Skill UI

Handles production-grade secret infrastructure by configuring Vault clusters or cloud secret stores, designing auth methods, implementing automated rotation, and auditing access for DevOps and security teams.

Detects and analyzes Bluetooth Low Energy security attacks such as sniffing, replay, GATT abuse, and MiTM using Ubertooth, nRF52840, bleak, and crackle for IoT or wireless infrastructure assessments and penetration testing.

Correlates Windows Security Event 4624 LogonType 3 with DNS/IP inventories, SMB/LDAP signing audits, and downgrade detection to surface NTLM relay coercion artifacts from Responder, PetitPotam, DFSCoerce, and similar tactics.

A library-agnostic Flutter/Dart code review checklist that walks through widget best practices, state management patterns, Dart idioms, performance, accessibility, security, and clean architecture, helping reviewers spot regressions in any app stack.

Performs firmware image extraction and analysis with binwalk to detect embedded filesystems, archives, bootloaders, kernels, and sensitive credentials, guiding entropy scans, recursive unpacking, filesystem mounts, and string hunts for embedded device security assessments.

Guides authorized iOS penetration testers through static and dynamic analysis, Frida/Objection instrumentation, SSL pinning bypass, keychain auditing, and IPA inspection to validate transport, data protection, and runtime defenses under OWASP MASTG.