Skill UI

This guide details how to integrate OWASP ZAP (Zed Attack Proxy) into CI/CD pipelines (GitHub Actions/GitLab) for comprehensive Dynamic Application Security Testing (DAST). It covers configuring baseline, full, and API scans to identify common vulnerabilities like XSS, SQLi, and CSRF in running web applications and REST/GraphQL APIs, ensuring security quality gates in the development lifecycle.

This guide details how to integrate Static Application Security Testing (SAST) tools like CodeQL and Semgrep into your CI/CD pipelines using GitHub Actions. It covers setting up automated vulnerability detection on pull requests, tuning rules to minimize false positives, uploading SARIF results for centralized security reporting, and enforcing quality gates to prevent vulnerable code from merging into protected branches. Essential for DevSecOps and compliance (SOC 2, PCI DSS).

A comprehensive guide for intercepting and analyzing HTTP/HTTPS traffic from mobile applications using Burp Suite. This skill walks through configuring proxies on Android and iOS, handling CA certificate installation, and executing advanced penetration testing techniques. It is essential for assessing API security, identifying data leakage, and finding authentication vulnerabilities in mobile client-server communications.

This comprehensive guide details the methodology for Active Directory (AD) penetration testing. It covers deep domain enumeration, utilizing tools like BloodHound and Impacket, and executing advanced attacks such as Kerberoasting, AS-REP Roasting, and privilege escalation via delegation abuse. Use this when conducting authorized security assessments to discover and exploit misconfigurations to achieve domain compromise.

This skill guides comprehensive Active Directory (AD) security assessment using industry-standard tools like PingCastle, BloodHound, and Purple Knight. It helps identify critical misconfigurations, excessive privileges, weak Kerberos settings, and potential lateral movement paths. Ideal for penetration testing, security audits, and incident response to proactively secure enterprise identity management systems.

Automates the static security analysis of Android APK/AAB files using the Mobile Security Framework (MobSF). This skill identifies critical vulnerabilities such as hardcoded secrets, insecure permissions, weak cryptography, and structural flaws (mapping to OWASP Mobile Top 10) without requiring application execution. It is essential for integrating security gates into CI/CD pipelines, performing pre-release quality assurance, and enhancing penetration testing coverage.

This tool utilizes Microsoft RESTler to perform stateful REST API fuzzing. It compiles OpenAPI/Swagger specifications into a usable grammar, allowing users to test complex API interaction sequences. It is crucial for discovering state-related bugs, injection vulnerabilities, authentication bypasses, and resource leaks that standard testing might miss. Ideal for continuous security validation in CI/CD pipelines.

A comprehensive security assessment guide and script to test API rate limit vulnerabilities. It evaluates if an API's security controls can be bypassed using advanced techniques such as IP spoofing (manipulating X-Forwarded-For headers), HTTP method variations, and endpoint path traversal. Designed for penetration testing, it helps assess resilience against brute-force or resource exhaustion attacks, aligning with OWASP API Top 10 findings.

A comprehensive guide for performing structured API security testing using Postman. It covers critical OWASP API Security Top 10 vulnerabilities, including BOLA, authentication bypass, and injection flaws. Ideal for building repeatable security regression tests, simulating multi-role user access, and integrating automated validation into CI/CD pipelines via Newman and OWASP ZAP.

This skill simulates Man-in-the-Middle (MitM) attacks and ARP cache poisoning using advanced tools like Ettercap and Scapy. It is designed exclusively for authorized, controlled lab environments or penetration tests. Use cases include validating the efficacy of Dynamic ARP Inspection (DAI), assessing port security mechanisms, and testing whether IDS/IPS or SIEM systems detect Layer 2 spoofing attempts.

This guide details how to configure and execute deep, authenticated vulnerability scans using OpenVAS/Greenbone Vulnerability Management (GVM). By utilizing valid credentials (SSH, SMB, or ESXi), users can log into target systems to detect local vulnerabilities, missing security patches, and misconfigurations, which are typically missed by unauthenticated scans. Essential for professional security auditing and penetration testing.

This guide details the methodology and tools for conducting authorized privilege escalation assessments within AWS environments. It systematically utilizes specialized tools like Pacu and Principal Mapper (PMapper) to identify critical IAM misconfigurations, excessive permissions, and weak cross-account trust relationships. It is essential for validating the principle of least privilege and assessing the potential blast radius of compromised credentials during authorized penetration testing.