWS and Azure environments. By simulating an attacker's perspective, it goes beyond simple configuration audits to reveal critical assets, exposed secrets, and lateral movement opportunities (like STS AssumeRole trust relationships), providing comprehensive situational awareness for security assessment.

This skill simulates high-impact container breakout techniques, demonstrating how to achieve root compromise on the underlying host operating system. It covers exploiting misconfigurations (e.g., privileged pods, hostPath mounts, exposed Docker sockets) and leveraging known vulnerabilities in runC/containerd, making it essential for authorized penetration testing and assessing the blast radius of a compromised microservice.

A powerful offensive security toolkit for red-teaming and penetration testing. It systematically enumerates and exploits various misconfigurations within Active Directory Certificate Services (AD CS) using Certipy. This allows attackers to forge privileged certificates, perform PKINIT authentication, and achieve domain compromise and privilege escalation, even without knowing user passwords. Ideal for validating security hardening.

Trivy is an open-source, comprehensive scanner used to find vulnerabilities (CVEs), misconfigurations, secrets, and license issues across multiple targets. It is essential for implementing 'shift-left' security gates in CI/CD pipelines, scanning container images, Infrastructure-as-Code (IaC) like Terraform/Kubernetes, and generating/re-scanning SBOMs for supply chain transparency.

This skill performs an adversarial audit of web application authentication flows. It systematically probes for critical security vulnerabilities such as missing CSRF protection, insecure session cookies (lacking Secure/HttpOnly flags), risky cross-origin redirects, and OAuth misconfigurations. It generates a structured report detailing findings and severity levels, making it ideal for pre-deployment security audits and regression testing.

A comprehensive security auditing tool designed for Claude Code environments. It scans the entire configuration directory for security vulnerabilities, misconfigurations, injection risks, hardcoded secrets, and overly permissive settings. Ideal for initial project setup, pre-commit checks, or routine security hygiene.