Skill UI

This robust skill manages the entire academic research lifecycle, automating processes from initial idea discovery and literature review to experimental execution, rigorous cross-model review, and final paper drafting. Ideal for researchers who need a comprehensive, autonomous workflow to turn a broad research direction into a polished document, supporting complex parameters like resume capability and varying review difficulties. Use when needing full pipeline automation.

This skill provides a multi-round, deep critical review of research proposals, papers, or experimental results by simulating the perspective of a senior ML reviewer (e.g., NeurIPS/ICML level). It guides the user through identifying logical gaps, missing experiments, and narrative weaknesses, ensuring high fidelity and iterative refinement of technical work.

A comprehensive guide for reverse engineering Android malware. It details how to use JADX and accompanying tools (apktool, androguard) to analyze APK metadata, extract permissions, decompile Java/Kotlin source code, and identify malicious functionalities like data exfiltration, C2 communication, and overlay attacks. Ideal for mobile threat analysis and security research.

This comprehensive guide teaches advanced iOS reverse engineering techniques using Frida dynamic instrumentation. Users can analyze proprietary app logic, extract encryption keys, trace method calls, and bypass anti-tampering or anti-debugging mechanisms without needing source code. It is essential for authorized mobile security testing and protocol analysis.

A deep dive into advanced malware reverse engineering techniques. Learn how to utilize Ghidra's powerful disassembler and decompiler to analyze complex malware binaries. This guide covers identifying C2 communication protocols, extracting cryptographic routines, understanding memory injection, and analyzing low-level assembly code for core logic and evasion techniques. Essential for professional cybersecurity analysts.

A comprehensive deep dive into reverse engineering ransomware encryption mechanisms. It details the analysis of hybrid encryption models (AES/RSA), identifying specific cryptographic APIs (CryptoAPI, CNG), and locating implementation flaws such as weak key generation or IV reuse. This guides authorized security professionals in finding potential decryption opportunities without paying a ransom.

A comprehensive guide and Python tool for reverse engineering Rust-compiled malware. It addresses unique Rust binary challenges, such as non-null-terminated strings and monomorphization. The script extracts crate dependencies, identifies suspicious capabilities (like networking or encryption), and filters for malware-related strings, assisting security researchers in deep binary analysis.

A comprehensive guide to writing robust and maintainable tests in Rust. It covers various advanced testing patterns, including Unit, Integration, Async, and Property-Based testing. Learn how to apply the TDD (Test-Driven Development) cycle (RED-GREEN-REFACTOR) to enhance code reliability and ensure high code coverage.

Grype is an open-source vulnerability scanner from Anchore. It inspects container images, filesystems, and SBOMs for known CVEs. It leverages Syft-generated SBOMs to match packages against multiple vulnerability databases (NVD, GitHub Advisories). Use it for security assessments, auditing, and integrating into CI/CD pipelines to enforce vulnerability standards and manage supply chain risks.

Use Trivy to automate comprehensive vulnerability detection (CVEs, misconfigurations) in Docker container images within CI/CD pipelines. This skill guides users on establishing robust quality gates—such as integrating into GitHub Actions or GitLab CI—to ensure that only secure images are pushed to production registries, covering OS packages, dependencies, and Dockerfile best practices.

Trivy is a comprehensive open-source vulnerability scanner used for detecting vulnerabilities, misconfigurations, secrets, and license violations across OS packages, language dependencies, and container images. It integrates seamlessly into CI/CD pipelines for robust security testing and compliance.

A comprehensive guide detailing the use of Tenable Nessus, an industry-leading vulnerability scanner. Learn how to configure advanced scan policies, perform both authenticated and unauthenticated scans across servers, network devices, and web applications. This skill covers end-to-end processes from execution to result analysis and reporting.