Skill UI

This skill details how to abuse the Windows DPAPI (Data Protection API) to extract and decrypt sensitive secrets protected by the OS. It covers multiple scenarios: online decryption (using the target user's context), offline decryption (requiring passwords or NTLM hashes), and advanced domain-wide decryption via the DPAPI backup key. Essential for red-teaming and post-exploitation activities to harvest credentials, browser logins, and Wi-Fi passwords.

This technique abuses the Active Directory's `msDS-KeyCredentialLink` attribute to inject attacker-controlled public keys (Shadow Credentials). After gaining write access (e.g., via BloodHound), the attacker uses tools like pyWhisker or Certipy to append their key. They then authenticate via PKINIT to recover the target's NT hash, achieving complete account takeover without the disruptive step of a password reset. Ideal for stealthy red-teaming engagements.

NetExec is a comprehensive, multi-protocol tool designed for authorized penetration testing and red-teaming. It functions as a 'swiss-army knife' for assessing Windows, Active Directory, and Linux environments. Key capabilities include validating credentials, performing password spraying, enumerating network shares, executing commands across multiple protocols (SMB, WinRM, LDAP, MSSQL, SSH), and dumping critical credentials (SAM, LSA, NTDS). It directly supports techniques for lateral movement and post-exploitation activities.

A comprehensive guide for integrating transactional email sending into applications using Mailtrap's Email API. It covers critical best practices, including separating development (Sandbox) and production environments, implementing secure Bearer token authentication, and performing essential domain verification (SPF, DKIM, DMARC). Use this when building features like password resets or debugging email delivery pipelines.

A comprehensive tool for detecting and flagging Personally Identifiable Information (PII) within text, code, and configuration files. It is essential to use this before committing code, logging data, or generating model responses to prevent the accidental leakage of sensitive data such as emails, passwords, SSNs, or API keys.