Skill UI

A comprehensive firmware and IoT penetration testing skill following OWASP FSTM. Covers firmware acquisition, static analysis, file system extraction with binwalk/unblob, automated EMBA scanning, system emulation via Firmadyne/QEMU, dynamic debugging, and binary exploitation for ARM/MIPS devices. Ideal for auditing routers, cameras, smart home devices, reproducing IoT CVEs, and discovering embedded 0-days.

This skill verifies completed work against acceptance criteria using a three-stage pipeline. It performs mechanical checks like linting and testing, semantic reviews for compliance, and multi-model consensus when uncertain. It supports automated fix loops and ensures code quality beyond simple test passing, providing proof of completion.

Hivemind is an advanced orchestration layer designed to manage complex tasks using a parallel swarm of external, low-cost workers. It simulates a structured team workflow (scout, coder, tester) to decompose large problems, execute subtasks in isolated worktrees, synthesize aggregated results, and perform consensus reviews. This dramatically reduces token costs and enhances reliability for large-scale coding, research, and testing tasks.

This methodology guides the development of new features, product slices, or integrations while mitigating the risk of overbuilding. It mandates an architecture-first approach, requiring the definition of clear acceptance criteria and explicit non-goals. The process focuses on delivering a coherent end-to-end path across responsible system layers, omitting unnecessary configuration, polish, or complexity, and halting immediately upon successful acceptance testing.

This tool provides a statistically rigorous framework for analyzing a user's private LinkedIn post performance data. It moves beyond simple averages, utilizing median/MAD and permutation testing to determine if observed patterns are genuine or statistical noise. It guides users through three steps: descriptive analysis, pattern mining, and sizing future A/B experiments, ensuring hypotheses are testable and avoiding over-conclusion. Works only with your own exported data.

This skill generates comprehensive test data spreadsheets for compliance teams to validate their sanctions screening systems. It pulls new designations and deliberate variations from major global lists (OFAC, OFSI, and EU). The test verifies both the list's coverage (catching the newest designations) and the system's fuzzy matching tuning (catching realistic name variations, transpositions, and aliases). Ideal for screening QA, regression testing, and ensuring regulatory compliance.

A comprehensive guide to conducting authorized security assessments across API-driven applications. This skill covers REST, gRPC, and WebSocket protocols, addressing the full OWASP API Security Top 10 2023. Techniques include identifying Broken Object Level Authorization (BOLA/IDOR), broken authentication, excessive data exposure, and implementing fuzzing for various API endpoints. Designed for professional penetration testing engagements.

A comprehensive guide detailing systematic techniques for breaking out of container isolation (Docker, Podman, containerd) into the underlying host operating system. Covers exploiting misconfigurations, abusing privileged modes, manipulating Linux capabilities (CAP_SYS_ADMIN), utilizing namespaces (nsenter), and exploiting known container runtimes CVEs. Essential for penetration testing and security red teaming engagements.

A systematic methodology for performing offensive cryptographic analysis. This skill focuses on identifying and exploiting flaws arising from the misuse of cryptographic primitives in real-world applications, rather than breaking the underlying math. Techniques covered include Padding Oracle Attacks (CBC), ECB block manipulation, Hash Length Extension, RSA weaknesses, and PRNG exploitation. Ideal for penetration testing and deep security auditing.

A deep-dive methodology for authorized penetration testing targeting dependency confusion and namespace resolution vulnerabilities across major package ecosystems (npm, PyPI, NuGet, Maven, etc.). This skill details advanced reconnaissance techniques, from analyzing lock files and source maps to exploiting error messages, alongside safe Proof-of-Concept (PoC) creation using DNS canaries for discovery during penetration engagements.

A comprehensive guide covering the full attack lifecycle in Kubernetes. Techniques include service account token theft, RBAC misconfiguration exploitation, kubelet API abuse, pod escape, and cloud metadata compromise across major cloud platforms (AWS, GCP, Azure). Essential for security assessment and penetration testing of cloud-native environments.

This guide provides comprehensive, battle-tested techniques for expanding access across a compromised network. It covers credential-based movement (Pass-the-Hash, Pass-the-Ticket), NTLM relay attacks, and remote execution protocols (WMI, WinRM). Used exclusively in authorized red team engagements and penetration testing, it details command sequences and OPSEC considerations required to reach high-value targets while minimizing detection.