Skill UI

This skill provides comprehensive techniques for penetrating AWS cloud environments. It covers IAM enumeration, privilege escalation, SSRF attacks on metadata endpoints, S3 exploitation, and Lambda code extraction. Designed for authorized security assessments and red team operations to identify vulnerabilities and persistence mechanisms.

Authorized red-team methodology for identifying cloud credentials and mapping IAM permissions across AWS, Azure, and GCP, including read-only validation and privilege escalation paths.

This skill enables security professionals to conduct authorized assessments on Linux systems, identifying misconfigurations and vulnerabilities that allow privilege escalation from standard users to root. It covers techniques like SUID exploitation, sudo misconfigurations, and cron job hijacking, strictly requiring written authorization and defensive guardrails.

Provides comprehensive techniques for escalating privileges from low-privileged users to root or administrator on Linux and Windows systems, covering sudo, cron, capabilities, token impersonation, and Active Directory attacks for authorized penetration testing.

This skill involves conducting threat modeling using the STRIDE methodology to identify potential security threats, assess risks, and design appropriate security controls. It is essential when designing secure systems, making architectural changes, or preparing for security audits. The process includes analyzing data flows, identifying trust boundaries, and mitigating risks related to spoofing, tampering, repudiation, information disclosure, denial of service, and privilege escalation.

Enables authorized offensive security assessments on Windows Active Directory environments. Covers Kerberos abuse, AD CS escalation, BloodHound path analysis, NTLM relay, and domain privilege escalation techniques. Requires explicit written permission and strict authorization gates before execution. Designed for educational purposes or authorized security assessments only.

Systematic methodologies for discovering and exploiting Windows privilege escalation vulnerabilities in authorized penetration testing, covering service path abuse, AlwaysInstallElevated, token impersonation, unquoted paths and credential harvesting.